aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
Diffstat (limited to 'changes')
-rw-r--r--changes/271864
-rw-r--r--changes/272864
-rw-r--r--changes/NSS7
-rw-r--r--changes/bug155186
-rw-r--r--changes/bug178736
-rw-r--r--changes/bug186425
-rw-r--r--changes/bug20424_029_minimal4
-rw-r--r--changes/bug208747
-rw-r--r--changes/bug215307
-rw-r--r--changes/bug221563
-rw-r--r--changes/bug241044
-rw-r--r--changes/bug243124
-rw-r--r--changes/bug248914
-rw-r--r--changes/bug249775
-rw-r--r--changes/bug254405
-rw-r--r--changes/bug254773
-rw-r--r--changes/bug255525
-rw-r--r--changes/bug25686_diagnostic4
-rw-r--r--changes/bug257877
-rw-r--r--changes/bug258867
-rw-r--r--changes/bug261524
-rw-r--r--changes/bug261585
-rw-r--r--changes/bug261967
-rw-r--r--changes/bug262143
-rw-r--r--changes/bug262233
-rw-r--r--changes/bug262453
-rw-r--r--changes/bug26258_0334
-rw-r--r--changes/bug262695
-rw-r--r--changes/bug262824
-rw-r--r--changes/bug263675
-rw-r--r--changes/bug264024
-rw-r--r--changes/bug264153
-rw-r--r--changes/bug264355
-rw-r--r--changes/bug264373
-rw-r--r--changes/bug264704
-rw-r--r--changes/bug264854
-rw-r--r--changes/bug264884
-rw-r--r--changes/bug264973
-rw-r--r--changes/bug26497-backport3
-rw-r--r--changes/bug26497-cd4
-rw-r--r--changes/bug265023
-rw-r--r--changes/bug265226
-rw-r--r--changes/bug265235
-rw-r--r--changes/bug265254
-rw-r--r--changes/bug26535.0295
-rw-r--r--changes/bug26535.0325
-rw-r--r--changes/bug265683
-rw-r--r--changes/bug266277
-rw-r--r--changes/bug267794
-rw-r--r--changes/bug267854
-rw-r--r--changes/bug267873
-rw-r--r--changes/bug267894
-rw-r--r--changes/bug268303
-rw-r--r--changes/bug268533
-rw-r--r--changes/bug268734
-rw-r--r--changes/bug268764
-rw-r--r--changes/bug268825
-rw-r--r--changes/bug268926
-rw-r--r--changes/bug268963
-rw-r--r--changes/bug269244
-rw-r--r--changes/bug269274
-rw-r--r--changes/bug269323
-rw-r--r--changes/bug269484
-rw-r--r--changes/bug269863
-rw-r--r--changes/bug269943
-rw-r--r--changes/bug270036
-rw-r--r--changes/bug270346
-rw-r--r--changes/bug270445
-rw-r--r--changes/bug270814
-rw-r--r--changes/bug270885
-rw-r--r--changes/bug270903
-rw-r--r--changes/bug270933
-rw-r--r--changes/bug270963
-rw-r--r--changes/bug271644
-rw-r--r--changes/bug271654
-rw-r--r--changes/bug271774
-rw-r--r--changes/bug271853
-rw-r--r--changes/bug272245
-rw-r--r--changes/bug272265
-rw-r--r--changes/bug272365
-rw-r--r--changes/bug272374
-rw-r--r--changes/bug272953
-rw-r--r--changes/bug273444
-rw-r--r--changes/bug273455
-rw-r--r--changes/bug274183
-rw-r--r--changes/bug274283
-rw-r--r--changes/bug274533
-rw-r--r--changes/bug274606
-rw-r--r--changes/bug274615
-rw-r--r--changes/bug274633
-rw-r--r--changes/bug274655
-rw-r--r--changes/doc265883
-rw-r--r--changes/doc266384
-rw-r--r--changes/doc269084
-rw-r--r--changes/feature195063
-rw-r--r--changes/feature251323
-rw-r--r--changes/feature26372_0294
-rw-r--r--changes/feature268153
-rw-r--r--changes/feature2681611
-rw-r--r--changes/feature83233
-rw-r--r--changes/full_include_paths3
-rw-r--r--changes/geoip-2018-07-034
-rw-r--r--changes/geoip-2018-08-074
-rw-r--r--changes/iphplapi4
-rw-r--r--changes/rust_cross2
-rw-r--r--changes/split_or_h5
-rw-r--r--changes/task267714
-rw-r--r--changes/ticket199793
-rw-r--r--changes/ticket204245
-rw-r--r--changes/ticket213496
-rw-r--r--changes/ticket238465
-rw-r--r--changes/ticket242045
-rw-r--r--changes/ticket246293
-rw-r--r--changes/ticket24629-backport3
-rw-r--r--changes/ticket255735
-rw-r--r--changes/ticket259284
-rw-r--r--changes/ticket259474
-rw-r--r--changes/ticket259605
-rw-r--r--changes/ticket264264
-rw-r--r--changes/ticket264276
-rw-r--r--changes/ticket264475
-rw-r--r--changes/ticket264673
-rw-r--r--changes/ticket2648112
-rw-r--r--changes/ticket264924
-rw-r--r--changes/ticket265104
-rw-r--r--changes/ticket265264
-rw-r--r--changes/ticket26526_extra3
-rw-r--r--changes/ticket265273
-rw-r--r--changes/ticket266263
-rw-r--r--changes/ticket266474
-rw-r--r--changes/ticket266633
-rw-r--r--changes/ticket267033
-rw-r--r--changes/ticket269473
-rw-r--r--changes/ticket26952-cargo3
-rw-r--r--changes/ticket26952-ccache3
-rw-r--r--changes/ticket270405
-rw-r--r--changes/ticket270873
-rw-r--r--changes/ticket271696
-rw-r--r--changes/ticket272113
-rw-r--r--changes/ticket272159
-rw-r--r--changes/ticket272464
-rw-r--r--changes/ticket272475
-rw-r--r--changes/ticket272753
-rw-r--r--changes/ticket274304
-rw-r--r--changes/ticket274493
-rw-r--r--changes/ticket274673
-rw-r--r--changes/ticket275477
-rw-r--r--changes/ticket276303
-rw-r--r--changes/ticket276785
-rw-r--r--changes/ticket3569_part16
-rw-r--r--changes/ticket37233
-rw-r--r--changes/ticket84154
152 files changed, 354 insertions, 296 deletions
diff --git a/changes/27186 b/changes/27186
new file mode 100644
index 0000000000..522580e91a
--- /dev/null
+++ b/changes/27186
@@ -0,0 +1,4 @@
+ o Minor features (UI):
+ - Log each included configuration file or directory as we read it, to
+ provide more visibility about where Tor is reading from.
+ Patch from Unto Sten; closes ticket 27186.
diff --git a/changes/27286 b/changes/27286
deleted file mode 100644
index 5f5f7a4ae7..0000000000
--- a/changes/27286
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (directory authorities):
- - Authorities no longer vote to make the subprotocol version "LinkAuth=1"
- a requirement: it is unsupportable with NSS, and hasn't been needed
- since Tor 0.3.0.1-alpha. Closes ticket 27286.
diff --git a/changes/NSS b/changes/NSS
new file mode 100644
index 0000000000..fc13867b40
--- /dev/null
+++ b/changes/NSS
@@ -0,0 +1,7 @@
+ o Major features (portability, cryptography, experimental, TLS):
+ - Tor now has the option to compile with the NSS library instead of
+ OpenSSL. This feature is experimental, and we expect that bugs may
+ remain. It is mainly intended for environments where Tor's performance
+ is not CPU-bound, and where NSS is already known to be installed.
+ To try it out, configure Tor with the --enable-nss flag.
+ Closes ticket 26631.
diff --git a/changes/bug15518 b/changes/bug15518
new file mode 100644
index 0000000000..13ed4f527e
--- /dev/null
+++ b/changes/bug15518
@@ -0,0 +1,6 @@
+ o Minor bugfixes (ipv6):
+ - In addrs_in_same_network_family(), we choose the subnet size based
+ on the IP version (IPv4 or IPv6). Previously, we chose a fixed subnet
+ size of /16 for both IPv4 and IPv6 addresses. Fixes bug 15518; bugfix
+ on 0.3.5.1-alpha. Patch by Neel Chauhan.
