tor/trove-2018-001.1 at 9b10eb2d7abe703f544aca559d385fc7f2600009 - tor - RingTools

mirrors/tor

mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-20 10:12:15 +01:00

Nick Mathewson 65f2eec694 Correctly handle NULL returns from parse_protocol_list when voting.

In some cases we had checked for it, but in others we had not.  One
of these cases could have been used to remotely cause
denial-of-service against directory authorities while they attempted
to vote.

Fixes TROVE-2018-001.

2018-03-01 16:05:17 -05:00

7 lines

278 B

Groff

Raw Blame History

   o Major bugfixes (denial-of-service, directory authority):
     - Fix a protocol-list handling bug that could be used to remotely crash
       directory authorities with a null-pointer exception. Fixes bug 25074;
       bugfix on 0.2.9.4-alpha. Also tracked as TROVE-2018-001.