tor/doc/spec
Sebastian Hahn 026e7987ad Sanity-check consensus param values
We need to make sure that the worst thing that a weird consensus param
can do to us is to break our Tor (and only if the other Tors are
reliably broken in the same way) so that the majority of directory
authorities can't pull any attacks that are worse than the DoS that
they can trigger by simply shutting down.

One of these worse things was the cbtnummodes parameter, which could
lead to heap corruption on some systems if the value was sufficiently
large.

This commit fixes this particular issue and also introduces sanity
checking for all consensus parameters.
2011-01-15 19:42:17 +01:00
..
proposals Clarify that implementation is for discussion of implementation 2010-08-03 14:25:07 -04:00
address-spec.txt Change Natd into NATD in our options. 2010-11-10 15:48:26 +01:00
bridges-spec.txt Remove all svn metadata minus what I missed. 2009-05-05 17:05:46 +02:00
control-spec-v0.txt Remove all svn metadata minus what I missed. 2009-05-05 17:05:46 +02:00
control-spec.txt Specified grammars for orconn-status and entry-guards for Tor versions 0.1.2.2-alpha through 0.2.2.1-alpha with feature VERBOSE_NAMES turned off. 2010-12-01 12:44:48 -05:00
dir-spec-v1.txt Remove all svn metadata minus what I missed. 2009-05-05 17:05:46 +02:00
dir-spec-v2.txt Remove all svn metadata minus what I missed. 2009-05-05 17:05:46 +02:00
dir-spec.txt Sanity-check consensus param values 2011-01-15 19:42:17 +01:00
Makefile.am ship the bridges spec file in the tarball too 2010-01-15 15:56:53 -05:00
path-spec.txt Sanity-check consensus param values 2011-01-15 19:42:17 +01:00
rend-spec.txt Merge commit 'karsten/rendspec-koryk' 2010-08-25 16:44:37 -04:00
socks-extensions.txt Remove all svn metadata minus what I missed. 2009-05-05 17:05:46 +02:00
tor-spec.txt Merge branch 'bug1184' 2010-09-15 14:20:28 -04:00
version-spec.txt Remove all svn metadata minus what I missed. 2009-05-05 17:05:46 +02:00