+
diff --git a/changes/bug17873 b/changes/bug17873
new file mode 100644
index 0000000000..4922fedafe
--- /dev/null
+++ b/changes/bug17873
@@ -0,0 +1,6 @@
+ o Minor bugfixes (OS compatibility):
+ - On Linux and Windows properly handle configuration change that
+ moves a listener to/from wildcard IP address. In case first
+ attempt to bind a socket fails, close the old listener and
+ try binding a socket again. Fixes bug 17873; bugfix on
+ 0.0.8pre-1.
diff --git a/changes/bug18642 b/changes/bug18642
new file mode 100644
index 0000000000..6b71f3c6dd
--- /dev/null
+++ b/changes/bug18642
@@ -0,0 +1,5 @@
+ o Minor features (denial-of-service avoidance):
+ - Make our OOM handler aware of the DNS cache so that it doesn't fill up
+ the memory. This check is important for our DoS mitigation subsystem.
+ Closes ticket 18642. Patch by Neel Chauhan
+
diff --git a/changes/bug20424_029_minimal b/changes/bug20424_029_minimal
deleted file mode 100644
index eb7886233e..0000000000
--- a/changes/bug20424_029_minimal
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (compilation):
- - When compiling with --enable-openbsd-malloc or --enable-tcmalloc, tell
- the compiler not to include the system malloc implementation. Fixes bug
- 20424; bugfix on 0.2.0.20-rc.
diff --git a/changes/bug20874 b/changes/bug20874
new file mode 100644
index 0000000000..ebec999224
--- /dev/null
+++ b/changes/bug20874
@@ -0,0 +1,7 @@
+ o Minor bugfixes (client, reachableaddresses):
+ - Instead of adding an "reject *:*" line to ReachableAddresses when
+ loading the configuration, add one to the policy after parsing it
+ in parse_reachable_addresses(). This prevents extra "reject *.*"
+ lines from accumulating on reloads. Fixes bug 20874; bugfix on
+ 0.3.5.1-alpha. Patch by Neel Chauhan.
+
diff --git a/changes/bug21530 b/changes/bug21530
new file mode 100644
index 0000000000..24d981d82b
--- /dev/null
+++ b/changes/bug21530
@@ -0,0 +1,7 @@
+ o Major features (relay):
+ - Relays no longer run as exits by default. If the "ExitRelay" option is
+ auto (or unset), and no exit policy is specified with ExitPolicy or
+ ReducedExitPolicy, we now treat ExitRelay as 0. Previously in this
+ case, we allowed exit
+ traffic and logged a warning message. Closes ticket
+ 21530. Patch by Neel Chauhan.
diff --git a/changes/bug22156 b/changes/bug22156
new file mode 100644
index 0000000000..685f2a551b
--- /dev/null
+++ b/changes/bug22156
@@ -0,0 +1,3 @@
+ o Minor features (development):
+ - Tor's makefile now supports running the "clippy" Rust style tool
+ on our Rust code. Closes ticket 22156.
diff --git a/changes/bug24104 b/changes/bug24104
new file mode 100644
index 0000000000..ca2a3537fa
--- /dev/null
+++ b/changes/bug24104
@@ -0,0 +1,4 @@
+ o Minor bugfix (relay statistics):
+ - Update relay descriptor on bandwidth changes only when the uptime is
+ smaller than 24h in order to reduce the efficiency of guard discovery
+ attacks. Fixes bug 24104; bugfix on 0.1.1.6-alpha.
diff --git a/changes/bug24312 b/changes/bug24312
new file mode 100644
index 0000000000..f049c0e7e6
--- /dev/null
+++ b/changes/bug24312
@@ -0,0 +1,4 @@
+ o Minor bugfixes (relays):
+ - Since 0.3.3.5-rc, authorities require DirCache (V2Dir) for the Guard
+ flag. Update the message logged on relays when DirCache is disabled.
+ Fixes bug 24312; bugfix on 0.3.3.5-rc.
diff --git a/changes/bug24891 b/changes/bug24891
deleted file mode 100644
index 403b2b1123..0000000000
--- a/changes/bug24891
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (compilation):
- - Refrain from compiling unit testing related object files
- when --disable-unittests is set to configure script.
- Fixes bug 24891; bugfix on 0.2.5.1-alpha.
diff --git a/changes/bug24977 b/changes/bug24977
deleted file mode 100644
index f8127a2a73..0000000000
--- a/changes/bug24977
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (onion services):
- - Recompute some consensus information after clock skews or when we
- transition from a non-live consensus to a live consensus. We do this to
- avoid having an outdated state which could impact next-generation onion
- services. Fixes bug 24977; bugfix on 0.3.2.1-alpha.
diff --git a/changes/bug25440 b/changes/bug25440
deleted file mode 100644
index f8d9dd4fab..0000000000
--- a/changes/bug25440
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (linux seccomp2 sandbox):
- - Fix a bug in out sandboxing rules for the openat() syscall.
- Previously, no openat() call would be permitted, which would break
- filesystem operations on recent glibc versions. Fixes bug 25440;
- bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto.
diff --git a/changes/bug25477 b/changes/bug25477
new file mode 100644
index 0000000000..0eac06137f
--- /dev/null
+++ b/changes/bug25477
@@ -0,0 +1,3 @@
+ o Minor bugfixes (logging):
+ - Refrain from mentioning bug 21018, as it is already fixed.
+ Fixes bug 25477; bugfix on 0.2.9.8.
diff --git a/changes/bug25552 b/changes/bug25552
new file mode 100644
index 0000000000..8d0488a462
--- /dev/null
+++ b/changes/bug25552
@@ -0,0 +1,5 @@
+ o Major feature (onion services):
+ - Improve revision counter generation in next-gen onion services. Onion
+ services can now scale by hosting multiple instances on different hosts
+ without synchronization between them, which was previously impossible
+ because descriptors would get rejected by HSDirs. Addresses ticket 25552.
diff --git a/changes/bug25686_diagnostic b/changes/bug25686_diagnostic
deleted file mode 100644
index 96323145d8..0000000000
--- a/changes/bug25686_diagnostic
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (relay, diagnostic):
- - Add several checks to detect whether Tor relays are uploading their
- descriptors without specifying why they regenerated. Diagnostic for
- ticket 25686.
diff --git a/changes/bug25787 b/changes/bug25787
deleted file mode 100644
index 3041e8a603..0000000000
--- a/changes/bug25787
+++ /dev/null
@@ -1,7 +0,0 @@
- o Minor bugfixes (testing):
- - Instead of trying to read the geoip configuration files from within the
- unit tests, instead create our own ersatz files with just enough
- geoip data in the format we expect. Trying to read from the source
- directory created problems on Windows with mingw, where the
- build system's paths are not the same as the platform's paths.
- Fixes bug 25787; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug25886 b/changes/bug25886
new file mode 100644
index 0000000000..45f9a54069
--- /dev/null
+++ b/changes/bug25886
@@ -0,0 +1,7 @@
+ o Minor bugfixes (relay):
+ - In frac_nodes_with_descriptors(), add for_direct_connect, and replace
+ node_has_any_descriptor() with node_has_preferred_descriptor(). Also,
+ if we are using bridges and there is at least one bridge with a full
+ descriptor, set f_guard in compute_frac_paths_available() to 1.0.
+ Fixes bug 25886; bugfix on 0.3.5.1-alpha. Patch by Neel Chauhan.
+
diff --git a/changes/bug26152 b/changes/bug26152
new file mode 100644
index 0000000000..34fda09b25
--- /dev/null
+++ b/changes/bug26152
@@ -0,0 +1,4 @@
+ o Minor bugfixes (testing):
+ - When logging a version mismatch in our openssl_version tests,
+ report the actual offending version strings. Fixes bug 26152; bugfix on
+ 0.2.9.1-alpha.
diff --git a/changes/bug26158 b/changes/bug26158
deleted file mode 100644
index 0d74cf1167..0000000000
--- a/changes/bug26158
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (relay):
- - Relays now correctly block attempts to re-extend to the previous
- relay by Ed25519 identity. Previously they would warn in this case,
- but not actually reject the attempt. Fixes bug 26158; bugfix on
- 0.3.0.1-alpha.
diff --git a/changes/bug26196 b/changes/bug26196
deleted file mode 100644
index e63f09a2d6..0000000000
--- a/changes/bug26196
+++ /dev/null
@@ -1,7 +0,0 @@
- o Minor bugfixes (testing, compilation):
- - Refrain from trying to get an item from empty smartlist in
- test_bridges_clear_bridge_list. Set DEBUG_SMARTLIST in unit
- tests to catch improper smartlist usage. Furthermore,
- enable DEBUG_SMARTLIST globally when build is configured
- with fragile hardening. Fixes bug 26196; bugfix on
- 0.3.4.1-alpha.
diff --git a/changes/bug26214 b/changes/bug26214
deleted file mode 100644
index 4277b9c6ec..0000000000
--- a/changes/bug26214
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (correctness, flow control):
- - Upon receiving a stream-level SENDME cell, verify that our window has
- not grown too large. Fixes bug 26214; bugfix on svn r54 (pre-0.0.1)
diff --git a/changes/bug26223 b/changes/bug26223
new file mode 100644
index 0000000000..e17b0529e3
--- /dev/null
+++ b/changes/bug26223
@@ -0,0 +1,3 @@
+ o Minor features (directory authority):
+ - There is no longer an artificial upper limit on the length of bandwidth
+ lines. Closes ticket 26223.
diff --git a/changes/bug26245 b/changes/bug26245
deleted file mode 100644
index 7a14cea0bc..0000000000
--- a/changes/bug26245
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features (compilation):
- o The --enable-fatal-warnings flag now affects Rust code as well.
