Fix TROVE-2021-006: Out-of-bounds read on v3 desc parsing

This commit is contained in:
George Kadianakis
2021-05-18 17:06:57 +03:00
committed by Nick Mathewson
parent adb248b6d6
commit f57b5c48e0
2 changed files with 6 additions and 1 deletions
+4
View File
@@ -0,0 +1,4 @@
o Major bugfixes (security, denial of service, onion services):
- Fix an out-of-bounds memory access in v3 descriptor parsing. Fixes bug
40392; bugfix on 0.3.0.1-alpha. This issue is also tracked as
TROVE-2021-006. Reported by Sergei Glazunov from Google's Project Zero.