aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
Diffstat (limited to 'changes')
-rw-r--r--changes/better_workqueues10
-rw-r--r--changes/bug117914
-rw-r--r--changes/bug124854
-rw-r--r--changes/bug125094
-rw-r--r--changes/bug1258512
-rw-r--r--changes/bug129855
-rw-r--r--changes/bug13111-generate-keys-on-empty-file20
-rw-r--r--changes/bug133974
-rw-r--r--changes/bug1339912
-rw-r--r--changes/bug13399_part13
-rw-r--r--changes/bug134017
-rw-r--r--changes/bug136616
-rw-r--r--changes/bug138053
-rw-r--r--changes/bug138068
-rw-r--r--changes/bug139883
-rw-r--r--changes/bug14001-clang-warning7
-rw-r--r--changes/bug14067-TestingDirAuthVoteHSDir6
-rw-r--r--changes/bug140723
-rw-r--r--changes/bug140846
-rw-r--r--changes/bug140904
-rw-r--r--changes/bug141064
-rw-r--r--changes/bug14116_0253
-rw-r--r--changes/bug141234
-rw-r--r--changes/bug141255
-rw-r--r--changes/bug141297
-rw-r--r--changes/bug1414111
-rw-r--r--changes/bug14142-parse-virtual-addr7
-rw-r--r--changes/bug141494
-rw-r--r--changes/bug141934
-rw-r--r--changes/bug141953
-rw-r--r--changes/bug142023
-rw-r--r--changes/bug142073
-rw-r--r--changes/bug142155
-rw-r--r--changes/bug142165
-rw-r--r--changes/bug142196
-rw-r--r--changes/bug142204
-rw-r--r--changes/bug142247
-rw-r--r--changes/bug142596
-rw-r--r--changes/bug142615
-rw-r--r--changes/bug142805
-rw-r--r--changes/bug143504
-rw-r--r--changes/bug144517
-rw-r--r--changes/bug145544
-rw-r--r--changes/bug75555
-rw-r--r--changes/bug85466
-rw-r--r--changes/bug92864
-rw-r--r--changes/bug98198
-rw-r--r--changes/doc137024
-rw-r--r--changes/feature1006712
-rw-r--r--changes/feature140153
-rw-r--r--changes/feature84054
-rw-r--r--changes/fix-test-cmdline-args4
-rw-r--r--changes/geoip-january20153
-rw-r--r--changes/geoip6-january20152
-rw-r--r--changes/prop2275
-rw-r--r--changes/remove-bad-fp3
-rw-r--r--changes/spurious-clang-warnings10
-rw-r--r--changes/ticket114853
-rw-r--r--changes/ticket117374
-rw-r--r--changes/ticket12376_part211
-rw-r--r--changes/ticket130374
-rw-r--r--changes/ticket132433
-rw-r--r--changes/ticket137625
-rw-r--r--changes/ticket141076
-rw-r--r--changes/ticket141285
-rw-r--r--changes/ticket14188_part12
-rw-r--r--changes/ticket143255
-rw-r--r--changes/ticket99698
68 files changed, 351 insertions, 25 deletions
diff --git a/changes/better_workqueues b/changes/better_workqueues
new file mode 100644
index 0000000000..32c984cb71
--- /dev/null
+++ b/changes/better_workqueues
@@ -0,0 +1,10 @@
+ o Major features:
+ - Refactor the CPU worker implementation for better performance by
+ avoiding the kernel and lengthening pipelines. The original
+ implementation used sockets to transfer data from the main thread
+ to the worker threads, and didn't allow any thread to be assigned
+ more than a single piece of work at once. The new implementation
+ avoids communications overhead by making requests in shared
+ memory, avoiding kernel IO where possible, and keeping more
+ request in flight at once. Resolves issue #9682.
+
diff --git a/changes/bug11791 b/changes/bug11791
new file mode 100644
index 0000000000..51a932743b
--- /dev/null
+++ b/changes/bug11791
@@ -0,0 +1,4 @@
+ o Minor features (directory, memory usage):
+ - When we have recently been under memory pressure (over 3/4 of
+ MaxMemInQueues is allocated), then allocate smaller zlib objects for
+ small requests. Closes ticket 11791.
diff --git a/changes/bug12485 b/changes/bug12485
new file mode 100644
index 0000000000..53ce33ef7b
--- /dev/null
+++ b/changes/bug12485
@@ -0,0 +1,4 @@
+ o Minor features (Guard nodes):
+ - Reduce the time delay before saving guard status to disk from 10
+ minute to 30 seconds (or from one hour to 10 minutes if
+ AvoidDiskWrites is set). Closes ticket 12485.
diff --git a/changes/bug12509 b/changes/bug12509
new file mode 100644
index 0000000000..bb49bd5d7a
--- /dev/null
+++ b/changes/bug12509
@@ -0,0 +1,4 @@
+ o Minor bugfixes (automapping):
+ - Prevent changes to other options from removing the wildcard value "."