- Closes ticket 26245.
diff --git a/changes/bug26258_033 b/changes/bug26258_033
deleted file mode 100644
index ceca383335..0000000000
--- a/changes/bug26258_033
+++ /dev/null
@@ -1,4 +0,0 @@
- o Major bugfixes (rust, testing):
- - Fix a bug where a failure in the rust unit tests would not actually
- cause the build to fail. Fixes bug 26258; bugfix on 0.3.3.4-alpha.
-
diff --git a/changes/bug26269 b/changes/bug26269
deleted file mode 100644
index 73dcdbf5c5..0000000000
--- a/changes/bug26269
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (compilation):
- - Fix a compilation warning on some versions of GCC when
- building code that calls routerinfo_get_my_routerinfo() twice,
- assuming that the second call will succeed if the first one did.
- Fixes bug 26269; bugfix on 0.2.8.2-alpha.
diff --git a/changes/bug26282 b/changes/bug26282
new file mode 100644
index 0000000000..c278f0b60a
--- /dev/null
+++ b/changes/bug26282
@@ -0,0 +1,4 @@
+ o Minor bugfixes (C correctness):
+ - Avoid casting smartlist index to int implicitly, as it may trigger
+ a warning (-Wshorten-64-to-32). Fixes bug 26282; bugfix on
+ 0.2.3.13-alpha, 0.2.7.1-alpha and 0.2.1.1-alpha.
diff --git a/changes/bug26367 b/changes/bug26367
new file mode 100644
index 0000000000..af098df9c4
--- /dev/null
+++ b/changes/bug26367
@@ -0,0 +1,5 @@
+ o Removed features (hidden service, tor2web):
+ - Remove Tor2web functionalities. The Tor2webMode and
+ Tor2webRendezvousPoints options are now obsolete. Note that this feature
+ was never shipped in vanilla Tor and it was only possible to use this
+ feature by building the support at compile time. Closes ticket 26367.
diff --git a/changes/bug26402 b/changes/bug26402
deleted file mode 100644
index b21283a2d2..0000000000
--- a/changes/bug26402
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (compilation):
- - When linking the libtor_testing.a library, only include the dirauth
- object files once. Previously, they were getting added twice.
- Fixes bug 26402; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug26415 b/changes/bug26415
deleted file mode 100644
index 497fbb7365..0000000000
--- a/changes/bug26415
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (testing):
- - Fix compilation of the doctests in the Rust crypto crate. Fixes
- bug 26415; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug26435 b/changes/bug26435
deleted file mode 100644
index f66c503dd5..0000000000
--- a/changes/bug26435
+++ /dev/null
@@ -1,5 +0,0 @@
- o Major bugfixes (directory authority):
- - Fix a memory leak where directory authorities would leak a chunk
- of memory for every router descriptor every time they considered
- voting. This bug was taking down directory authorities due to
- out-of-memory issues. Fixes bug 26435; bugfix on 0.3.3.6.
diff --git a/changes/bug26437 b/changes/bug26437
new file mode 100644
index 0000000000..da4879b6d0
--- /dev/null
+++ b/changes/bug26437
@@ -0,0 +1,3 @@
+ o Testing:
+ - Fix forking tests on Windows when there is a space somewhere in the path.
+ Fixes bug 26437; bugfix on 0.2.2.4-alpha.
diff --git a/changes/bug26470 b/changes/bug26470
new file mode 100644
index 0000000000..854ec7ea72
--- /dev/null
+++ b/changes/bug26470
@@ -0,0 +1,4 @@
+ o Minor bugfixes (HTTP tunnel):
+ - Fix a bug warning when closing an HTTP tunnel connection due to
+ an HTTP request we couldn't handle. Fixes bug 26470; bugfix on
+ 0.3.2.1-alpha.
diff --git a/changes/bug26485 b/changes/bug26485
deleted file mode 100644
index 5a40b7a78e..0000000000
--- a/changes/bug26485
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (directory authority):
- - When voting for recommended versions, make sure that all of the
- versions are well-formed and parsable. Fixes bug 26485; bugfix on
- 0.1.1.6-alpha.
diff --git a/changes/bug26488 b/changes/bug26488
new file mode 100644
index 0000000000..f93d4c6f00
--- /dev/null
+++ b/changes/bug26488
@@ -0,0 +1,4 @@
+ o Major bugfixes (directory authority):
+ - Actually check that address we get from DirAuthority configuration
+ line is valid IPv4. Explicitly disallow DirAuthority adress to be
+ DNS hostname. Fixes bug 26488; bugfix on 0.1.2.10-rc.
diff --git a/changes/bug26497 b/changes/bug26497
deleted file mode 100644
index d0c05ff3e4..0000000000
--- a/changes/bug26497
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (rust):
- - Stop setting $CARGO_HOME. cargo will use the user's $CARGO_HOME, or
- $HOME/.cargo by default. Fixes bug 26497; bugfix on 0.3.1.5-alpha.
diff --git a/changes/bug26497-backport b/changes/bug26497-backport
deleted file mode 100644
index 1d86e01bf3..0000000000
--- a/changes/bug26497-backport
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (rust):
- - Backport test_rust.sh from master.
- Fixes bug 26497; bugfix on 0.3.1.5-alpha.
diff --git a/changes/bug26497-cd b/changes/bug26497-cd
deleted file mode 100644
index 37bf1bc956..0000000000
--- a/changes/bug26497-cd
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (rust):
- - cd to ${abs_top_builddir}/src/rust before running cargo in
- src/test/test_rust.sh. This makes the working directory consistent
- between builds and tests. Fixes bug 26497; bugfix on 0.3.3.2-alpha.
diff --git a/changes/bug26502 b/changes/bug26502
new file mode 100644
index 0000000000..16d19095d3
--- /dev/null
+++ b/changes/bug26502
@@ -0,0 +1,3 @@
+ o Code simplification and refactoring:
+ - 'updateFallbackDirs.py' now ignores the blacklist file as it's not longer needed
+ Closes ticket 26502.
diff --git a/changes/bug26522 b/changes/bug26522
new file mode 100644
index 0000000000..c6b30eed79
--- /dev/null
+++ b/changes/bug26522
@@ -0,0 +1,6 @@
+ o Minor bugfixes (security):
+ - Refrain from potentially insecure usage of strncat() in
+ configure_backtrace_handler(). Use snprintf() instead.
+ Fixes bug 26522; bugfix on
+ a969ce464dc23db39725a891d60537f3d3e51b50 (not in any tor
+ release).
diff --git a/changes/bug26523 b/changes/bug26523
deleted file mode 100644
index a739d240e9..0000000000
--- a/changes/bug26523
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (hidden service, control port):
- - The HSPOST command wasn't parsing properly the HSADDRESS= parameter and
- thus not using it. It now handles it correctly. Fixes bug 26523; bugfix on
- 0.3.3.1-alpha. Patch by "akwizgran".
-
diff --git a/changes/bug26525 b/changes/bug26525
new file mode 100644
index 0000000000..27862eee96
--- /dev/null
+++ b/changes/bug26525
@@ -0,0 +1,4 @@
+ o Minor bugfixes (code quality):
+ - Rename sandbox_getaddrinfo() and other functions to no longer
+ misleadingly suggest that they are sandbox-only. Fixes bug
+ 26525; bugfix on 0.2.7.1-alpha.
diff --git a/changes/bug26535.029 b/changes/bug26535.029
deleted file mode 100644
index 111b539f17..0000000000
--- a/changes/bug26535.029
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (testing, compatibility):
- - When running the ntor_ref.py test, make sure only to pass strings
- (rather than "bytes" objects) to the Python subprocess module.
