Merge remote-tracking branch 'public/bug17404_024' into maint-0.2.4

This commit is contained in:
Nick Mathewson
2017-02-07 08:37:07 -05:00
2 changed files with 10 additions and 0 deletions
+6
View File
@@ -0,0 +1,6 @@
o Major bugfixes (security, correctness):
- Fix a programming error that could cause us to read 4 bytes before
the beginning of an openssl string. This could be used to provoke
a crash on systems with an unusual malloc implementation, or
systems with unsual hardening installed. Fixes bug 17404; bugfix
on 0.2.3.6-alpha.