+ from "AutomapHostsSuffixes".
+ Fixes bug 12509; bugfix on 0.2.0.1-alpha.
diff --git a/changes/bug12585 b/changes/bug12585
new file mode 100644
index 0000000000..ac03993916
--- /dev/null
+++ b/changes/bug12585
@@ -0,0 +1,12 @@
+ o Major features (security)
+ - Implementation of an AF_UNIX socket option to implement a SOCKS
+ proxy reachable by Unix Domain Socket. This allows client applications to
+ communicate with Tor without having the ability to create AF_INET or
+ AF_INET6 family sockets. If an application has permission to create a socket
+ with AF_UNIX, it may directly communicate with Tor as if it were an other
+ SOCKS proxy. This should allow high risk applications to be entirely prevented
+ from connecting directly with TCP/IP, they will be able to only connect to the
+ internet through AF_UNIX and only through Tor.
+ To create a socket of this type, use the syntax "unix:/path/to/socket".
+ Closes ticket 12585.
+
diff --git a/changes/bug12985 b/changes/bug12985
new file mode 100644
index 0000000000..636ae4d564
--- /dev/null
+++ b/changes/bug12985
@@ -0,0 +1,5 @@
+ o Minor bugfixes (shutdown):
+ - When shutting down, always call event_del() on lingering read or
+ write events before freeing them. Otherwise, we risk double-frees
+ or read-after-frees in event_base_free(). Fixes bug 12985; bugfix on
+ 0.1.0.2-rc.
diff --git a/changes/bug13111-generate-keys-on-empty-file b/changes/bug13111-generate-keys-on-empty-file
new file mode 100644
index 0000000000..1d602deb3e
--- /dev/null
+++ b/changes/bug13111-generate-keys-on-empty-file
@@ -0,0 +1,20 @@
+ o Minor bugfixes (file handling):
+ - Stop failing when key files are zero-length. Instead, generate new
+ keys, and overwrite the empty key files.
+ Fixes bug 13111; bugfix on all versions of Tor. Patch by "teor".
+ - Stop generating a fresh .old RSA key file when the .old file is
+ missing. Fixes part of 13111; bugfix on 0.0.6rc1.
+ - Avoid overwriting .old key files with empty key files.
+
+ o Minor enhancements (file handling):
+ - Skip loading zero-length extra info store, router store, stats, state,
+ and key files.
+
+ o Minor enhancements (testing):
+ - Test that tor does not fail when key files are zero-length.
+ Check that tor generates new keys, and overwrites the empty key files.
+ - Test that tor generates new keys when keys are missing (existing
+ behaviour).
+ - Test that tor does not overwrite key files that already contain data
+ (existing behaviour).
+ Tests bug 13111. Patch by "teor".
diff --git a/changes/bug13397 b/changes/bug13397
new file mode 100644
index 0000000000..502092801f
--- /dev/null
+++ b/changes/bug13397
@@ -0,0 +1,4 @@
+ o Minor bugfixes:
+ - Avoid crashing when trying to reload a torrc specified as a relative
+ path with RunAsDaemon turned on. Fixes bug 13397; bugfix on
+ 0.2.3.11-alpha.
diff --git a/changes/bug13399 b/changes/bug13399
deleted file mode 100644
index fcaf58a53c..0000000000
--- a/changes/bug13399
+++ /dev/null
@@ -1,12 +0,0 @@
- o Minor bugfixes:
- - Use a full 256 bits of the SHA256 digest of a microdescriptor when
- computing which microdescriptors to download. This keeps us from
- erroneous download behavior if two microdescriptor digests ever have
- the same first 160 bits. Fixes part of bug 13399; bugfix on
- 0.2.3.1-alpha.
-
- - Reset a router's status if its microdescriptor digest changes,
- even if the first 160 bits remain the same. Fixes part of bug
- 13399; bugfix on 0.2.3.1-alpha.
-
-
diff --git a/changes/bug13399_part1 b/changes/bug13399_part1
deleted file mode 100644
index 2ad3f8d77e..0000000000
--- a/changes/bug13399_part1
+++ /dev/null
@@ -1,3 +0,0 @@
- o Code simplifications and refactoring:
- - Refactor our generic strmap and digestmap types into a single
- implementation, so that we can add a new digest256map type trivially.
diff --git a/changes/bug13401 b/changes/bug13401
new file mode 100644
index 0000000000..e2834a09d3
--- /dev/null
+++ b/changes/bug13401
@@ -0,0 +1,7 @@
+ o Minor features (testing networks):
+ - Drop the minimum RendPostPeriod on a testing network to 5 seconds,
+ and the default to 2 minutes. Closes ticket 13401. Patch by "nickm".
