aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorDavid Goulet <dgoulet@torproject.org>2023-12-08 13:19:40 -0500
committerDavid Goulet <dgoulet@torproject.org>2023-12-08 13:19:40 -0500
commit6fbbcdde35bf77ecee194ea60385b306ff28165d (patch)
tree7d09e7394c2efc58c00d706433bc40204969233e /changes
parent1b1f6e8574976918a692f771e22eecd2cdc0fec7 (diff)
parent97b4264f3995766b0e064d9a0f206534b832c6a3 (diff)
downloadtor-6fbbcdde35bf77ecee194ea60385b306ff28165d.tar.gz
tor-6fbbcdde35bf77ecee194ea60385b306ff28165d.zip
Merge remote-tracking branch 'mikeperry-private/bug40897' into maint-0.4.8
Diffstat (limited to 'changes')
-rw-r--r--changes/bug408976
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug40897 b/changes/bug40897
new file mode 100644
index 0000000000..0c41033c9d
--- /dev/null
+++ b/changes/bug40897
@@ -0,0 +1,6 @@
+ o Major bugfixes (TROVE-2023-007, exit):
+ - Improper error propagation from a safety check in conflux leg
+ linking lead to a desynchronization of which legs were part of
+ a conflux set, ultimately causing a UAF and NULL pointer
+ dereference crash on Exit relays. Fixes bug 40897;
+ bugfix on 0.4.8.1-alpha.