| commit | d5cfbf96a2dbbee4501da92d5a21d0c66732ae24 | |
| author | Nick Mathewson <nickm@torproject.org> | |
| Mon, 5 Aug 2013 15:40:33 +0000 (5 11:40 -0400) | ||
| committer | Roger Dingledine <arma@torproject.org> | |
| Sat, 10 Aug 2013 21:49:51 +0000 (10 17:49 -0400) | ||
| tree | 2a4983a697ac6dc5faf87b39460cb03edbbe5f88 | treesnapshot (tar.gz zip) |
| parent | 0a0f93d277046a524740ad110060abf8ed137b8f | commitdiff |
Fix an uninitialized-read when parsing v3 introduction requests.
Fortunately, later checks mean that uninitialized data can't get sent
to the network by this bug. Unfortunately, reading uninitialized heap
*can* (in some cases, with some allocators) cause a crash if you get
unlucky and go off the end of a page.
Found by asn. Bugfix on 0.2.4.1-alpha.
Fortunately, later checks mean that uninitialized data can't get sent
to the network by this bug. Unfortunately, reading uninitialized heap
*can* (in some cases, with some allocators) cause a crash if you get
unlucky and go off the end of a page.
Found by asn. Bugfix on 0.2.4.1-alpha.
| changes/v3_intro_len | [new file with mode: 0644] | blob |
| src/or/rendservice.c | diffblobblamehistory | |
| src/or/rendservice.h | diffblobblamehistory |