+ - Drop the MIN_REND_INITIAL_POST_DELAY on a testing network to 5 seconds,
+ but keep the default at 30 seconds. This reduces HS bootstrap time to
+ around 25 seconds. Change src/test/test-network.sh default time to match.
+ Closes ticket 13401. Patch by "teor".
diff --git a/changes/bug13661 b/changes/bug13661
new file mode 100644
index 0000000000..7f0cb5e706
--- /dev/null
+++ b/changes/bug13661
@@ -0,0 +1,6 @@
+ o Minor bugfixes:
+
+ - Support two-number and three-number version numbers correctly, in
+ case we change the Tor versioning system in the future. Fixes bug
+ 13661; bugfix on 0.0.8pre1.
+
diff --git a/changes/bug13805 b/changes/bug13805
new file mode 100644
index 0000000000..321cd58958
--- /dev/null
+++ b/changes/bug13805
@@ -0,0 +1,3 @@
+ o Minor features (systemd):
+ - Various improvements and modernizations in systemd hardening support.
+ Closes ticket 13805. Patch from Craig Andrews.
diff --git a/changes/bug13806 b/changes/bug13806
new file mode 100644
index 0000000000..0a6b268c02
--- /dev/null
+++ b/changes/bug13806
@@ -0,0 +1,8 @@
+ o Minor features (DOS resistance):
+ - Count the total number of bytes used storing hidden service descriptors
+ against the value of MaxMemInQueues. If we're low on memory, and more
+ than 20% of our memory is used holding hidden service descriptors, free
+ them until no more than 10% of our memory holds hidden service
+ descriptors. Free the least recently fetched descriptors first.
+ Resolves ticket 13806.
+
diff --git a/changes/bug13988 b/changes/bug13988
new file mode 100644
index 0000000000..e816335a3b
--- /dev/null
+++ b/changes/bug13988
@@ -0,0 +1,3 @@
+ o Minor bugfixes (statistics):
+ - Increase period over which bandwidth observations are aggregated
+ from 15 minutes to 4 hours. Fixes bug 13988; bugfix on 0.0.8pre1.
diff --git a/changes/bug14001-clang-warning b/changes/bug14001-clang-warning
new file mode 100644
index 0000000000..5f8deb79b8
--- /dev/null
+++ b/changes/bug14001-clang-warning
@@ -0,0 +1,7 @@
+ o Minor bugfixes:
+ - The address of an array in the middle of a structure will
+ always be non-NULL. clang recognises this and complains.
+ Disable the tautologous and redundant check to silence
+ this warning.
+ Fixes bug 14001; bugfix on 0.2.1.2-alpha.
+
diff --git a/changes/bug14067-TestingDirAuthVoteHSDir b/changes/bug14067-TestingDirAuthVoteHSDir
new file mode 100644
index 0000000000..c276e22f49
--- /dev/null
+++ b/changes/bug14067-TestingDirAuthVoteHSDir
@@ -0,0 +1,6 @@
+ o Minor features (authorities, testing):
+ - Create TestingDirAuthVoteHSDir like TestingDirAuthVoteExit/Guard.
+ Ensures that authorities vote the HSDir flag for the listed
+ relays regardless of uptime or ORPort connectivity.
+ Respects the value of VoteOnHidServDirectoriesV2.
+ Partial implementation for ticket 14067. Patch by "teor".
diff --git a/changes/bug14072 b/changes/bug14072
new file mode 100644
index 0000000000..c810616cc0
--- /dev/null
+++ b/changes/bug14072
@@ -0,0 +1,3 @@
+ o Minor bugfixes (build):
+ - Avoid warnings when building with systemd 209 or later.
+ Fixes bug 14072; bugfix on 0.2.6.2-alpha. Patch from "h.venev".
diff --git a/changes/bug14084 b/changes/bug14084
new file mode 100644
index 0000000000..c7f053e16e
--- /dev/null
+++ b/changes/bug14084
@@ -0,0 +1,6 @@
+ o Minor features:
+ - New option "HiddenServiceAllowUnknownPorts" to allow hidden
+ services to disable the anti-scanning feature introduced in
+ 0.2.6.2-alpha. With this option not set, a connection to an
+ unlisted port closes the circuit. With this option set, only a
+ RELAY_DONE cell is sent. Closes ticket #14084. \ No newline at end of file
diff --git a/changes/bug14090 b/changes/bug14090
new file mode 100644
index 0000000000..d6a6df4860
--- /dev/null
+++ b/changes/bug14090
@@ -0,0 +1,4 @@
+ o Minor bugfixes:
+ - Avoid undefined behavior when sampling huge values from the
+ Laplace distribution. This made unittests fail on Raspberry Pi.
