summaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2016-02-11 12:57:28 -0500
committerNick Mathewson <nickm@torproject.org>2016-02-11 13:00:25 -0500
commit740421af194b890c24242a834ed03ffc5c4c16ab (patch)
treea0238c60551b5ea8fef42367882c0e78d86040d7 /changes
parent44ad3be221fb8e5e648c6d56054fb1d8596a645b (diff)
parentce289e2cb5099a4abe4468049dc0d262b65bfa17 (diff)
downloadtor-740421af194b890c24242a834ed03ffc5c4c16ab.tar.gz
tor-740421af194b890c24242a834ed03ffc5c4c16ab.zip
Merge branch 'maint-0.2.5' into maint-0.2.6
Diffstat (limited to 'changes')
-rw-r--r--changes/bug181627
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/bug18162 b/changes/bug18162
new file mode 100644
index 0000000000..0844d6f62f
--- /dev/null
+++ b/changes/bug18162
@@ -0,0 +1,7 @@
+ o Major bugfixes (security, pointers):
+
+ - Avoid a difficult-to-trigger heap corruption attack when extending
+ a smartlist to contain over 16GB of pointers. Fixes bug #18162;
+ bugfix on Tor 0.1.1.11-alpha, which fixed a related bug
+ incompletely. Reported by Guido Vranken.
+