From 373a1bc40e88d90e75f4a70b7d2018fe7288035a Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Mon, 10 Jan 2011 12:12:11 -0500 Subject: Impose maximum sizes on parsed objects An object, you'll recall, is something between -----BEGIN----- and -----END----- tags in a directory document. Some of our code, as doorss has noted in bug 2352, could assert if one of these ever overflowed SIZE_T_CEILING but not INT_MAX. As a solution, I'm setting a maximum size on a single object such that neither of these limits will ever be hit. I'm also fixing the INT_MAX checks, just to be sure. --- changes/bug2352 | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 changes/bug2352 (limited to 'changes') diff --git a/changes/bug2352 b/changes/bug2352 new file mode 100644 index 0000000000..744dbdb20f --- /dev/null +++ b/changes/bug2352 @@ -0,0 +1,6 @@ + o Minor bugfixes + - Fix some potential asserts and partsing issues with grossly + malformed router caches. Fixes bug 2352. Found by doorss. + Bugfix on Tor 0.2.1.27. + + -- cgit v1.2.3-54-g00ecf