| commit | ede88c374cd61e1e362422718625707a770cffff | |
| author | Nick Mathewson <nickm@torproject.org> | |
| Fri, 19 Feb 2021 17:31:19 +0000 (19 12:31 -0500) | ||
| committer | Nick Mathewson <nickm@torproject.org> | |
| Fri, 19 Feb 2021 17:31:19 +0000 (19 12:31 -0500) | ||
| tree | bc83ba025390609e65e6cce0985acc1ba22e12a3 | treesnapshot (tar.gz zip) |
| parent | 21317c92296f0c08176c8788f8f2bcf501e78032 | commitdiff |
Disable the dump_desc() function.
It can be called with strings that should have been
length-delimited, but which in fact are not. This can cause a
CPU-DoS bug or, in a worse case, a crash.
Since this function isn't essential, the best solution for older
Tors is to just turn it off.
Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was
introduced.
It can be called with strings that should have been
length-delimited, but which in fact are not. This can cause a
CPU-DoS bug or, in a worse case, a crash.
Since this function isn't essential, the best solution for older
Tors is to just turn it off.
Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was
introduced.
| changes/ticket40286_minimal | [new file with mode: 0644] | blob |
| src/feature/dirparse/unparseable.c | diffblobblamehistory |