aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
Diffstat (limited to 'changes')
-rw-r--r--changes/bug404726
-rw-r--r--changes/bug405156
2 files changed, 12 insertions, 0 deletions
diff --git a/changes/bug40472 b/changes/bug40472
new file mode 100644
index 0000000000..d87c1dc2cc
--- /dev/null
+++ b/changes/bug40472
@@ -0,0 +1,6 @@
+ o Minor bugfixes (performance, DoS):
+ - Fix one case of a not-especially viable denial-of-service attack found
+ by OSS-Fuzz in our consensus-diff parsing code. This attack causes a
+ lot small of memory allocations and then immediately frees them: this
+ is only slow when running with all the sanitizers enabled. Fixes one
+ case of bug 40472; bugfix on 0.3.1.1-alpha.
diff --git a/changes/bug40515 b/changes/bug40515
new file mode 100644
index 0000000000..d315e28411
--- /dev/null
+++ b/changes/bug40515
@@ -0,0 +1,6 @@
+ o Minor bugfixes (controller, path bias):
+ - When a circuit's path is specified, in full or in part, from the
+ controller API, do not count that circuit towards our path-bias
+ calculations. (Doing so was incorrect, since we cannot tell whether
+ the controller is selecting relays randomly.) Resolves a "Bug"
+ warning. Fixes bug 40515; bugfix on 0.2.4.10-alpha.