summaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2016-02-11 13:01:46 -0500
committerNick Mathewson <nickm@torproject.org>2016-02-11 13:01:46 -0500
commitbe6174f8f6aaaf8f990eb56c5cba16bc5ec0fcea (patch)
tree9d3e447a2ed1447801f15a3bec4d7bdca66d9d30 /changes
parentd920cbb82c2203b328d66d6c9d8f28fd35608560 (diff)
parent740421af194b890c24242a834ed03ffc5c4c16ab (diff)
downloadtor-be6174f8f6aaaf8f990eb56c5cba16bc5ec0fcea.tar.gz
tor-be6174f8f6aaaf8f990eb56c5cba16bc5ec0fcea.zip
Merge branch 'maint-0.2.6' into maint-0.2.7
Diffstat (limited to 'changes')
-rw-r--r--changes/bug181627
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/bug18162 b/changes/bug18162
new file mode 100644
index 0000000000..0844d6f62f
--- /dev/null
+++ b/changes/bug18162
@@ -0,0 +1,7 @@
+ o Major bugfixes (security, pointers):
+
+ - Avoid a difficult-to-trigger heap corruption attack when extending
+ a smartlist to contain over 16GB of pointers. Fixes bug #18162;
+ bugfix on Tor 0.1.1.11-alpha, which fixed a related bug
+ incompletely. Reported by Guido Vranken.
+