Ver código fonte

Merge branch 'trove-2017-012_030' into maint-0.3.0

Nick Mathewson 6 anos atrás
pai
commit
d459c08b7d
2 arquivos alterados com 7 adições e 1 exclusões
  1. 5 0
      changes/trove-2017-012-part2
  2. 2 1
      src/or/entrynodes.c

+ 5 - 0
changes/trove-2017-012-part2

@@ -0,0 +1,5 @@
+  o Major bugfixes (security, relay):
+    - When running as a relay, make sure that we never ever choose ourselves
+      as a guard. Previously, this was possible. Fixes part of bug 21534;
+      bugfix on 0.3.0.1-alpha. This issue is also tracked as TROVE-2017-012
+      and CVE-2017-8822.

+ 2 - 1
src/or/entrynodes.c

@@ -740,7 +740,8 @@ node_is_possible_guard(const node_t *node)
           node->is_stable &&
           node->is_fast &&
           node->is_valid &&
-          node_is_dir(node));
+          node_is_dir(node) &&
+          !router_digest_is_me(node->identity));
 }
 
 /**