mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-12-06 19:41:15 +01:00
Nick Mathewson
3d8b73db55
Failure to do so left us open to a remotely triggerable assertion failure. Fixes CVE-2012-2249; bugfix on 0.2.3.6-alpha. Reported by "some guy from France". This patch is a forward-port to 0.2.4, to work with the new channel logic.
6 lines
300 B
Plaintext
6 lines
300 B
Plaintext
o Major bugfixes (security):
|
|
- Discard extraneous renegotiation attempts once the V3 link
|
|
protocol has been initiated. Failure to do so left us open to
|
|
a remotely triggerable assertion failure. Fixes CVE-2012-2249;
|
|
bugfix on 0.2.3.6-alpha. Reported by "some guy from France".
|