+ Bug found by Device. Fixes bug 14090; bugfix on 0.2.6.2-alpha.
diff --git a/changes/bug14106 b/changes/bug14106
new file mode 100644
index 0000000000..cf6e568dcc
--- /dev/null
+++ b/changes/bug14106
@@ -0,0 +1,4 @@
+ o Minor bugfixes (hidden services):
+ - Successfully launch Tor with a nonexistent hidden service directory.
+ Our fix for bug 13942 didn't catch this case. Fixes bug 14106;
+ bugfix on 0.2.6.2-alpha.
diff --git a/changes/bug14116_025 b/changes/bug14116_025
new file mode 100644
index 0000000000..0859f626a5
--- /dev/null
+++ b/changes/bug14116_025
@@ -0,0 +1,3 @@
+ o Minor bugfixes (controller):
+ - Avoid crashing on a malformed EXTENDCIRCUIT command. Fixes bug 14116;
+ bugfix on 0.2.2.9-alpha.
diff --git a/changes/bug14123 b/changes/bug14123
new file mode 100644
index 0000000000..1220a044a6
--- /dev/null
+++ b/changes/bug14123
@@ -0,0 +1,4 @@
+ o Minor bugfixes (small memory leaks):
+ - Avoid leaking memory when using IPv6 virtual address mappings.
+ Fixes bug 14123; bugfix on 0.2.4.7-alpha. Patch by Tom van der
+ Woerdt. \ No newline at end of file
diff --git a/changes/bug14125 b/changes/bug14125
new file mode 100644
index 0000000000..d8df37d337
--- /dev/null
+++ b/changes/bug14125
@@ -0,0 +1,5 @@
+ o Minor bugfixes (dirauth):
+ - Enlarge the buffer to read bw-auth generated files to avoid an
+ issue when parsing the file in dirserv_read_measured_bandwidths().
+ Fixes bug 14125; bugfix on 0.2.2.1-alpha.
+
diff --git a/changes/bug14129 b/changes/bug14129
new file mode 100644
index 0000000000..6153cd84fd
--- /dev/null
+++ b/changes/bug14129
@@ -0,0 +1,7 @@
+ o Major bugfixes (exit node stability):
+
+ - Fix an assertion failure that could occur under high DNS load. Fixes
+ bug 14129; bugfix on Tor 0.0.7rc1. Found by "jowr"; diagnosed and fixed
+ by "cypherpunks".
+
+
diff --git a/changes/bug14141 b/changes/bug14141
new file mode 100644
index 0000000000..75cdcd5f3a
--- /dev/null
+++ b/changes/bug14141
@@ -0,0 +1,11 @@
+ o Minor bugfixes (systemd support):
+ - Fix detection and operation of systemd watchdog. Fixes part of
+ bug 14141; bugfix on 0.2.6.2-alpha. Patch from Tomasz Torcz.
+
+ - Run correctly under systemd with the RunAsDaemon option set.
+ Fixes part of bug 14141; bugfix on 0.2.5.7-rc. Patch from Tomasz
+ Torcz.
+
+ o Minor featurs (systemd support):
+ - Inform the systemd supervisor about more changes in the Tor process
+ status. Implements part of ticket 14141. Patch from Tomasz Torcz. \ No newline at end of file
diff --git a/changes/bug14142-parse-virtual-addr b/changes/bug14142-parse-virtual-addr
new file mode 100644
index 0000000000..ee635456ae
--- /dev/null
+++ b/changes/bug14142-parse-virtual-addr
@@ -0,0 +1,7 @@
+ o Minor bugfixes (client):
+ - Check for a missing option value in parse_virtual_addr_network
+ before asserting on the NULL in tor_addr_parse_mask_ports.
+ This avoids crashing on torrc lines like
+ Vi[rtualAddrNetworkIPv[4|6]] when no value follows the option.
+ Fixes bug 14142; bugfix on 0.2.4.7-alpha.
+ Patch by "teor".
diff --git a/changes/bug14149 b/changes/bug14149
new file mode 100644
index 0000000000..d655a14354
--- /dev/null
+++ b/changes/bug14149
@@ -0,0 +1,4 @@
+ o Minor features (hidden service parameters):
+ - Make hidden service Sybil attacks harder by changing the minimum
+ time required to become an HSDir from 25 hours up to 96 hours.
