aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2013-01-15 16:30:07 -0500
committerNick Mathewson <nickm@torproject.org>2013-01-15 16:30:07 -0500
commitae15b55173abff1175e0f56759abd29e2870b16c (patch)
treec2fb2e4479ccdcf5d85db6b86d00ea16ed8fea71 /changes
parent1625cddf3af74643bdeaa31e7684aaa15bf5ea0c (diff)
parent4ccf09b1c21a858540453287e58a478a80a598ae (diff)
downloadtor-ae15b55173abff1175e0f56759abd29e2870b16c.tar
tor-ae15b55173abff1175e0f56759abd29e2870b16c.tar.gz
Merge branch 'bug7889_023' into maint-0.2.3
Diffstat (limited to 'changes')
-rw-r--r--changes/bug78898
1 files changed, 8 insertions, 0 deletions
diff --git a/changes/bug7889 b/changes/bug7889
new file mode 100644
index 000000000..ce99a59ce
--- /dev/null
+++ b/changes/bug7889
@@ -0,0 +1,8 @@
+ o Major bugfixes:
+ - Reject bogus create and relay cells with 0 circuit ID or 0 stream
+ ID: these could be used to create unexpected streams and circuits
+ which would count as "present" to some parts of Tor but "absent"
+ to others, leading to zombie circuits and streams or to a
+ bandwidth DOS. Fixes bug 7889; bugfix on every released version of
+ Tor. Reported by "oftc_must_be_destroyed".
+