Piotr Włodarek 9f25af54ab Fixed bitcoinj DoS. It could have been crashed by a malicious message. ...

Bitcoinj can be crashed with OutOfMemory by sending a message with
a large claimed var_str length or bytes array length.

The actual message size does not matter, it's the claimed length that matters.

This affects all bitcoinj-based apps that receive messages including Multibit, Android Bitcoin Wallet, Mycelium and Hive.

The fix limits accepted length to max message size (32 MB).

Signed-off-by: Mike Hearn <mike@plan99.net>

2014-06-10 18:50:19 +02:00

..

src

Fixed bitcoinj DoS. It could have been crashed by a malicious message.

2014-06-10 18:50:19 +02:00

findbugs.xml

Update findbugs.xml to suppress useless warnings.

2013-02-28 18:38:16 +01:00

pom.xml

Fix scrypt library hash.

2014-05-28 19:19:32 +02:00