[tor-bugs] #12227 [Tor]: ASan stack-buffer-overflow in prune_v2_cipher_list -- not exploitable
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sun Jun 8 20:48:37 UTC 2014
#12227: ASan stack-buffer-overflow in prune_v2_cipher_list -- not exploitable
---------------------------+---------------------------
Reporter: starlight | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor | Version: Tor: 0.2.4.22
Resolution: | Keywords:
Actual Points: | Parent ID:
Points: |
---------------------------+---------------------------
Comment (by cypherpunks):
Else you need to change all code, look at ssl23_put_cipher_by_char, ssl23
requires not only 3 bytes but p[0] is '\0' for ssl3.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12227#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list