tor/changes/tolen_asserts

  o Major bugfixes (security)
    - Fix a heap overflow bug where an adversary could cause heap
      corruption.  This bug potentially allows remote code execution
      attacks.  Found by debuger.  Fixes CVE-2011-0427.  Bugfix on
      0.1.2.10-rc.
  o Defensive programming
    - Introduce output size checks on all of our decryption functions.
Fix a heap overflow found by debuger, and make it harder to make that mistake again Our public key functions assumed that they were always writing into a large enough buffer. In one case, they weren't. (Incorporates fixes from sebastian) 2011-01-13 20:36:41 +01:00			`o Major bugfixes (security)`
			`- Fix a heap overflow bug where an adversary could cause heap`
make the description of tolen_asserts more dire We have a CVE # for this bug. 2011-01-15 16:54:58 +01:00			`corruption. This bug potentially allows remote code execution`
			`attacks. Found by debuger. Fixes CVE-2011-0427. Bugfix on`
			`0.1.2.10-rc.`
Fix a heap overflow found by debuger, and make it harder to make that mistake again Our public key functions assumed that they were always writing into a large enough buffer. In one case, they weren't. (Incorporates fixes from sebastian) 2011-01-13 20:36:41 +01:00			`o Defensive programming`
			`- Introduce output size checks on all of our decryption functions.`