summaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2015-03-09 11:10:04 -0400
committerNick Mathewson <nickm@torproject.org>2015-03-09 11:10:04 -0400
commitbd80ba9a9fd8309dc97e812e6e889dc3ad622b86 (patch)
tree42fad675b66ae21d8bedddb32161cd5e0c32367a /changes
parent034f51dd0223b4d2969a3ecc2f0dc661b07bc6f1 (diff)
parenta7f75b2056b8bdf59d064268c53a10ac46972380 (diff)
downloadtor-bd80ba9a9fd8309dc97e812e6e889dc3ad622b86.tar.gz
tor-bd80ba9a9fd8309dc97e812e6e889dc3ad622b86.zip
Merge remote-tracking branch 'origin/maint-0.2.6'
Diffstat (limited to 'changes')
-rw-r--r--changes/bug1508310
1 files changed, 10 insertions, 0 deletions
diff --git a/changes/bug15083 b/changes/bug15083
new file mode 100644
index 0000000000..5cc79b5ba1
--- /dev/null
+++ b/changes/bug15083
@@ -0,0 +1,10 @@
+ o Major bugfixes (relay, stability, possible security):
+ - Fix a bug that could lead to a relay crashing with an assertion
+ failure if a buffer of exactly the wrong layout was passed
+ to buf_pullup() at exactly the wrong time. Fixes bug 15083;
+ bugfix on 0.2.0.10-alpha. Patch from 'cypherpunks'.
+
+ - Do not assert if the 'data' pointer on a buffer is advanced to the very
+ end of the buffer; log a BUG message instead. Only assert if it is
+ past that point. Fixes bug 15083; bugfix on 0.2.0.10-alpha.
+