torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix a nigh-impossible overflow in cpuworker.c

Browse Source 
When we compute the estimated microseconds we need to handle our
pending onionskins, we could (in principle) overflow a uint32_t if
we ever had 4 million pending onionskins before we had any data
about how onionskins take.  Nevertheless, let's compute it properly.

Fixes bug 8210; bugfix on 0.2.4.10. Found by coverity; this is CID
980651.
This commit is contained in:
Nick Mathewson
2013-02-11 16:40:48 -05:00
parent 9b2bb901d7
commit 719940df2b
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug8210
+6
View File
@@ -0,0 +1,6 @@
o Minor bugfixes:
- Fix an impossible-to-trigger integer overflow when
estimating how long out onionskin queue would take. (This overflow
would require us to accept 4 million onionskins before processing
100 of them.) Fixes bug 8210; bugfix on 0.2.4.10-alpha.