From 184a2dbbdd27f958f5ac290fe030d1fac2959157 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Tue, 23 Dec 2014 10:55:25 -0500 Subject: [PATCH] whoops; missing changes file for 14013 --- changes/bug14013 | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 changes/bug14013 diff --git a/changes/bug14013 b/changes/bug14013 new file mode 100644 index 0000000000..640cf859f5 --- /dev/null +++ b/changes/bug14013 @@ -0,0 +1,6 @@ + o Major bugfixes: + - When reading a hexadecimal, base-32, or base-64 encoded value + from a string, always overwrite the complete output buffer. This + prevents some bugs where we would look at (but fortunately, not + reveal) uninitialized memory on the stack. Fixes bug 14013; + bugfix on all versions of Tor.