[tor-bugs] #5402 [Tor Client]: #5090 allows post-auth heap overflow

[Tor Bug Tracker & Wiki]

#5402: #5090 allows post-auth heap overflow
---------------------------+------------------------------------------------
    Reporter:  arma        |       Owner:                    
        Type:  defect      |      Status:  closed            
    Priority:  major       |   Milestone:  Tor: 0.2.2.x-final
   Component:  Tor Client  |     Version:                    
  Resolution:  fixed       |    Keywords:                    
      Parent:              |      Points:                    
Actualpoints:              |  
---------------------------+------------------------------------------------
Changes (by arma):

  * status:  new => closed
  * resolution:  => fixed


Comment:

 Ok. I added the CVE, plus credit to "Robert Connolly from Matta
 Consulting", in git commit bca8bf62c66.

 Closing as resolved. Please reopen if you think of any security
 complications we need to reconsider.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5402#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online