Nick Mathewson ede88c374c Disable the dump_desc() function. ...

It can be called with strings that should have been
length-delimited, but which in fact are not.  This can cause a
CPU-DoS bug or, in a worse case, a crash.

Since this function isn't essential, the best solution for older
Tors is to just turn it off.

Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was
introduced.

2021-02-19 12:31:19 -05:00

..

app

Merge remote-tracking branch 'tor-github/pr/1827/head' into maint-0.3.5

2020-10-07 09:29:07 -04:00

config

Merge branch 'maint-0.2.9' into maint-0.3.5

2019-12-06 16:02:07 -05:00

core

Merge branch 'ticket40269_035_01' into maint-0.3.5

2021-02-03 09:11:09 -05:00

ext

Fix Keccak undefined behavior on exotic platforms.

2020-12-17 13:49:17 +02:00

feature

Disable the dump_desc() function.

2021-02-19 12:31:19 -05:00

lib

Merge branch 'tor-gitlab/mr/50' into maint-0.3.5

2021-01-28 12:46:24 -05:00

rust

Implement proposal 318: Limit protovers to 0..63

2020-10-14 11:28:37 -04:00

test

node: Move reentry set to use a digestmap_t

2021-02-03 08:54:02 -05:00

tools

Bump copyright date to 2019.

2019-01-16 12:32:32 -05:00

trunnel

Merge remote-tracking branch 'nickm/ticket30454_034_01_squashed' into ticket30454_035_01

2019-05-22 11:43:55 -04:00

win32

Bump to 0.3.5.13-dev.

2021-02-03 13:37:28 -05:00

include.am

Extract the non-stats part of geoip into a new src/lib/geoip.

2018-09-27 10:26:01 -04:00