Merge branch 'maint-0.2.6' into maint-0.2.7

2024-12-06 19:41:15 +01:00 · 2016-12-20 18:14:21 -05:00
parent b49369badd b18bde23cf
commit a9c8a5ff18
3 changed files with 18 additions and 5 deletions
@@ -0,0 +1,11 @@
+  o Major bugfixes (parsing, security):
+
+    - Fix a bug in parsing that could cause clients to read a single
+      byte past the end of an allocated region. This bug could be
+      used to cause hardened clients (built with
+      --enable-expensive-hardening) to crash if they tried to visit
+      a hostile hidden service.  Non-hardened clients are only
+      affected depending on the details of their platform's memory
+      allocator. Fixes bug 21018; bugfix on 0.2.0.8-alpha. Found by
+      using libFuzzer. Also tracked as TROVE-2016-12-002 and as
+      CVE-2016-1254.