- Python 3 on Windows seems to require this. Fixes bug 26535; bugfix on
- 0.2.5.5-alpha.
diff --git a/changes/bug26535.032 b/changes/bug26535.032
deleted file mode 100644
index 395d08d816..0000000000
--- a/changes/bug26535.032
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (testing, compatibility):
- - When running the hs_ntor_ref.py test, make sure only to pass strings
- (rather than "bytes" objects) to the Python subprocess module.
- Python 3 on Windows seems to require this. Fixes bug 26535; bugfix on
- 0.3.1.1-alpha.
diff --git a/changes/bug26568 b/changes/bug26568
deleted file mode 100644
index 0c4c05d043..0000000000
--- a/changes/bug26568
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (controller):
- - Report the port correctly when a port is configured to bind to "auto".
- Fixes bug 26568; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug26627 b/changes/bug26627
deleted file mode 100644
index d28bd05d53..0000000000
--- a/changes/bug26627
+++ /dev/null
@@ -1,7 +0,0 @@
- o Minor bugfixes (v3 onion services):
- - Stop sending ed25519 link specifiers in v3 onion service introduce
- cells, when the rendezvous point doesn't support ed25519 link
- authentication. Fixes bug 26627; bugfix on 0.3.2.4-alpha.
- - Stop putting ed25519 link specifiers in v3 onion service descriptors,
- when the intro point doesn't support ed25519 link authentication.
- Fixes bug 26627; bugfix on 0.3.2.4-alpha.
diff --git a/changes/bug26779 b/changes/bug26779
deleted file mode 100644
index fb7f6160ea..0000000000
--- a/changes/bug26779
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (bug workaround):
- - Compile correctly on systems that provide the C11 stdatomic.h header,
- but where C11 atomic functions don't actually compile.
- Closes ticket 26779; workaround for Debian issue 903709.
diff --git a/changes/bug26785 b/changes/bug26785
deleted file mode 100644
index e6392fcbdd..0000000000
--- a/changes/bug26785
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (compilation, portability):
- - Don't try to use a pragma to temporarily disable
- -Wunused-const-variable if the compiler doesn't support it.
- Fixes bug 26785; bugfix on 0.3.2.11.
diff --git a/changes/bug26787 b/changes/bug26787
deleted file mode 100644
index b32e519a93..0000000000
--- a/changes/bug26787
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (testing):
- - Disable core dumps in test_bt.sh, to avoid failures in "make
- distcheck". Fixes bug 26787; bugfix on 0.2.5.2-alpha.
diff --git a/changes/bug26789 b/changes/bug26789
deleted file mode 100644
index 9b3520543d..0000000000
--- a/changes/bug26789
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (compilation):
- - Update build system so that tor builds again with
- --disable-unittests after recent refactoring efforts.
- Fixes bug 26789; bugfix on 0.3.4.3-alpha.
diff --git a/changes/bug26830 b/changes/bug26830
deleted file mode 100644
index c002f19530..0000000000
--- a/changes/bug26830
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (continuous integration):
- - Skip an unreliable key generation test on Windows, until the underlying
- issue in bug 26076 is resolved. Fixes bug 26830; bugfix on 0.2.7.3-rc.
diff --git a/changes/bug26853 b/changes/bug26853
deleted file mode 100644
index 6ee47789b9..0000000000
--- a/changes/bug26853
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (continuous integration):
- - Skip an unreliable key expiration test on Windows, until the underlying
- issue in bug 26076 is resolved. Fixes bug 26853; bugfix on 0.3.2.1-alpha.
diff --git a/changes/bug26873 b/changes/bug26873
deleted file mode 100644
index 565f8bf0b1..0000000000
--- a/changes/bug26873
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (portability):
- - Fix compilation of the unit tests on GNU/Hurd, which does not
- define PATH_MAX. Fixes bug 26873; bugfix on 0.3.3.1-alpha.
- Patch from "paulusASol".
diff --git a/changes/bug26876 b/changes/bug26876
deleted file mode 100644
index b661104236..0000000000
--- a/changes/bug26876
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (portability):
- - Work around two different bugs in the OS X 10.10 and later SDKs that
- would prevent us from successfully targeting earlier versions of OS X.
- Fixes bug 26876; bugfix on 0.3.3.1-alpha.
diff --git a/changes/bug26882 b/changes/bug26882
new file mode 100644
index 0000000000..adfe0e2f35
--- /dev/null
+++ b/changes/bug26882
@@ -0,0 +1,5 @@
+ o Minor bugfixes (logging, documentation):
+ - When SafeLogging is enabled, scrub IP address in
+ channel_tls_process_netinfo_cell(). Also, add a note
+ to manpage that scrubbing is not guaranteed on loglevels
+ below Notice. Fixes bug 26882; bugfix on 0.2.4.10-alpha.
diff --git a/changes/bug26892 b/changes/bug26892
new file mode 100644
index 0000000000..6fc8a03204
--- /dev/null
+++ b/changes/bug26892
@@ -0,0 +1,6 @@
+ o Minor bugfixes (logging):
+ - As a precaution, do an early return from
+ log_addr_has_changed() if Tor is running as client. Also,
+ log a stack trace for debugging as this function should only
+ be called when Tor runs as server. Fixes bug 26892;
+ bugfix on 0.1.1.9-alpha.
diff --git a/changes/bug26896 b/changes/bug26896
new file mode 100644
index 0000000000..9762dc7fac
--- /dev/null
+++ b/changes/bug26896
@@ -0,0 +1,3 @@
+ o Minor bugfixes (directory connection shutdown):
+ - Avoid a double-close when shutting down a stalled directory connection.
+ Fixes bug 26896; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug26924 b/changes/bug26924
deleted file mode 100644
index 882db56b40..0000000000
--- a/changes/bug26924
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (single onion services, Tor2web):
- - Log a protocol warning when single onion services or Tor2web clients
- fail to authenticate direct connections to relays.
- Fixes bug 26924; bugfix on 0.2.9.1-alpha.
diff --git a/changes/bug26927 b/changes/bug26927
deleted file mode 100644
index cd035bba8e..0000000000
--- a/changes/bug26927
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (logging):
- - Improve the log message when connection initiators fail to authenticate
- direct connections to relays.
- Fixes bug 26927; bugfix on 0.3.0.1-alpha.
diff --git a/changes/bug26932 b/changes/bug26932
deleted file mode 100644
index 7d9481dcd3..0000000000
--- a/changes/bug26932
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (onion services):
- - Fix bug that causes services to not ever rotate their descriptors if they
- were getting SIGHUPed often. Fixes bug 26932; bugfix on 0.3.2.1-alpha. \ No newline at end of file
diff --git a/changes/bug26948 b/changes/bug26948
deleted file mode 100644
index 0f0728843f..0000000000
--- a/changes/bug26948
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (in-process restart):
- - Always call tor_free_all() when leaving tor_run_main(). When we
- did not, restarting tor in-process would cause an assertion failure.
- Fixes bug 26948; bugfix on 0.3.3.1-alpha.
diff --git a/changes/bug26986 b/changes/bug26986
new file mode 100644
index 0000000000..a3ab9ff25d
--- /dev/null
+++ b/changes/bug26986
@@ -0,0 +1,3 @@
+ o Minor bugfixes (compilation):
+ - Use Windows-compatible format strings in tor-print-ed-signing-cert.c.
+ Fixes bug 26986; bugfix on master.
diff --git a/changes/bug26994 b/changes/bug26994
deleted file mode 100644
index 664894a7fc..0000000000
--- a/changes/bug26994
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (portability):
- - Avoid a compilation error in test_bwmgt.c on Solaris 10.
