Kaynağa Gözat

Fix two more SIZE_T_CEILING issues

This patch imposes (very long) limits on the length of a line in a
directory document, and on the length of a certificate.  I don't
think it should actually be possible to overrun these remotely,
since we already impose a maximum size on any directory object we're
downloading, but a little defensive programming never hurt anybody.

Roger emailed me that doorss reported these on IRC, but nobody seems
to have put them on the bugtracker.
Nick Mathewson 13 yıl önce
ebeveyn
işleme
971e83ef9c
1 değiştirilmiş dosya ile 4 ekleme ve 0 silme
  1. 4 0
      changes/routerparse_maxima

+ 4 - 0
changes/routerparse_maxima

@@ -0,0 +1,4 @@
+  o Minor bugfixes
+    - Check for and reject overly long directory certificates and
+      directory tokens before they have a chance to hit any
+      assertions. Bugfix on 0.2.1.28. Found by doorss.