summaryrefslogtreecommitdiff
path: root/changes/microdesc-double-free
diff options
context:
space:
mode:
Diffstat (limited to 'changes/microdesc-double-free')
-rw-r--r--changes/microdesc-double-free7
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/microdesc-double-free b/changes/microdesc-double-free
new file mode 100644
index 0000000000..932cc754ba
--- /dev/null
+++ b/changes/microdesc-double-free
@@ -0,0 +1,7 @@
+ o Security fixes:
+ - Don't double-free a parsable, but invalid, microdescriptor, even
+ if it is followed in the blob we're parsing by an unparsable
+ microdescriptor. Fixes an issue reported in a comment on bug 2954.
+ Bugfix on 0.2.2.6-alpha; fix by "cypherpunks".
+
+