- Fixes bug 26994; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug27003 b/changes/bug27003
deleted file mode 100644
index 4f2045afc7..0000000000
--- a/changes/bug27003
+++ /dev/null
@@ -1,6 +0,0 @@
- o Major bugfixes (event scheduler):
- - When we enable a periodic event, schedule it in the event loop
- rather than running it immediately. Previously, we would re-run
- periodic events immediately in the middle of (for example)
- changing our options, with unpredictable effects. Fixes bug
- 27003; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug27034 b/changes/bug27034
new file mode 100644
index 0000000000..bdb7d29c11
--- /dev/null
+++ b/changes/bug27034
@@ -0,0 +1,6 @@
+ o Minor bugfixes (controller):
+ - Consider all routerinfo errors other than "not a server"
+ to be transient for the purpose of "GETINFO exit-policy/*"
+ controller request. Print stacktrace in the unlikely case
+ of failing to recompute routerinfo digest. Fixes bug 27034;
+ bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug27044 b/changes/bug27044
new file mode 100644
index 0000000000..0ce9c48b85
--- /dev/null
+++ b/changes/bug27044
@@ -0,0 +1,5 @@
+ o Minor bugfixes (configuration, Onion Services):
+ - In rend_service_parse_port_config(), disallow any input to
+ remain after address-port pair was parsed. This will catch
+ address and port being whitespace-separated by mistake of
+ the user. Fixes bug 27044; bugfix on 0.2.9.10.
diff --git a/changes/bug27081 b/changes/bug27081
deleted file mode 100644
index 74e0efbd29..0000000000
--- a/changes/bug27081
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (compilation, windows):
- - Don't link or search for pthreads when building for Windows, even if we
- are using build environment (like mingw) that provides a pthreads
- library. Fixes bug 27081; bugfix on 0.1.0.1-rc.
diff --git a/changes/bug27088 b/changes/bug27088
deleted file mode 100644
index d4d3b292c5..0000000000
--- a/changes/bug27088
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (continuous integration):
- - Pass the module flags to distcheck configure, and
- log the flags before running configure. (Backported
- to 0.2.9 and later as a precaution.)
- Fixes bug 27088; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug27090 b/changes/bug27090
deleted file mode 100644
index 3d119a9c30..0000000000
--- a/changes/bug27090
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (continuous integration):
- - Build with zstd on macOS.
- Fixes bug 27090; bugfix on 0.3.1.5-alpha.
diff --git a/changes/bug27093 b/changes/bug27093
deleted file mode 100644
index 6c097f1196..0000000000
--- a/changes/bug27093
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (rust):
- - Consistently use ../../.. as a fallback for $abs_top_srcdir in
- test_rust.sh. Fixes bug 27093; bugfix on 0.3.4.3-alpha.
diff --git a/changes/bug27096 b/changes/bug27096
new file mode 100644
index 0000000000..d1c139549d
--- /dev/null
+++ b/changes/bug27096
@@ -0,0 +1,3 @@
+ o Minor bugfixes (testing):
+ - Fix two unit tests to work when HOME environment variable is not
+ set. Fixes bug 27096; bugfix on 0.2.8.1-alpha.
diff --git a/changes/bug27164 b/changes/bug27164
deleted file mode 100644
index d04d2f28f4..0000000000
--- a/changes/bug27164
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (rust):
- - Protover parsing was ignoring a 2nd hyphen and everything after it,
- accepting entries like "Link=1-5-foo". Fixes bug 27164; bugfix on
- 0.3.3.1-alpha.
diff --git a/changes/bug27165 b/changes/bug27165
new file mode 100644
index 0000000000..9e78d17e9d
--- /dev/null
+++ b/changes/bug27165
@@ -0,0 +1,4 @@
+ o Minor bugfixes (C correctness):
+ - Use time_t for all values in predicted_ports_prediction_time_remaining().
+ Rework the code that computes difference between durations/timestamps.
+ Fixes bug 27165; bugfix on 0.3.1.1-alpha.
diff --git a/changes/bug27177 b/changes/bug27177
deleted file mode 100644
index b03bbc96ea..0000000000
--- a/changes/bug27177
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (rust):
- - Protover parsing was accepting the presence of whitespace in version
- strings, which the C implementation would choke on, e.g. "Desc=1\t,2".
- Fixes bug 27177; bugfix on 0.3.3.5-rc.
diff --git a/changes/bug27185 b/changes/bug27185
deleted file mode 100644
index 79221b3df4..0000000000
--- a/changes/bug27185
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (Windows, compilation):
- - Silence a compilation warning on MSVC 2017 and clang-cl.
- Fixes bug 27185; bugfix on 0.2.2.2-alpha.
diff --git a/changes/bug27224 b/changes/bug27224
new file mode 100644
index 0000000000..d43890b818
--- /dev/null
+++ b/changes/bug27224
@@ -0,0 +1,5 @@
+ o Minor bugfixes (performance)::
+ - Rework node_is_a_configured_bridge() to no longer
+ call node_get_all_orports(), which was performing too
+ many memory allocations. Fixes bug 27224; bugfix on
+ 0.2.3.9.
diff --git a/changes/bug27226 b/changes/bug27226
deleted file mode 100644
index 9030773cd5..0000000000
--- a/changes/bug27226
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (testing, openssl compatibility):
- - Our "tortls/cert_matches_key" unit test no longer relies on OpenSSL
- internals. Previously, it relied on unsupported OpenSSL behavior in
- a way that caused it to crash with OpenSSL 1.0.2p. Fixes bug 27226;
- bugfix on 0.2.5.1-alpha.
diff --git a/changes/bug27236 b/changes/bug27236
deleted file mode 100644
index 76d792f4c9..0000000000
--- a/changes/bug27236
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (testing, bootstrap):
- - When calculating bootstrap progress, check exit policies and the exit
- flag. Previously, Tor would only check the exit flag, which caused
- race conditions in small and fast networks like chutney.
- Fixes bug 27236; bugfix on 0.2.6.3-alpha.
diff --git a/changes/bug27237 b/changes/bug27237
new file mode 100644
index 0000000000..6fa70d785c
--- /dev/null
+++ b/changes/bug27237
@@ -0,0 +1,4 @@
+ o Minor bugfixes (bootstrap):
+ - Try harder to get descriptors in non-exit test networks, by
+ using the mid weight for the third hop when there are no exits.
+ Fixes bug 27237; bugfix on 0.2.6.2-alpha.
diff --git a/changes/bug27295 b/changes/bug27295
deleted file mode 100644
index c5a364877a..0000000000
--- a/changes/bug27295
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (testing, chutney):
- - Before running make test-network-all, delete old logs and test result
- files, to avoid spurious failures. Fixes bug 27295; bugfix on 0.2.7.3-rc.
diff --git a/changes/bug27344 b/changes/bug27344
deleted file mode 100644
index 9f66855586..0000000000
--- a/changes/bug27344
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (compatibility):
- - Tell OpenSSL to maintain backward compatibility with previous
- RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these ciphers
- are disabled by default. Closes ticket 27344.
diff --git a/changes/bug27345 b/changes/bug27345
deleted file mode 100644
index d98f4afbcc..0000000000
--- a/changes/bug27345
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (testing):
- - When running make test-network-all, use the mixed+hs-v2 network.
- (A previous fix to chutney removed v3 onion services from the
- mixed+hs-v23 network, so seeing "mixed+hs-v23" in tests is
- confusing.) Fixes bug 27345; bugfix on 0.3.2.1-alpha.
diff --git a/changes/bug27418 b/changes/bug27418
deleted file mode 100644
index 1d99497dc4..0000000000
--- a/changes/bug27418
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (continuous integration):
- - When we use echo in Travis, don't pass a --flag as the first argument.
- Fixes bug 27418; bugfix on 0.3.4.7-rc.
diff --git a/changes/bug27428 b/changes/bug27428
new file mode 100644
index 0000000000..86e00c7db3
--- /dev/null
+++ b/changes/bug27428
@@ -0,0 +1,3 @@
+ o Minor bugfixes (torrc):
+ - Tor now validates that the ContactInfo config option is valid UTF-8
+ when parsing torrc. Fixes bug 27428; bugfix on 0.0.8pre1.
diff --git a/changes/bug27453 b/changes/bug27453
deleted file mode 100644
index 4501346d2c..0000000000
--- a/changes/bug27453
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (continuous integration):
- - When a Travis build fails, and showing a log fails, keep trying to
- show the other logs. Fixes bug 27453; bugfix on 0.3.4.7-rc.
diff --git a/changes/bug27460 b/changes/bug27460
deleted file mode 100644
index 53c4c7daf3..0000000000
--- a/changes/bug27460
+++ /dev/null
@@ -1,6 +0,0 @@
- o Minor bugfixes (continuous integration):
- - Disable gcc hardening in Appveyor Windows 64-bit builds. As of
- August 29, 2018, Appveyor images come with gcc 8.2.0 by default.
- 64-bit Windows executables compiled with gcc 8.2.0 and
- tor's --enable-gcc-hardening crash.
- Fixes bug 27460; bugfix on 0.3.4.1-alpha.
diff --git a/changes/bug27461 b/changes/bug27461
deleted file mode 100644
index 3571ee816a..0000000000
--- a/changes/bug27461
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (compilation):
- - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not
- supported, and always fails. Some compilers warn about the function
- pointer cast on 64-bit Windows.
