We were comparing the raw BridgePassword entry with a base64'ed

version of it, when handling a "/tor/networkstatus-bridges"
directory request. Now compare correctly. Noticed by Veracode.


svn:r13609
This commit is contained in:
Roger Dingledine
2008-02-20 02:05:28 +00:00
parent f34d46e7dd
commit f2ed011813
2 changed files with 8 additions and 13 deletions
+3
View File
@@ -48,6 +48,9 @@ Changes in version 0.2.0.20-?? - 2008-02-??
- Make the new hidden service code respect the SafeLogging setting.
Bugfix on 0.2.0.x. Patch from Karsten.
- Detect size overflow in zlib code.
- We were comparing the raw BridgePassword entry with a base64'ed
version of it, when handling a "/tor/networkstatus-bridges"
directory request. Now compare correctly. Noticed by Veracode.
o Code simplifications and refactoring:
- Remove the tor_strpartition function: its logic was confused,