diff options
| author | Nick Mathewson <nickm@torproject.org> | 2014-10-21 13:14:27 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2014-10-21 13:14:27 -0400 |
| commit | 3826a88fc072f97673ee3b106f3dd1b93c875b27 (patch) | |
| tree | 2681f478ed1fe8b56025109172f8b6da2c029d0f /changes | |
| parent | e3d166b7a63b4f0c248e20b759dba2ccb8d30092 (diff) | |
| parent | a1c6a40c22736aa66ce59341689392ed80cdd2dc (diff) | |
| download | tor-3826a88fc072f97673ee3b106f3dd1b93c875b27.tar.gz tor-3826a88fc072f97673ee3b106f3dd1b93c875b27.zip | |
Merge remote-tracking branch 'teor/bug13476-improve-time-handling'
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug13476-improve-time-handling | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/changes/bug13476-improve-time-handling b/changes/bug13476-improve-time-handling new file mode 100644 index 0000000000..94ab95bf7c --- /dev/null +++ b/changes/bug13476-improve-time-handling @@ -0,0 +1,20 @@ + o Minor bugfixes: + - Set the correct day of year value when the system's localtime(_r) + or gmtime(_r) functions fail to set struct tm. Not externally visible. + Fixes bug 13476. + - Avoid unlikely signed integer overflow in tor_timegm on systems with + 32-bit time_t. + Fixes bug 13476. + o Minor enhancements (validation): + - Check all date/time values passed to tor_timegm and parse_rfc1123_time + for validity, taking leap years into account. + Improves HTTP header validation. + Implemented with bug 13476. + - Clamp year values returned by system localtime(_r) and gmtime(_r) + to year 1 in correct_tm. This ensures tor can read any values it + writes out. + Fixes bug 13476. + o Minor enhancements (testing): + - Add unit tests for tor_timegm signed overflow, tor_timegm and + parse_rfc1123_time validity checks, correct_tm year clamping. + Unit tests (visible) fixes in bug 13476. |