- Fixes bug 27461; bugfix on 0.2.2.23-alpha.
diff --git a/changes/bug27463 b/changes/bug27463
deleted file mode 100644
index 073acdd997..0000000000
--- a/changes/bug27463
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (onion services):
- - Silence a spurious compiler warning in rend_client_send_introduction().
- Fixes bug 27463; bugfix on 0.1.1.2-alpha.
diff --git a/changes/bug27465 b/changes/bug27465
deleted file mode 100644
index 743b35130f..0000000000
--- a/changes/bug27465
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (compilation):
- - Silence a spurious compiler warning on the GetAdaptersAddresses
- function pointer cast. This issue is already fixed by 26481 in
- 0.3.5 and later, by removing the lookup and cast.
- Fixes bug 27465; bugfix on 0.2.3.11-alpha.
diff --git a/changes/doc26588 b/changes/doc26588
new file mode 100644
index 0000000000..4b67bdb035
--- /dev/null
+++ b/changes/doc26588
@@ -0,0 +1,3 @@
+ o Documentation:
+ - Remove old instructions from INSTALL document. Closes
+ ticket 26588.
diff --git a/changes/doc26638 b/changes/doc26638
new file mode 100644
index 0000000000..d6f9b1de70
--- /dev/null
+++ b/changes/doc26638
@@ -0,0 +1,4 @@
+ o Minor features (development):
+ - Copy paragraph and URL to Tor's code of conduct document
+ from CONTRIBUTING to new CODE_OF_CONDUCT file. Resolves
+ ticket 26638.
diff --git a/changes/doc26908 b/changes/doc26908
new file mode 100644
index 0000000000..888da8be5b
--- /dev/null
+++ b/changes/doc26908
@@ -0,0 +1,4 @@
+ o Documentation:
+ - Warn users that they should not include MyFamily
+ line(s) in their torrc when running Tor bridge.
+ Closes ticket 26908.
diff --git a/changes/feature19506 b/changes/feature19506
new file mode 100644
index 0000000000..83ba9e245f
--- /dev/null
+++ b/changes/feature19506
@@ -0,0 +1,3 @@
+ o Minor features (admin tools):
+ - Add new tool that prints expiration date of signing cert
+ in ed25519_signing_cert. Resolves issue 19506.
diff --git a/changes/feature25132 b/changes/feature25132
new file mode 100644
index 0000000000..138cba9e90
--- /dev/null
+++ b/changes/feature25132
@@ -0,0 +1,3 @@
+ o Minor features (controller):
+ - The GETINFO command now support an "uptime" argument, to return
+ Tor's uptime in seconds. Closes ticket 25132.
diff --git a/changes/feature26372_029 b/changes/feature26372_029
deleted file mode 100644
index 150ac30555..0000000000
--- a/changes/feature26372_029
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (compilation):
-
- - When building Tor, prefer to use Python 3 over Python 2, and more
- recent (contemplated) versions over older ones. Closes ticket 26372.
diff --git a/changes/feature26815 b/changes/feature26815
new file mode 100644
index 0000000000..10e7e478f9
--- /dev/null
+++ b/changes/feature26815
@@ -0,0 +1,3 @@
+ o Major features (experimental, library support):
+ - When built with --enable-nss, Tor now uses the NSS library for digests,
+ AES, and pseudorandom numbers. Closes ticket 26815.
diff --git a/changes/feature26816 b/changes/feature26816
new file mode 100644
index 0000000000..3c25597d85
--- /dev/null
+++ b/changes/feature26816
@@ -0,0 +1,11 @@
+ o Major features (experimental, library support):
+ - Tor now has _partial_ support for using the NSS cryptography library in
+ place of OpenSSL. When Tor is configured with --enable-nss, it will
+ use NSS for several (but not yet all) of its cryptography. (It still
+ relies on OpenSSL for the rest.) Eventually, if all goes as planned,
+ "--enable-nss" will produce a version of Tor that does not depend on
+ OpenSSL. Implements ticket 26816.
+
+ WARNING: This feature is experimental. Don't use it for real security
+ yet, until the code has had much more review, and more bugs have been
+ shaken out.
diff --git a/changes/feature8323 b/changes/feature8323
new file mode 100644
index 0000000000..6fbc972d26
--- /dev/null
+++ b/changes/feature8323
@@ -0,0 +1,3 @@
+ o Minor features (controller):
+ - Implement 'GETINFO md/all' controller command to enable
+ getting all known microdesriptors. Closes ticket 8323.
diff --git a/changes/full_include_paths b/changes/full_include_paths
new file mode 100644
index 0000000000..c0ac0a05d3
--- /dev/null
+++ b/changes/full_include_paths
@@ -0,0 +1,3 @@
+ o Code simplification and refactoring:
+ - Include paths to header files within Tor are now qualified by directory
+ within the top-level src directory.
diff --git a/changes/geoip-2018-07-03 b/changes/geoip-2018-07-03
deleted file mode 100644
index e921d63c99..0000000000
--- a/changes/geoip-2018-07-03
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (geoip):
- - Update geoip and geoip6 to the July 3 2018 Maxmind GeoLite2
- Country database. Closes ticket 26674.
-
diff --git a/changes/geoip-2018-08-07 b/changes/geoip-2018-08-07
deleted file mode 100644
index 9ddbe7b1b2..0000000000
--- a/changes/geoip-2018-08-07
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (geoip):
- - Update geoip and geoip6 to the August 7 2018 Maxmind GeoLite2
- Country database. Closes ticket 27089.
-
diff --git a/changes/iphplapi b/changes/iphplapi
new file mode 100644
index 0000000000..806f71c3f3
--- /dev/null
+++ b/changes/iphplapi
@@ -0,0 +1,4 @@
+ o Removed features:
+ - Tor no longer attempts to run on Windows environments without the
+ GetAdaptersAddresses() function. This function has existed since
+ Windows XP, which is itself already older than we support.
diff --git a/changes/rust_cross b/changes/rust_cross
deleted file mode 100644
index d490403a28..0000000000
--- a/changes/rust_cross
+++ /dev/null
@@ -1,2 +0,0 @@
- o Minor feature (Rust, portability):
- - Rust cross-compilation is now supported. Closes ticket 25895.
diff --git a/changes/split_or_h b/changes/split_or_h
new file mode 100644
index 0000000000..53d54ca6dd
--- /dev/null
+++ b/changes/split_or_h
@@ -0,0 +1,5 @@
+ o Code simplification and refactoring:
+ - Many structures have been removed from the centralized "or.h" header,
+ and moved into their own headers. This will allow us to reduce
+ the number of places in the code that rely on each structure's
+ contents and layout. Closes ticket 26383.
diff --git a/changes/task26771 b/changes/task26771
deleted file mode 100644
index fd700900f7..0000000000
--- a/changes/task26771
+++ /dev/null
@@ -1,4 +0,0 @@
- o Directory authority changes:
- - The "Bifroest" bridge authority has been retired; the new bridge
- authority is "Serge", and it is operated by George from the
- TorBSD project. Closes ticket 26771.
diff --git a/changes/ticket19979 b/changes/ticket19979
new file mode 100644
index 0000000000..a6bf93f1a4
--- /dev/null
+++ b/changes/ticket19979
@@ -0,0 +1,3 @@
+ o Minor features (openssl):
+ - When possible, use RFC5869 HKDF implementation from OpenSSL.
+ Resolves ticket 19979.
diff --git a/changes/ticket20424 b/changes/ticket20424
new file mode 100644
index 0000000000..b3b6f1afa5
--- /dev/null
+++ b/changes/ticket20424
@@ -0,0 +1,5 @@
+ o Minor features (compilation):
+ - Tor's configure script now supports a --with-malloc= option to select
+ your malloc implementation. Supported options are "tcmalloc",
+ "jemalloc", "openbsd" (deprecated), and "system" (the default).
+ Addresses part of ticket 20424. Based on a patch from Alex Xu.
diff --git a/changes/ticket21349 b/changes/ticket21349
new file mode 100644
index 0000000000..c072884062
--- /dev/null
+++ b/changes/ticket21349
@@ -0,0 +1,6 @@
+ o Code simplification and refactoring:
+ - Split sampled_guards_update_from_consensus() and
+ select_entry_guard_for_circuit() into subfunctions.
