diff options
Diffstat (limited to 'changes')
-rw-r--r-- | changes/bug40472 | 6 | ||||
-rw-r--r-- | changes/bug40515 | 6 |
2 files changed, 12 insertions, 0 deletions
diff --git a/changes/bug40472 b/changes/bug40472 new file mode 100644 index 0000000000..d87c1dc2cc --- /dev/null +++ b/changes/bug40472 @@ -0,0 +1,6 @@ + o Minor bugfixes (performance, DoS): + - Fix one case of a not-especially viable denial-of-service attack found + by OSS-Fuzz in our consensus-diff parsing code. This attack causes a + lot small of memory allocations and then immediately frees them: this + is only slow when running with all the sanitizers enabled. Fixes one + case of bug 40472; bugfix on 0.3.1.1-alpha. diff --git a/changes/bug40515 b/changes/bug40515 new file mode 100644 index 0000000000..d315e28411 --- /dev/null +++ b/changes/bug40515 @@ -0,0 +1,6 @@ + o Minor bugfixes (controller, path bias): + - When a circuit's path is specified, in full or in part, from the + controller API, do not count that circuit towards our path-bias + calculations. (Doing so was incorrect, since we cannot tell whether + the controller is selecting relays randomly.) Resolves a "Bug" + warning. Fixes bug 40515; bugfix on 0.2.4.10-alpha. |