whoops; missing changes file for 14013

2014-12-23 10:55:25 -05:00 · 2014-12-23 10:55:25 -05:00 · 184a2dbbdd
parent 6d728ba880
commit 184a2dbbdd
1 changed files with 6 additions and 0 deletions
--- a/changes/bug14013
+++ b/changes/bug14013
@ -0,0 +1,6 @@
+  o Major bugfixes:
+    - When reading a hexadecimal, base-32, or base-64 encoded value
+      from a string, always overwrite the complete output buffer. This
+      prevents some bugs where we would look at (but fortunately, not
+      reveal) uninitialized memory on the stack. Fixes bug 14013;
+      bugfix on all versions of Tor.