+ In entry_guards_update_primary() unite
+ three smartlist enumerations into one and move smartlist
+ comparison code out of the function. Closes ticket 21349.
diff --git a/changes/ticket23846 b/changes/ticket23846
new file mode 100644
index 0000000000..73850482b1
--- /dev/null
+++ b/changes/ticket23846
@@ -0,0 +1,5 @@
+ o Minor features (build):
+ - If you pass the "--enable-pic" option to configure, Tor will try to
+ tell the compiler to build position-independent code suitable to
+ link into a library. (The default remains -fPIE, for code suitable for a
+ relocatable executable.) Closes ticket 23846.
diff --git a/changes/ticket24204 b/changes/ticket24204
new file mode 100644
index 0000000000..835952045b
--- /dev/null
+++ b/changes/ticket24204
@@ -0,0 +1,5 @@
+ o Minor features (embedding API):
+ - The Tor controller API now supports a function to launch Tor with a
+ preconstructed owning controller FD, so that embedding applications
+ don't need to manage controller ports and authentication. Closes
+ ticket 24204.
diff --git a/changes/ticket24629 b/changes/ticket24629
deleted file mode 100644
index 482c0a1a6d..0000000000
--- a/changes/ticket24629
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features (continuous integration):
- - Enable macOS builds in our Travis CI configuration.
- Closes ticket 24629.
diff --git a/changes/ticket24629-backport b/changes/ticket24629-backport
deleted file mode 100644
index dfbc465634..0000000000
--- a/changes/ticket24629-backport
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features (continuous integration):
- - Backport Travis rust distcheck to 0.3.3.
- Closes ticket 24629.
diff --git a/changes/ticket25573 b/changes/ticket25573
new file mode 100644
index 0000000000..9939601b50
--- /dev/null
+++ b/changes/ticket25573
@@ -0,0 +1,5 @@
+ o Minor features (controller):
+ - For purposes of CIRC_BW-based dropped cell detection, track half-closed
+ stream ids, and allow their ENDs, SENDMEs, DATA and path bias check
+ cells to arrive without counting it as dropped until either the END arrvies,
+ or the windows are empty. Closes ticket 25573.
diff --git a/changes/ticket25928 b/changes/ticket25928
new file mode 100644
index 0000000000..30759fcb66
--- /dev/null
+++ b/changes/ticket25928
@@ -0,0 +1,4 @@
+ o Minor features (directory):
+ - Improved support for networks with only a single authority or a
+ single fallback directory. Patch from Gabriel Somlo. Closes
+ ticket 25928.
diff --git a/changes/ticket25947 b/changes/ticket25947
deleted file mode 100644
index 68559a73f8..0000000000
--- a/changes/ticket25947
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor feature (unit tests):
- - Test complete bandwidth measurements files and test that incomplete lines
- only give warnings when the end of the header has not been
- detected. Fixes bug 25947; bugfix on 0.2.2.1-alpha
diff --git a/changes/ticket25960 b/changes/ticket25960
deleted file mode 100644
index 0d1be2119b..0000000000
--- a/changes/ticket25960
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor feature (directory authorities):
- - Stop warning about incomplete bw lines before the first complete bw line
- has been found, so that additional header lines can be ignored.
- Fixes bug 25960; bugfix on 0.2.2.1-alpha
-
diff --git a/changes/ticket26426 b/changes/ticket26426
new file mode 100644
index 0000000000..05fa974943
--- /dev/null
+++ b/changes/ticket26426
@@ -0,0 +1,4 @@
+ o Removed features:
+ - Tor no longer supports building with the dmalloc library. For debugging
+ memory issues, we suggest using gperftools or msan instead.
+ Closes ticket 26426.
diff --git a/changes/ticket26427 b/changes/ticket26427
new file mode 100644
index 0000000000..ff33f7bd4c
--- /dev/null
+++ b/changes/ticket26427
@@ -0,0 +1,6 @@
+ o Minor features (code layout):
+ - Make a new lowest-level error-handling API for use by code invoked
+ from within the logging module. This interface it makes it so
+ the logging code is no longer at risk of calling into itself if
+ a failure occurs while trying to log something.
+ Closes ticket 26427.
diff --git a/changes/ticket26447 b/changes/ticket26447
new file mode 100644
index 0000000000..757a4022ff
--- /dev/null
+++ b/changes/ticket26447
@@ -0,0 +1,5 @@
+ o Minor features (code correctness, testing):
+ - Tor's build process now includes a "check-includes" make target
+ to verify that no module of Tor relies on any headers from a
+ higher-level module. We hope to use this feature over time to
+ help refactor our codebase. Closes ticket 26447.
diff --git a/changes/ticket26467 b/changes/ticket26467
deleted file mode 100644
index 45883786c2..0000000000
--- a/changes/ticket26467
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (memory, correctness):
- - Fix a number of small memory leaks identified by coverity. Fixes
- bug 26467; bugfix on numerous Tor versions.
diff --git a/changes/ticket26481 b/changes/ticket26481
new file mode 100644
index 0000000000..84d219ed86
--- /dev/null
+++ b/changes/ticket26481
@@ -0,0 +1,12 @@
+ o Major features (new code layout):
+ - Nearly all of Tor's source code has been moved around into more logical
+ places. The "common" directory is now divided into a set of libraries
+ in "lib", and files in the "or" directory have been split into "core"
+ (logic absolutely needed for onion routing), "feature" (independent
+ modules in Tor), and "app" (to configure and invoke the rest of Tor).
+ See doc/HACKING/CodeStructure.md for more information. Closes ticket
+ 26481.
+
+ This refactoring is not complete: although the libraries have been
+ refactored to be acyclic, the main body of Tor is still too
+ interconnected. We will attempt to improve this in the future.
diff --git a/changes/ticket26492 b/changes/ticket26492
new file mode 100644
index 0000000000..c6ab292d17
--- /dev/null
+++ b/changes/ticket26492
@@ -0,0 +1,4 @@
+ o Minor features (rust, code quality):
+ - Improve rust code quality in the Rust protover implementation by
+ making it more idiomatic. Includes changing an internal API to
+ take &str instead of &String. Closes ticket 26492.
diff --git a/changes/ticket26510 b/changes/ticket26510
new file mode 100644
index 0000000000..f00457964d
--- /dev/null
+++ b/changes/ticket26510
@@ -0,0 +1,4 @@
+ o Code simplification and refactoring:
+ - Unify our bloom filter logic. Previously we had two copies of this
+ code: one for routerlist filtering, and one for address set
+ calculations. Closes ticket 26510.
diff --git a/changes/ticket26526 b/changes/ticket26526
new file mode 100644
index 0000000000..447b581df8
--- /dev/null
+++ b/changes/ticket26526
@@ -0,0 +1,4 @@
+ o Code simplification and refactoring:
+ - Utility functions that can perform a DNS lookup are now wholly
+ separated from those that can't, in separate headers and C
+ modules. Closes ticket 26526.
diff --git a/changes/ticket26526_extra b/changes/ticket26526_extra
new file mode 100644
index 0000000000..5495962ff7
--- /dev/null
+++ b/changes/ticket26526_extra
@@ -0,0 +1,3 @@
+ o Minor features (tor-resolve):
+ - The tor-resolve utility can now be used with IPv6 SOCKS proxies.
+ Side-effect of the refactoring for ticket 26526.
diff --git a/changes/ticket26527 b/changes/ticket26527
new file mode 100644
index 0000000000..ea1d650fef
--- /dev/null
+++ b/changes/ticket26527
@@ -0,0 +1,3 @@
+ o Code simplification and refactoring:
+ - Remove ATTR_NONNULL macro from codebase. Resolves
+ ticket 26527.
diff --git a/changes/ticket26626 b/changes/ticket26626
new file mode 100644
index 0000000000..84591342dc
--- /dev/null
+++ b/changes/ticket26626
@@ -0,0 +1,3 @@
+ o Code simplification and refactoring:
+ - Tor now assumes that you have standards-conformant stdint.h and
+ inttypes.h headers when compiling. Closes ticket 26626.
diff --git a/changes/ticket26647 b/changes/ticket26647
deleted file mode 100644
index 1c2e917c6d..0000000000
--- a/changes/ticket26647
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (controller):
- - The control port now exposes the list of HTTPTunnelPorts and
- ExtOrPorts via GETINFO net/listeners/httptunnel and net/listeners/extor
- respectively. Closes ticket 26647.
diff --git a/changes/ticket26663 b/changes/ticket26663
new file mode 100644
index 0000000000..2e1b8db1f5
--- /dev/null
+++ b/changes/ticket26663
@@ -0,0 +1,3 @@
+ o Minor features(config):
+ - The "auto" keyword in torrc is now case insensitive.
