Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Discard extraneous renegotiation attempts in the v3 link protocol | Nick Mathewson | 2012-10-17 |
Failure to do so left us open to a remotely triggerable assertion failure. Fixes CVE-2012-2249; bugfix on 0.2.3.6-alpha. Reported by "some guy from France". |