summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--changes/bug208945
1 files changed, 3 insertions, 2 deletions
diff --git a/changes/bug20894 b/changes/bug20894
index 6443396308..2dbf9b9aa9 100644
--- a/changes/bug20894
+++ b/changes/bug20894
@@ -3,6 +3,7 @@
do not read off the end of the buffer. This bug was a potential
remote denial-of-service attack against Tor clients and relays.
A workaround was released in October 2016, which prevents this
- bug from crashing Tor. This is a fix for the underlying issue,
+ bug from crashing Tor. This is a fix for the underlying issue,
which should no longer matter (if you applied the earlier patch).
- Fixes bug 20894; bugfix on 0.2.0.16-alpha.
+ Fixes bug 20894; bugfix on 0.2.0.16-alpha. Bug found by fuzzing
+ using AFL (http://lcamtuf.coredump.cx/afl/).