mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-11-28 06:13:31 +01:00
c4f2faf301
Fixes bug 20894; bugfix on 0.2.0.16-alpha. We already applied a workaround for this as 20834, so no need to freak out (unless you didn't apply 20384 yet).
9 lines
510 B
Plaintext
9 lines
510 B
Plaintext
o Major bugfixes (HTTP, parsing):
|
|
- When parsing a malformed content-length field from an HTTP message,
|
|
do not read off the end of the buffer. This bug was a potential
|
|
remote denial-of-service attack against Tor clients and relays.
|
|
A workaround was released in October 2016, which prevents this
|
|
bug from crashing Tor. This is a fix for the underlying issue,
|
|
which should no longer matter (if you applied the earlier patch).
|
|
Fixes bug 20894; bugfix on 0.2.0.16-alpha.
|