torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Kill non-open OR connections with any data on their inbufs.

Browse Source 
This fixes a DoS issue where a client could send so much data in 5
minutes that they exhausted the server's RAM.  Fix for bug 5934 and
6007.  Bugfix on 0.2.0.20-rc, which enabled the v2 handshake.
This commit is contained in:
Nick Mathewson
2012-05-31 11:19:35 -04:00
parent 3a9351b57e
commit af54a01828
2 changed files with 25 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug6007
+5
View File
@@ -0,0 +1,5 @@
o Major bugfixes (security):
- When waiting for a client to renegotiate, don't allow it to add
any bytes to the input buffer. This fixes a DoS issue. Fix for
bugs 6007 and 5934; bugfix on 0.2.0.20-rc.