Merge branch 'maint-0.2.3'

2024-12-06 19:41:15 +01:00 · 2012-07-01 05:32:37 -04:00
parent ed2601f2be c32ec9c425
commit 6061cd584c
2 changed files with 22 additions and 0 deletions
@@ -0,0 +1,8 @@
+  o Security fixes:
+    - Tear down the circuit if we get an unexpected SENDME cell. Clients
+      could use this trick to make their circuits receive cells faster
+      than our flow control would have allowed, or to gum up the network,
+      or possibly to do targeted memory denial-of-service attacks on
+      entry nodes. Fixes bug 6252. Bugfix on the 54th commit on Tor --
+      from July 2002, before the release of Tor 0.0.0.
+