aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-02-07Make memwipe() do nothing when passed a NULL pointer or zero sizeteor (Tim Wilson-Brown)
Check size argument to memwipe() for underflow. Closes bug #18089. Reported by "gk", patch by "teor". Bugfix on 0.2.3.25 and 0.2.4.6-alpha (#7352), commit 49dd5ef3 on 7 Nov 2012.
2017-02-07Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2017-02-07Fix out-of-bounds read in INTRODUCE2 client authJohn Brooks
The length of auth_data from an INTRODUCE2 cell is checked when the auth_type is recognized (1 or 2), but not for any other non-zero auth_type. Later, auth_data is assumed to have at least REND_DESC_COOKIE_LEN bytes, leading to a client-triggered out of bounds read. Fixed by checking auth_len before comparing the descriptor cookie against known clients. Fixes #15823; bugfix on 0.2.1.6-alpha.
2017-01-11Merge branch 'maint-0.2.7' into release-0.2.7Nick Mathewson
2017-01-11Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2017-01-11Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2017-01-11Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2017-01-04Update geoip and geoip6 to the January 4 2017 database.Karsten Loesing
2016-12-20Merge branch 'maint-0.2.7' into release-0.2.7Nick Mathewson
2016-12-20Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-12-20Add a one-word sentinel value of 0x0 at the end of each buf_t chunkNick Mathewson
This helps protect against bugs where any part of a buf_t's memory is passed to a function that expects a NUL-terminated input. It also closes TROVE-2016-10-001 (aka bug 20384).
2016-12-20Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
("ours" merge because there is a separate 20384 patch for 026)
2016-12-20Add a one-word sentinel value of 0x0 at the end of each buf_t chunkNick Mathewson
This helps protect against bugs where any part of a buf_t's memory is passed to a function that expects a NUL-terminated input.
2016-12-20Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
(ours merge -- there is a separate 0.2.5 patch for 20384.)
2016-12-20Add a one-word sentinel value of 0x0 at the end of each buf_t chunkNick Mathewson
This helps protect against bugs where any part of a buf_t's memory is passed to a function that expects a NUL-terminated input.
2016-12-20Merge branch 'maint-0.2.7' into release-0.2.7Nick Mathewson
2016-12-20Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-12-20Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2016-12-20Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2016-12-18Make log message warn about detected attempts to exploit 21018.Nick Mathewson
2016-12-18Fix parsing bug with unecognized token at EOSNick Mathewson
In get_token(), we could read one byte past the end of the region. This is only a big problem in the case where the region itself is (a) potentially hostile, and (b) not explicitly nul-terminated. This patch fixes the underlying bug, and also makes sure that the one remaining case of not-NUL-terminated potentially hostile data gets NUL-terminated. Fix for bug 21018, TROVE-2016-12-002, and CVE-2016-1254
2016-12-09Merge branch 'maint-0.2.7' into release-0.2.7Nick Mathewson
2016-12-09Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-12-09Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2016-12-09Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2016-12-09Update geoip and geoip6 to the December 7 2016 database.Karsten Loesing
2016-11-07Merge branch 'maint-0.2.7' into release-0.2.7Nick Mathewson
2016-11-07Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-11-07Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2016-11-07Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2016-11-07Update geoip and geoip6 to the November 3 2016 database.Karsten Loesing
2016-10-06Merge branch 'maint-0.2.7' into release-0.2.7Nick Mathewson
2016-10-06Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-10-06Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2016-10-06Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2016-10-05Update geoip and geoip6 to the October 6 2016 database.Karsten Loesing
2016-09-07Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-09-07Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2016-09-07Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2016-09-07Update geoip and geoip6 to the September 6 2016 database.Karsten Loesing
2016-08-24Merge branch 'maint-0.2.7' into release-0.2.7Nick Mathewson
2016-08-24Changes file for bifroestNick Mathewson
2016-08-24Replace Tonga with Bifroest.Isis Lovecruft
* FIXES #19728: https://bugs.torproject.org/19728 * CLOSES #19690: https://bugs.torproject.org/19690
2016-08-12Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-08-12Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2016-08-12Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2016-08-12Update geoip and geoip6 to the August 2 2016 database.Karsten Loesing
2016-07-19Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-07-19Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2016-07-19Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion