mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2025-02-24 14:51:11 +01:00
50ff24e276
When parsing detached signature, we make sure that we use the length of the digest algorithm instead of an hardcoded DIGEST256_LEN in order to avoid comparing bytes out of bound with a smaller digest length such as SHA1. Fixes #19066 Signed-off-by: David Goulet <dgoulet@torproject.org>
5 lines
322 B
Text
5 lines
322 B
Text
o Minor bugfixes (directory authority):
|
|
- When parsing detached signature, make sure we use the length of the
|
|
digest algorithm instead of an hardcoded DIGEST256_LEN in order to
|
|
avoid comparing bytes out of bound with a smaller digest length such
|
|
as SHA1. Fixes #19066; bugfix on tor-0.2.2.6-alpha.
|