torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3

Browse Source 
Conflicts:
	src/or/routerlist.c
This commit is contained in:
Nick Mathewson
2012-08-03 12:04:11 -04:00
parent 82c5e385cb d48cebc5e4
commit 93be3a8822
2 changed files with 33 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/pathsel-BUGGY-a
+14
View File
@@ -0,0 +1,14 @@
o Security fixes:
- Try to leak less information about what relays a client is
choosing to a side-channel attacker. Previously, a Tor client
would stop iterating through the list of available relays as
soon as it had chosen one, thus finishing a little earlier
when it picked a router earlier in the list. If an attacker
can recover this timing information (nontrivial but not
proven to be impossible), they could learn some coarse-
grained information about which relays a client was picking
(middle nodes in particular are likelier to be affected than
exits). The timing attack might be mitigated by other factors
(see bug #6537 for some discussion), but it's best not to
take chances. Fixes bug 6537; bugfix on 0.0.8rc1.