Please sign in to comment.
Merge branch 'memarea_overflow_027_squashed' into maint-0.2.8
- Loading branch information...
Showing with 12 additions and 3 deletions.
|@@ -0,0 +1,7 @@|
|o Minor bugfixes (pointer arithmetic):|
|- Fix a bug in memarea_alloc() that could have resulted in remote heap|
|write access, if Tor had ever passed an unchecked size to|
|memarea_alloc(). Fortunately, all the sizes we pass to memarea_alloc()|
|are pre-checked to be less than 128 kilobytes. Fixes bug 19150; bugfix|
|on 0.2.1.1-alpha. Bug found by Guido Vranken.|