[tor-bugs] #17404 [Tor]: dn_indicates_v3_cert can call memcmp up to 4 chars before the beginning of a string.

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Oct 22 07:36:37 UTC 2015


#17404: dn_indicates_v3_cert can call memcmp up to 4 chars before the beginning of
a string.
-------------------------------------------------+-------------------------
 Reporter:  nickm                                |          Owner:
     Type:  defect                               |         Status:
 Priority:  Very High                            |  needs_review
Component:  Tor                                  |      Milestone:  Tor:
 Severity:  Major                                |  0.2.7.x-final
 Keywords:  024-backport 026-backport            |        Version:
  025-backport                                   |     Resolution:
Parent ID:                                       |  Actual Points:
  Sponsor:                                       |         Points:
-------------------------------------------------+-------------------------

Comment (by ln5):

 I spot a typo in the changelog entry, but that's all.

 "unsual hardening"

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17404#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list