+ Addresses ticket #14149. \ No newline at end of file
diff --git a/changes/bug14193 b/changes/bug14193
new file mode 100644
index 0000000000..a7006685f5
--- /dev/null
+++ b/changes/bug14193
@@ -0,0 +1,4 @@
+ o Minor bugfixes (client DNS):
+ - Report the correct cached DNS expiration times. Previously, we
+ would report everything as "never expires." Fixes bug 14193;
+ bugfix on 0.2.3.17-beta.
diff --git a/changes/bug14195 b/changes/bug14195
new file mode 100644
index 0000000000..d2b82f31b0
--- /dev/null
+++ b/changes/bug14195
@@ -0,0 +1,3 @@
+ o Minor bugfixes (client):
+ - Fix a memory leak when using AutomapHostsOnResolve.
+ Fixes bug 14195; bugfix on 0.1.0.1-rc.
diff --git a/changes/bug14202 b/changes/bug14202
new file mode 100644
index 0000000000..2bb4ba1776
--- /dev/null
+++ b/changes/bug14202
@@ -0,0 +1,3 @@
+ o Minor cleanup
+ - Remove workaround in dirserv_thinks_router_is_hs_dir() that was only
+ for version <= 0.2.2.24 which is now deprecated.
diff --git a/changes/bug14207 b/changes/bug14207
new file mode 100644
index 0000000000..b382f82519
--- /dev/null
+++ b/changes/bug14207
@@ -0,0 +1,3 @@
+ o Minor bugfixes (controller):
+ - Add a code for the END_CIRC_REASON_IP_NOW_REDUNDANT circuit close
+ reason. Fixes bug 14207; bugfix on 0.2.6.2-alpha.
diff --git a/changes/bug14215 b/changes/bug14215
new file mode 100644
index 0000000000..70bcdaaefc
--- /dev/null
+++ b/changes/bug14215
@@ -0,0 +1,5 @@
+ o Minor bugfixes (tests):
+ - Make the checkdir/perms test complete successfully even if the
+ global umask is not 022. Fixes bug 14215; bugfix on 0.2.6.2-alpha.
+
+
diff --git a/changes/bug14216 b/changes/bug14216
new file mode 100644
index 0000000000..47893ceaca
--- /dev/null
+++ b/changes/bug14216
@@ -0,0 +1,5 @@
+ o Minor bugfixes:
+ - When we are using bridges and we had a network connectivity problem, only
+ retry connecting to our currently configured bridges, not all bridges we
+ know about and remember using.
+ Fixes bug 14216; bugfix on tor-0.2.2.17-alpha. Patch from arma.
diff --git a/changes/bug14219 b/changes/bug14219
new file mode 100644
index 0000000000..9d845db94e
--- /dev/null
+++ b/changes/bug14219
@@ -0,0 +1,6 @@
+ o Minor bugfixes (hidden services):
+
+ - When fetching a hidden service descriptor for a down service that we
+ recently up, do not keep refetching until we try the same replica twice
+ in a row. Fixes bug 14219; bugfix on 0.2.0.10-alpha.
+
diff --git a/changes/bug14220 b/changes/bug14220
new file mode 100644
index 0000000000..51cfa502bc
--- /dev/null
+++ b/changes/bug14220
@@ -0,0 +1,4 @@
+ o Minor bugfixes (compilation):
+ - Build without warnings with the stock OpenSSL srtp.h header,
+ which has a duplicate declaration of SSL_get_selected_srtp_profile().
+ Fixes bug 14220; this is OpenSSL's bug, not ours.
diff --git a/changes/bug14224 b/changes/bug14224
new file mode 100644
index 0000000000..031b000520
--- /dev/null
+++ b/changes/bug14224
@@ -0,0 +1,7 @@
+ o Minor Bugfix
+ - Close the intro circuit once we don't have any more usable intro
+ points instead of making it timeout at some point. This also make sure
+ no extra HS descriptor fetch is triggered.
+ Fixes bug 14224; bugfix on 0.0.6.
+
+
diff --git a/changes/bug14259 b/changes/bug14259
new file mode 100644
index 0000000000..1b5b9b80b3
--- /dev/null
+++ b/changes/bug14259
@@ -0,0 +1,6 @@
+ o Minor bugfixes (client):
+ - Avoid a small memory leak when we find a cached answer for a reverse
+ DNS lookup in a client-side DNS cache. (Remember, client-side DNS
+ caching is off by default, and is not recommended.) Fixes bug 14259;
+ bugfix on 0.2.0.1-alpha.
