Check descriptor ID in addition to HS ID when saving a v2 hs descriptor

Fixes bug 13214; reported by 'special'.
This commit is contained in:
Nick Mathewson
2014-11-03 14:02:47 -05:00
parent 9e2608b0d3
commit b10e5ac7b8
4 changed files with 29 additions and 1 deletions
+7
View File
@@ -0,0 +1,7 @@
o Minor bugfixes (hidden services):
- When fetching hidden service descriptors, check not only for
whether we got the hidden service we had in mind, but also
whether we got the particular descriptors we wanted. This
prevents a class of inefficient but annoying DoS attacks by
hidden service directories. Fixes bug 13214; bugfix on
0.2.1.6-alpha. Reported by "special".