aboutsummaryrefslogtreecommitdiff
path: root/changes/bug6252
diff options
context:
space:
mode:
Diffstat (limited to 'changes/bug6252')
-rw-r--r--changes/bug62528
1 files changed, 8 insertions, 0 deletions
diff --git a/changes/bug6252 b/changes/bug6252
new file mode 100644
index 000000000..0d29203fa
--- /dev/null
+++ b/changes/bug6252
@@ -0,0 +1,8 @@
+ o Security fixes:
+ - Tear down the circuit if we get an unexpected SENDME cell. Clients
+ could use this trick to make their circuits receive cells faster
+ than our flow control would have allowed, or to gum up the network,
+ or possibly to do targeted memory denial-of-service attacks on
+ entry nodes. Fixes bug 6252. Bugfix on the 54th commit on Tor --
+ from July 2002, before the release of Tor 0.0.0.
+