Add a fix for the buf_pullup bug that Vektor reported

This commit is contained in:
Nick Mathewson
2011-12-14 16:38:43 -05:00
parent ff2c9acbb3
commit 9d0777839b
2 changed files with 10 additions and 2 deletions
+7
View File
@@ -0,0 +1,7 @@
o Major bugfixes:
- Fix a heap overflow bug that could occur when trying to pull
data into the first chunk of a buffer, when that chunk had
already had some data drained from it. Fixes CVE-2011-2778;
bugfix on 0.2.0.16-alpha. Reported by "Vektor".