mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-09-20 21:16:22 +02:00
adb248b6d6
This issue was reported by Jann Horn part of Google's Project Zero. Jann's one-sentence summary: entry/middle relays can spoof RELAY_END cells on half-closed streams, which can lead to stream confusion between OP and exit. Fixes #40389
4 lines
190 B
Plaintext
4 lines
190 B
Plaintext
o Major bugfixes (relay, TROVE):
|
|
- Don't allow entry or middle relays to spoof RELAY_END or RELAY_RESOLVED
|
|
cell on half-closed streams. Fixes bug 40389; bugfix on 0.3.5.1-alpha.
|