+ Closes ticket 26663.
diff --git a/changes/ticket26703 b/changes/ticket26703
new file mode 100644
index 0000000000..764b98b826
--- /dev/null
+++ b/changes/ticket26703
@@ -0,0 +1,3 @@
+ o Code simplification and refactoring:
+ - Low log level of "Scheduler type KIST has been enabled" to INFO.
+ Ticket 26703
diff --git a/changes/ticket26947 b/changes/ticket26947
new file mode 100644
index 0000000000..620a3a5591
--- /dev/null
+++ b/changes/ticket26947
@@ -0,0 +1,3 @@
+ o Minor features (in-process API):
+ - The tor_api now has a function that returns the name and version
+ of the backend implementing the API. Closes ticket 26947.
diff --git a/changes/ticket26952-cargo b/changes/ticket26952-cargo
deleted file mode 100644
index e1efdfcd74..0000000000
--- a/changes/ticket26952-cargo
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features (continuous integration, rust):
- - Use cargo cache in our Travis CI configuration.
- Closes ticket 26952.
diff --git a/changes/ticket26952-ccache b/changes/ticket26952-ccache
deleted file mode 100644
index edc115e9de..0000000000
--- a/changes/ticket26952-ccache
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features (continuous integration):
- - Use ccache in our Travis CI configuration.
- Closes ticket 26952.
diff --git a/changes/ticket27040 b/changes/ticket27040
new file mode 100644
index 0000000000..160556a761
--- /dev/null
+++ b/changes/ticket27040
@@ -0,0 +1,5 @@
+ o Minor bugfixes (hidden service v2):
+ - Demote a log warning to info in case we do not have a consensus when a
+ .onion request comes in. This can happen while bootstrapping for
+ instance. The request will follow through after so we really don't need
+ to warn the user loudly. Fixes bug 27040; bugfix on 0.2.8.2-alpha.
diff --git a/changes/ticket27087 b/changes/ticket27087
deleted file mode 100644
index b8af70aaa0..0000000000
--- a/changes/ticket27087
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features (continuous integration):
- - Run asciidoc during Travis CI.
- Implements ticket 27087.
diff --git a/changes/ticket27169 b/changes/ticket27169
new file mode 100644
index 0000000000..7854532a66
--- /dev/null
+++ b/changes/ticket27169
@@ -0,0 +1,6 @@
+ o Minor features (bootstrap):
+ - Improve user experience by deferring directory progress
+ reporting until after a connection to a relay or bridge has
+ succeeded. This avoids reporting 80% progress based on cached
+ directory information when we can't even connect to a bridge or
+ relay. Closes ticket 27169.
diff --git a/changes/ticket27211 b/changes/ticket27211
new file mode 100644
index 0000000000..c3d661a01d
--- /dev/null
+++ b/changes/ticket27211
@@ -0,0 +1,3 @@
+ o Minor features (testing):
+ - Add scripts/test/chutney-git-bisect.sh, for bisecting using chutney.
+ Implements ticket 27211.
diff --git a/changes/ticket27215 b/changes/ticket27215
new file mode 100644
index 0000000000..dcb67900ea
--- /dev/null
+++ b/changes/ticket27215
@@ -0,0 +1,9 @@
+ o Major feature (hidden service):
+ - For a newly created hidden service, the default version is now 3. Tor
+ still supports version 2 service but the operator now needs to
+ specifically set "HiddenServiceVersion 2" in order to create a new
+ service.
+
+ For existing services, tor now learns the version by reading the key
+ file so the HiddenServiceVersion is not mandatory in that case. Closes
+ ticket 27215.
diff --git a/changes/ticket27246 b/changes/ticket27246
new file mode 100644
index 0000000000..c0d665d4cb
--- /dev/null
+++ b/changes/ticket27246
@@ -0,0 +1,4 @@
+ o Minor features (memory usage):
+ - When not using them, store legacy TAP public onion keys in
+ DER-encoded format, rather than as expanded public keys. This should
+ save several megabytes on typical clients. Closes ticket 27246.
diff --git a/changes/ticket27247 b/changes/ticket27247
new file mode 100644
index 0000000000..e980913d32
--- /dev/null
+++ b/changes/ticket27247
@@ -0,0 +1,5 @@
+ o Minor bugfixes (client, memory usage):
+ - When not running as a directory cache, there is no need to store the
+ text of the current consensus networkstatus in RAM. Previously,
+ however, clients would store this anyway, at a cost of over 5 MB.
+ Now, they do not. Fixes bug 27247; bugfix on 0.3.0.1-alpha.
diff --git a/changes/ticket27275 b/changes/ticket27275
deleted file mode 100644
index d1332e9540..0000000000
--- a/changes/ticket27275
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features (continuous integration):
- - Only post Appveyor IRC notifications when the build fails.
- Implements ticket 27275.
diff --git a/changes/ticket27430 b/changes/ticket27430
deleted file mode 100644
index 4e016e91e7..0000000000
--- a/changes/ticket27430
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (continuous integration):
- - Show config.log and test-suite.log after failed Appveyor builds.
- Also upload the zipped full logs as a build artifact.
- Implements ticket 27430.
diff --git a/changes/ticket27449 b/changes/ticket27449
deleted file mode 100644
index 2a0984c09c..0000000000
--- a/changes/ticket27449
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features (continuous integration):
- - Log the compiler path and version during Appveyor builds.
- Implements ticket 27449.
diff --git a/changes/ticket27467 b/changes/ticket27467
new file mode 100644
index 0000000000..6f0df024ce
--- /dev/null
+++ b/changes/ticket27467
@@ -0,0 +1,3 @@
+ o Code simplification and refactoring:
+ - Remove GetAdaptersAddresses_fn_t. The code that used it was removed
+ as part of the 26481 refactor. Closes ticket 27467.
diff --git a/changes/ticket27547 b/changes/ticket27547
new file mode 100644
index 0000000000..f60d4a482e
--- /dev/null
+++ b/changes/ticket27547
@@ -0,0 +1,7 @@
+ o Major feature (hidden service v3):
+ - Implement client authorization at the descriptor level. A new torrc
+ option was added to control this client side: ClientOnionAuthDir <path>.
+ On the service side, if the "authorized_clients/" directory exists in
+ the onion service directory path, client configuration are read from the
+ files within. See the manpage for more details. Closes ticket 27547.
+ Patch done by Suphanat Chunhapanya (haxxpop).
diff --git a/changes/ticket27630 b/changes/ticket27630
new file mode 100644
index 0000000000..8a5f5d6b5b
--- /dev/null
+++ b/changes/ticket27630
@@ -0,0 +1,3 @@
+ o Code simplification and refactoring:
+ - Use the simpler strcmpstart() helper in rend_parse_v2_service_descriptor
+ instead of strncmp(). Closes ticket 27630.
diff --git a/changes/ticket27678 b/changes/ticket27678
new file mode 100644
index 0000000000..daeb262e10
--- /dev/null
+++ b/changes/ticket27678
@@ -0,0 +1,5 @@
+ o Minor features (controller):
+ - Emit CIRC_BW events as soon as we detect that we processed an invalid
+ or otherwise dropped cell on a circuit. This allows vanguards and
+ other controllers to react more quickly to dropped cells. Closes
+ ticket 27678.
diff --git a/changes/ticket3569_part1 b/changes/ticket3569_part1
new file mode 100644
index 0000000000..4032aff4d2
--- /dev/null
+++ b/changes/ticket3569_part1
@@ -0,0 +1,6 @@
+ o Code simplification and refactoring:
+ - Rework Tor SOCKS server code to use Trunnel and benefit from
+ autogenerated functions for parsing and generating SOCKS wire
+ format. New implementation is cleaner, more maintainable and
+ should be less prone to heartbleed-style vulnerabilities.
+ Implements a significant fraction of ticket 3569.
diff --git a/changes/ticket3723 b/changes/ticket3723
new file mode 100644
index 0000000000..3deefe27b0
--- /dev/null
+++ b/changes/ticket3723
@@ -0,0 +1,3 @@
+ o Minor features (directory authority):
+ - When a bandwidth file is used to obtain the bandwidth measurements,
+ include this bandwidth file headers in the votes. Closes ticket 3723.
diff --git a/changes/ticket8415 b/changes/ticket8415
new file mode 100644
index 0000000000..992e8e1a1f
--- /dev/null
+++ b/changes/ticket8415
@@ -0,0 +1,4 @@
+ o Minor features (memory management):
+ - Get libevent code to use the same memory allocator that
+ Tor code is using by calling event_set_mem_functions()
+ during initialization. Resolves ticket 8415.