nihilist/tor - tor - Git with a cup of Datura seeds

nihilist/tor

Fork 0

mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-24 20:33:31 +01:00

Commit Graph

Author	SHA1	Message	Date
Nick Mathewson	efca9ce41c	Clarify new intended strategy with TROVE-2021-001 We're going to disable this feature in all versions for now.	2021-03-15 08:53:36 -04:00
Nick Mathewson	ede88c374c	Disable the dump_desc() function. It can be called with strings that should have been length-delimited, but which in fact are not. This can cause a CPU-DoS bug or, in a worse case, a crash. Since this function isn't essential, the best solution for older Tors is to just turn it off. Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was introduced.	2021-02-19 12:31:19 -05:00

Author

SHA1

Message

Date

Nick Mathewson

efca9ce41c

Clarify new intended strategy with TROVE-2021-001

We're going to disable this feature in all versions for now.

2021-03-15 08:53:36 -04:00

Nick Mathewson

ede88c374c

Disable the dump_desc() function.

It can be called with strings that should have been
length-delimited, but which in fact are not.  This can cause a
CPU-DoS bug or, in a worse case, a crash.

Since this function isn't essential, the best solution for older
Tors is to just turn it off.

Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was
introduced.

2021-02-19 12:31:19 -05:00

2 Commits