torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Rename --enable-expensive-hardening configure option

Browse Source 
It is renamed to --enable-fragile-hardening.

TROVE-2017-001 was triggerable only through the expensive hardening which is
making the tor daemon abort when the issue is detected. Thus, it makes tor
more at risk of remote crashes but safer against RCE or heartbleed bug
category.

Fixes #21290.

Signed-off-by: David Goulet <dgoulet@torproject.org>
This commit is contained in:
David Goulet
2017-02-01 10:08:40 -05:00
parent f1530d0e5a
commit 5335a8e6f8
2 changed files with 32 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug21290
+7
View File
@@ -0,0 +1,7 @@
o Minor bugfixes (configure, autoconf):
- Rename the configure option --enable-expensive-hardening to
--enable-fragile-hardening. TROVE-2017-001 was triggerable only through
the expensive hardening which is making the tor daemon abort when the
issue is detected. Thus, it makes tor more at risk of remote crashes but
safer against RCE or heartbleed bug category. Fixes bug 21290; bugfix on
tor-0.2.5.4-alpha.