torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Don't atoi off the end of a buffer chunk.

Browse Source 
Fixes bug 20894; bugfix on 0.2.0.16-alpha.

We already applied a workaround for this as 20834, so no need to
freak out (unless you didn't apply 20384 yet).
This commit is contained in:
Nick Mathewson
2017-02-13 09:39:46 -05:00
parent 4a2afd5b33
commit c4f2faf301
7 changed files with 131 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug20894
+8
View File
@@ -0,0 +1,8 @@
o Major bugfixes (HTTP, parsing):
- When parsing a malformed content-length field from an HTTP message,
do not read off the end of the buffer. This bug was a potential
remote denial-of-service attack against Tor clients and relays.
A workaround was released in October 2016, which prevents this
bug from crashing Tor. This is a fix for the underlying issue,
which should no longer matter (if you applied the earlier patch).
Fixes bug 20894; bugfix on 0.2.0.16-alpha.