aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2014-04-29 13:02:18 -0400
committerNick Mathewson <nickm@torproject.org>2014-04-29 13:02:18 -0400
commit1d3ffc0ec96777203b2eafee5905464d54ef9f91 (patch)
treec259fdf6e3bc8391896d7bab599c8872ddfd75e1 /changes
parent9e44df2c98208fc6d0c3e9f9b3834f54e8a37cd8 (diff)
parent65575b0755f64d21d59532bf58e6c27e14086bbb (diff)
downloadtor-1d3ffc0ec96777203b2eafee5905464d54ef9f91.tar
tor-1d3ffc0ec96777203b2eafee5905464d54ef9f91.tar.gz
Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4
Diffstat (limited to 'changes')
-rw-r--r--changes/md_leak_bug5
1 files changed, 5 insertions, 0 deletions
diff --git a/changes/md_leak_bug b/changes/md_leak_bug
new file mode 100644
index 000000000..26270aacc
--- /dev/null
+++ b/changes/md_leak_bug
@@ -0,0 +1,5 @@
+ o Major bugfixes (security, OOM)
+ - Fix a memory leak that could occur if a microdescriptor parse
+ fails during the tokenizing step. This could enable a memory
+ exhaustion attack by directory servers. Fixes bug #11649; bugfix
+ on 0.2.2.6-alpha.