mirror repository of the tor core protocol in case of issues
Go to file
Nick Mathewson be2d37ad3c Fix a pointer arithmetic bug in memarea_alloc()
Fortunately, the arithmetic cannot actually overflow, so long as we
*always* check for the size of potentially hostile input before
copying it.  I think we do, though.  We do check each line against
MAX_LINE_LENGTH, and each object name or object against
MAX_UNPARSED_OBJECT_SIZE, both of which are 128k.  So to get this
overflow, we need to have our memarea allocated way way too high up
in RAM, which most allocators won't actually do.

Bugfix on 0.2.1.1-alpha, where memarea was introduced.

Found by Guido Vranken.
2016-05-25 09:20:37 -04:00
changes Fix a pointer arithmetic bug in memarea_alloc() 2016-05-25 09:20:37 -04:00
contrib bump to 0.2.7.6-dev 2015-12-10 14:24:55 -05:00
doc Try to fix formatting in manpage 2016-01-28 11:52:48 -05:00
m4 Add pkg.m4 to use pkgconfig macros 2014-12-23 11:39:48 -05:00
scripts add more clang checkers; find no new bugs. 2015-09-22 11:37:50 -04:00
src Fix a pointer arithmetic bug in memarea_alloc() 2016-05-25 09:20:37 -04:00
.gitignore add dSYM files to gitignore (they are an osx thing) 2015-08-05 21:41:40 -04:00
acinclude.m4 Be consistent with capitalization, quoting, and spacing of help strings. 2015-03-15 08:25:36 -04:00
autogen.sh Use a nicely written autoconf macro to determine the sign of a type 2013-02-07 16:23:48 -05:00
ChangeLog Fix past changelog spelling again! 2015-09-29 12:49:23 +02:00
configure.ac Merge branch 'bug18841_1_025' into maint-0.2.7 2016-05-11 12:22:36 -04:00
Doxyfile.in Use output variables instead of relative paths. 2015-03-14 13:00:04 -04:00
INSTALL Small fixes for the 2702 implementation 2011-04-02 12:15:08 +02:00
LICENSE Add readpassphrase.c in src/ext 2015-06-17 10:19:40 -04:00
Makefile.am Add "-c 1" to ping6 in test-network-all 2016-05-09 18:12:59 -04:00
Makefile.nmake Clean up the MVSC nmake files so they work again. 2014-09-09 10:27:05 -04:00
README Update verbiage in README to mention autogen.sh 2014-11-04 09:01:46 -05:00
ReleaseNotes Forward-port the changelog and releasenotes 2015-07-12 16:34:30 -04:00

Tor protects your privacy on the internet by hiding the connection
between your Internet address and the services you use. We believe Tor
is reasonably secure, but please ensure you read the instructions and
configure it properly.

To build Tor from source:
        ./configure && make && make install

To build Tor from a just-cloned git repository:
        sh autogen.sh && ./configure && make && make install

Home page:
        https://www.torproject.org/

Download new versions:
        https://www.torproject.org/download/download.html

Documentation, including links to installation and setup instructions:
        https://www.torproject.org/docs/documentation.html

Making applications work with Tor:
        https://wiki.torproject.org/projects/tor/wiki/doc/TorifyHOWTO

Frequently Asked Questions:
        https://www.torproject.org/docs/faq.html


To get started working on Tor development:
        See the doc/HACKING file.