+
diff --git a/changes/bug14261 b/changes/bug14261
new file mode 100644
index 0000000000..8ab556c0be
--- /dev/null
+++ b/changes/bug14261
@@ -0,0 +1,5 @@
+ o Minor bugfixes (directory authority):
+ - Allow directory authorities to fetch more data from one
+ another if they find themselves missing lots of votes.
+ Previously, they had been bumping against the 10 MB queued
+ data limit. Fixes bug 14261; bugfix on 0.1.2.5-alpha.
diff --git a/changes/bug14280 b/changes/bug14280
new file mode 100644
index 0000000000..917d40c34c
--- /dev/null
+++ b/changes/bug14280
@@ -0,0 +1,5 @@
+ o Minor bugfixes:
+ - Reject socks requests to literal IPv6 addresses when IPv6Traffic
+ flag is not set; and not because the NoIPv4Traffic flag was set.
+ Previously we'd looked at the NoIPv4Traffic flag for both types
+ of literal addresses. Fixes bug 14280; bugfix on 0.2.4.7-alpha.
diff --git a/changes/bug14350 b/changes/bug14350
new file mode 100644
index 0000000000..8b85798d46
--- /dev/null
+++ b/changes/bug14350
@@ -0,0 +1,4 @@
+ o Minor bugfixes:
+ - Cause the "--disable-systemd" option to actually disable systemd
+ support. Fixes bug 14350; bugfix on 0.2.6.2-alpha. Patch from
+ "blueness". \ No newline at end of file
diff --git a/changes/bug14451 b/changes/bug14451
new file mode 100644
index 0000000000..7949a78070
--- /dev/null
+++ b/changes/bug14451
@@ -0,0 +1,7 @@
+
+
+ o Minor features:
+ - ControlPort now supports the unix:/path/to/dir syntax as an alternative
+ to the ControlSocket option, for consistency with SocksPort and
+ hidden services. Closes ticket 14451.
+
diff --git a/changes/bug14554 b/changes/bug14554
new file mode 100644
index 0000000000..ff2566f7af
--- /dev/null
+++ b/changes/bug14554
@@ -0,0 +1,4 @@
+ o Major bugfix
+ - Possibility of an infinite loop if the returned value of the read/recv
+ was 0. A returned value of 0 means that we've reached the EOF thus the
+ pipe/sock is drained so return success not an error.
diff --git a/changes/bug7555 b/changes/bug7555
new file mode 100644
index 0000000000..a43ff739cb
--- /dev/null
+++ b/changes/bug7555
@@ -0,0 +1,5 @@
+ o Major bugfixes (client):
+ - Allow MapAddress and AutomapHostsOnResolve to work together when an
+ address is mapped into another address type that must be
+ automapped at resolve time. Fixes bug 7555; bugfix on
+ 0.2.0.1-alpha.
diff --git a/changes/bug8546 b/changes/bug8546
new file mode 100644
index 0000000000..9e79b4f50c
--- /dev/null
+++ b/changes/bug8546
@@ -0,0 +1,6 @@
+ o Code simplification and refactoring:
+ - Move fields related to isolating and configuring client ports
+ into a shared structure. Previously, they were duplicated across
+ port_cfg_t, listener_connection_t, and edge_connection_t.
+ Failure to copy one of them correctly had been the cause of at
+ least one bug in the past. Closes ticket 8546.
diff --git a/changes/bug9286 b/changes/bug9286
new file mode 100644
index 0000000000..062a7a03f3
--- /dev/null
+++ b/changes/bug9286
@@ -0,0 +1,4 @@
+ o Minor bugfixes (parsing):
+ - Stop accepting milliseconds (or other junk) at the end of
+ descriptor publication times. Fixes bug 9286; bugfix on
+ 0.0.2pre25. \ No newline at end of file
diff --git a/changes/bug9819 b/changes/bug9819
new file mode 100644
index 0000000000..7220d2af1c
--- /dev/null
+++ b/changes/bug9819
@@ -0,0 +1,8 @@
+ o Major bugfixes (mixed relay-client operation):
+
+ - When running as a relay and a client at the same time (not
+ recommended), if we decide not to use a new guard because we
+ want to retry older guards, only close the locally-originating
+ circuits passing through that guard. Previously we would close
+ all the circuits. Fixes bug 9819; bugfix on
+ 0.2.1.1-alpha. Reported by "skruffy".
diff --git a/changes/doc13702 b/changes/doc13702
new file mode 100644
index 0000000000..917dca3f57
--- /dev/null
+++ b/changes/doc13702
@@ -0,0 +1,4 @@
+ o Documentation:
+ - Adding section on OpenBSD to our TUNING document. Thanks to
+ mmcc for writing the OpenBSD-specific tips. Resolves ticket
+ 13702.
diff --git a/changes/feature10067 b/changes/feature10067
new file mode 100644
index 0000000000..3a387d0497
--- /dev/null
+++ b/changes/feature10067
@@ -0,0 +1,12 @@
+ o Major features (changed defaults):
+ - Prevent relay operators from unintentionally running exits: When
+ a relay is configured as an exit node, we now warn the user
+ unless the 'ExitRelay' option is set to 1. We warn even more
+ loudly if the relay is configured with the default exit policy,
+ since this tends to indicate accidental misconfiguration.
