Merge branch 'maint-0.2.6' into maint-0.2.7

This commit is contained in:
Nick Mathewson
2017-02-07 08:55:07 -05:00
2 changed files with 10 additions and 1 deletions
+7
View File
@@ -0,0 +1,7 @@
o Major bugfixes (key management):
- If OpenSSL fails to generate an RSA key, do not retain a dangling pointer
to the previous (uninitialized) key value. The impact here should be
limited to a difficult-to-trigger crash, if OpenSSL is running an
engine that makes key generation failures possible, or if OpenSSL runs
out of memory. Fixes bug 19152; bugfix on 0.2.1.10-alpha. Found by
Yuan Jochen Kang, Suman Jana, and Baishakhi Ray.