Browse Source

Fix two more SIZE_T_CEILING issues

This patch imposes (very long) limits on the length of a line in a
directory document, and on the length of a certificate.  I don't
think it should actually be possible to overrun these remotely,
since we already impose a maximum size on any directory object we're
downloading, but a little defensive programming never hurt anybody.

Roger emailed me that doorss reported these on IRC, but nobody seems
to have put them on the bugtracker.
Nick Mathewson 13 years ago
parent
commit
971e83ef9c
1 changed files with 4 additions and 0 deletions
  1. 4 0
      changes/routerparse_maxima

+ 4 - 0
changes/routerparse_maxima

@@ -0,0 +1,4 @@
+  o Minor bugfixes
+    - Check for and reject overly long directory certificates and
+      directory tokens before they have a chance to hit any
+      assertions. Bugfix on 0.2.1.28. Found by doorss.