+ Setting 'ExitRelay' to 0 stops Tor from running as an exit relay.
+ Closes ticket 10067.
+
+ o Removed features:
+ - To avoid confusion with the 'ExitRelay' option, 'ExitNode' is no
+ longer silently accepted as an alias for 'ExitNodes'.
diff --git a/changes/feature14015 b/changes/feature14015
new file mode 100644
index 0000000000..bd09b49008
--- /dev/null
+++ b/changes/feature14015
@@ -0,0 +1,3 @@
+ o Minor features (logging, hidden services):
+ - Elevate authorized-client message from DEBUG to INFO. Closes
+ ticket 14015.
diff --git a/changes/feature8405 b/changes/feature8405
new file mode 100644
index 0000000000..ac4a36133b
--- /dev/null
+++ b/changes/feature8405
@@ -0,0 +1,4 @@
+ o Minor features (controller):
+ - Include SOCKS_USERNAME and SOCKS_PASSWORD values in controller
+ events to let controllers observe circuit isolation inputs.
+ Closes ticket 8405.
diff --git a/changes/fix-test-cmdline-args b/changes/fix-test-cmdline-args
new file mode 100644
index 0000000000..6902d19b27
--- /dev/null
+++ b/changes/fix-test-cmdline-args
@@ -0,0 +1,4 @@
+ o Testing:
+ - Make the test_cmdline_args.py script work correctly on Windows.
+ Patch from Gisle Vanem.
+ \ No newline at end of file
diff --git a/changes/geoip-january2015 b/changes/geoip-january2015
new file mode 100644
index 0000000000..67324f27f2
--- /dev/null
+++ b/changes/geoip-january2015
@@ -0,0 +1,3 @@
+ o Minor features:
+ - Update geoip to the January 7 2015 Maxmind GeoLite2 Country database.
+
diff --git a/changes/geoip6-january2015 b/changes/geoip6-january2015
new file mode 100644
index 0000000000..b86fe2be57
--- /dev/null
+++ b/changes/geoip6-january2015
@@ -0,0 +1,2 @@
+ o Minor features:
+ - Update geoip6 to the January 7 2015 Maxmind GeoLite2 Country database.
diff --git a/changes/prop227 b/changes/prop227
new file mode 100644
index 0000000000..cd47fe26ba
--- /dev/null
+++ b/changes/prop227
@@ -0,0 +1,5 @@
+ o Minor features (directory system):
+ - Authorities can now vote on the correct digests and latest versions for
+ different software packages. This allows packages that include Tor to use
+ the Tor authority system as a way to get notified of updates and their
+ correct digests. Implements proposal 227. Closes ticket 10395.
diff --git a/changes/remove-bad-fp b/changes/remove-bad-fp
new file mode 100644
index 0000000000..190013dc7d
--- /dev/null
+++ b/changes/remove-bad-fp
@@ -0,0 +1,3 @@
+ o Removed features:
+ - Remove a test for a long-defunct broken version-one directory server.
+
diff --git a/changes/spurious-clang-warnings b/changes/spurious-clang-warnings
deleted file mode 100644
index d039920476..0000000000
--- a/changes/spurious-clang-warnings
+++ /dev/null
@@ -1,10 +0,0 @@
- o Minor bugfixes:
- - Silence clang warnings under --enable-expensive-hardening, including:
- + implicit truncation of 64 bit values to 32 bit;
- + const char assignment to self;
- + tautological compare; and
- + additional parentheses around equality tests. (gcc uses these to
- silence assignment, so clang warns when they're present in an
- equality test. But we need to use extra parentheses in macros to
- isolate them from other code).
