diff options
| author | cypherpunks <cypherpunks@torproject.org> | 2015-11-11 11:50:09 +0100 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2015-12-09 10:22:26 -0500 |
| commit | 3d0d2a511c13d6d24be73c8651374c4d7db99379 (patch) | |
| tree | 43581fd893a7ecbce59b27d0fb747e0bf8e710b4 /src/test/test_rendcache.c | |
| parent | 2a965b7537a7f46ec22f998305280a4ad89018f0 (diff) | |
| download | tor-3d0d2a511c13d6d24be73c8651374c4d7db99379.tar.gz tor-3d0d2a511c13d6d24be73c8651374c4d7db99379.zip | |
Fix buffer over-reads in the directory tests
The tests pass empty digest strings to the dir_server_new function which
copies it into a directory server structure. The copy operation expects
the digest strings to be DIGEST_LEN characters long.
Because the length of the empty digest strings are lower than
DIGEST_LEN, the copy operation reads outside the digest strings which
leads to buffer over-reads.
The issue is resolved by using character arrays with a size of
DIGEST_LEN.
Patch on 4ff08bb5811ddfe554e597d129ec48a774364480.
Diffstat (limited to 'src/test/test_rendcache.c')
0 files changed, 0 insertions, 0 deletions