2 Commits

Author	SHA1	Message	Date
Nick Mathewson	efca9ce41c	Clarify new intended strategy with TROVE-2021-001 ... We're going to disable this feature in all versions for now.	2021-03-15 08:53:36 -04:00
Nick Mathewson	ede88c374c	Disable the dump_desc() function. ... It can be called with strings that should have been length-delimited, but which in fact are not. This can cause a CPU-DoS bug or, in a worse case, a crash. Since this function isn't essential, the best solution for older Tors is to just turn it off. Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was introduced.	2021-02-19 12:31:19 -05:00