- Fixes bug 13577.
diff --git a/changes/ticket11485 b/changes/ticket11485
new file mode 100644
index 0000000000..9d341c57ab
--- /dev/null
+++ b/changes/ticket11485
@@ -0,0 +1,3 @@
+ o Features (hidden services):
+ - Support mapping hidden service virtual ports to AF_UNIX sockets on
+ suitable platforms. Resolves ticket #11485.
diff --git a/changes/ticket11737 b/changes/ticket11737
new file mode 100644
index 0000000000..5c5f9dc6ed
--- /dev/null
+++ b/changes/ticket11737
@@ -0,0 +1,4 @@
+ o Minor features:
+ - Prevent bugs from causing infinite loops in our hash-table
+ iteration code by adding assertions that cached hash values have
+ not been corrupted. Closes ticket 11737.
diff --git a/changes/ticket12376_part2 b/changes/ticket12376_part2
new file mode 100644
index 0000000000..13f9bb54dc
--- /dev/null
+++ b/changes/ticket12376_part2
@@ -0,0 +1,11 @@
+ o Major refactoring:
+ - Refactor the get_interface_addresses_raw() Doom-function into
+ multiple smaller and easier to understand subfunctions. Cover the
+ resulting subfunctions with unit-tests. Fixes a significant portion
+ of issue 12376.
+
+ o Minor bugfixes:
+ - Fix the ioctl()-based network interface lookup code so that it will
+ work on systems that have variable-length struct ifreq, for example
+ Mac OS X.
+
diff --git a/changes/ticket13037 b/changes/ticket13037
new file mode 100644
index 0000000000..24c4100454
--- /dev/null
+++ b/changes/ticket13037
@@ -0,0 +1,4 @@
+ o Minor features (build):
+ - New --disable-system-torrc compile-time option to prevent Tor from
+ looking for a system-wide torrc or torrc-defaults tile. Resolves
+ ticket 13037.
diff --git a/changes/ticket13243 b/changes/ticket13243
new file mode 100644
index 0000000000..ad6e4de505
--- /dev/null
+++ b/changes/ticket13243
@@ -0,0 +1,3 @@
+ o Testing:
+ - Move the slower unit tests into a new "./src/test/test-slow" binary
+ that can be run independently of the other tests. Closes ticket 13243.
diff --git a/changes/ticket13762 b/changes/ticket13762
new file mode 100644
index 0000000000..0c1a568cc3
--- /dev/null
+++ b/changes/ticket13762
@@ -0,0 +1,5 @@
+ o Minor features:
+ - Suppress "router info incompatible with extra info" message when
+ reading extrainfo documents from cache. (This message got loud
+ around when we closed bug 9812 in 0.2.6.2-alpha.) Closes ticket
+ 13762.
diff --git a/changes/ticket14107 b/changes/ticket14107
new file mode 100644
index 0000000000..e4ba6becb3
--- /dev/null
+++ b/changes/ticket14107
@@ -0,0 +1,6 @@
+ o Testing:
+
+ - New "make test-stem" target to run stem integration tests.
+ Requires that the "STEM_SOURCE_DIR" environment variable be set.
+ Closes ticket 14107.
+
diff --git a/changes/ticket14128 b/changes/ticket14128
new file mode 100644
index 0000000000..38b25fa7dc
--- /dev/null
+++ b/changes/ticket14128
@@ -0,0 +1,5 @@
+ o Minor features (controller):
+ - New "GETINFO bw-event-cache" to get information about recent bandwidth
+ events. Closes ticket 14128. Useful for controllers to get recent
+ bandwidth history after the fix for 13988.
+
diff --git a/changes/ticket14188_part1 b/changes/ticket14188_part1
new file mode 100644
index 0000000000..9d66bba1fc
--- /dev/null
+++ b/changes/ticket14188_part1
@@ -0,0 +1,2 @@
+ o Compilation fixes:
+ - Compile correctly with (unreleased) OpenSSL 1.1.0 headers.
diff --git a/changes/ticket14325 b/changes/ticket14325
new file mode 100644
index 0000000000..38daa05aab
--- /dev/null
+++ b/changes/ticket14325
@@ -0,0 +1,5 @@
+ o Documentation fixes:
+ - Make the tor-resolve documentation match its help string and its
+ options. Resolves part of ticket 14325.
+ - Log a more useful error message from tor-resolve when failing to
+ look up a hidden service address. Resolves part of ticket 14325.
diff --git a/changes/ticket9969 b/changes/ticket9969
new file mode 100644
index 0000000000..c208e26c1c
--- /dev/null
+++ b/changes/ticket9969
@@ -0,0 +1,8 @@
+ o Minor features (directory client):
+ - When downloading server- or microdescriptors from a directory server,
+ we no longer launch multiple simultaneous requests to the same server.
+ This reduces load on the directory servers, especially when directory
+ guards are in use. Closes ticket 9969.
+ - When downloading server- or microdescriptors over a tunneled
+ connection, do not limit the length of our request to what the Squid
+ proxy is willing to handle. Part of ticket 9969.