mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-11-30 23:53:32 +01:00
50ff24e276
When parsing detached signature, we make sure that we use the length of the digest algorithm instead of an hardcoded DIGEST256_LEN in order to avoid comparing bytes out of bound with a smaller digest length such as SHA1. Fixes #19066 Signed-off-by: David Goulet <dgoulet@torproject.org>
6 lines
322 B
Plaintext
6 lines
322 B
Plaintext
o Minor bugfixes (directory authority):
|
|
- When parsing detached signature, make sure we use the length of the
|
|
digest algorithm instead of an hardcoded DIGEST256_LEN in order to
|
|
avoid comparing bytes out of bound with a smaller digest length such
|
|
as SHA1. Fixes #19066; bugfix on tor-0.2.2.6-alpha.
|