nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-28 06:13:31 +01:00
Code Issues Packages Projects Releases Wiki Activity
ac648fa307
tor/changes/bug33131

4 lines
150 B
Plaintext
Raw Normal View History

core/mainloop: Limit growth of conn->inbuf If the buf_t's length could potentially become greater than INT_MAX - 1, it sets off an IF_BUG_ONCE in buf_read_from_tls(). All of the rest of the buffers.c code has similar BUG/asserts for this invariant.
2020-03-03 08:01:05 +01:00
o Minor bugfixes (mainloop):
- Better guard against growing a buffer past its maximum 2GB in size.
Fixes bug 33131; bugfix on 0.3.0.4-rc.
Reference in New Issue Copy Permalink