Avoid possible segfault when handling networkstatus vote with bad flavor
authorNick Mathewson <nickm@torproject.org>
Fri, 3 Aug 2012 14:53:00 +0000 (10:53 -0400)
committerNick Mathewson <nickm@torproject.org>
Fri, 3 Aug 2012 14:53:00 +0000 (10:53 -0400)
Fix for 6530; fix on 0.2.2.6-alpha.

changes/bug6530 [new file with mode: 0644]
src/or/routerparse.c

diff --git a/changes/bug6530 b/changes/bug6530
new file mode 100644 (file)
index 0000000..a6b7caa
--- /dev/null
@@ -0,0 +1,4 @@
+  o Major bugfixes:
+    - Avoid a read of uninitializd RAM when reading a vote or consensus
+      document with an unrecognized flavor name.  Fixes bug 6530; bugfix on
+      0.2.2.6-alpha.
index 8c4f582..2ff546b 100644 (file)
@@ -2821,7 +2821,7 @@ networkstatus_parse_vote_from_string(const char *s, const char **eos_out,
     int flavor = networkstatus_parse_flavor_name(tok->args[1]);
     if (flavor < 0) {
       log_warn(LD_DIR, "Can't parse document with unknown flavor %s",
-               escaped(tok->args[2]));
+               escaped(tok->args[1]));
       goto err;
     }
     ns->flavor = flav = flavor;