tor/trove-2018-001.1 at b61d40c8a24ccbd5a08038f9d4d2d38cf987c400 - tor - Git with a cup of Datura seeds

nihilist/tor

mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-01 08:03:31 +01:00

Nick Mathewson 65f2eec694 Correctly handle NULL returns from parse_protocol_list when voting.

In some cases we had checked for it, but in others we had not.  One
of these cases could have been used to remotely cause
denial-of-service against directory authorities while they attempted
to vote.

Fixes TROVE-2018-001.

2018-03-01 16:05:17 -05:00

7 lines

278 B

Groff

Raw Blame History

   o Major bugfixes (denial-of-service, directory authority):
     - Fix a protocol-list handling bug that could be used to remotely crash
       directory authorities with a null-pointer exception. Fixes bug 25074;
       bugfix on 0.2.9.4-alpha. Also tracked as TROVE-2018-001.