summaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
Diffstat (limited to 'changes')
-rw-r--r--changes/192712
-rw-r--r--changes/asciidoc-UTC4
-rw-r--r--changes/bug171507
-rw-r--r--changes/bug183977
-rw-r--r--changes/bug184566
-rw-r--r--changes/bug186683
-rw-r--r--changes/bug1880916
-rw-r--r--changes/bug188124
-rw-r--r--changes/bug188494
-rw-r--r--changes/bug191613
-rw-r--r--changes/bug191915
-rw-r--r--changes/bug192034
-rw-r--r--changes/bug192133
-rw-r--r--changes/bug194064
-rw-r--r--changes/bug194214
-rw-r--r--changes/bug194356
-rw-r--r--changes/bug194543
-rw-r--r--changes/bug194646
-rw-r--r--changes/bug194994
-rw-r--r--changes/bug195544
-rw-r--r--changes/bug195567
-rw-r--r--changes/bug195574
-rw-r--r--changes/bug196608
-rw-r--r--changes/bug196823
-rw-r--r--changes/bug197023
-rw-r--r--changes/feature191164
-rw-r--r--changes/geoip-july20164
-rw-r--r--changes/geoip-jun20164
-rw-r--r--changes/memarea_overflow7
-rw-r--r--changes/monotonic6
-rw-r--r--changes/rsa_init_bug7
-rw-r--r--changes/ticket19071-1948013
32 files changed, 55 insertions, 114 deletions
diff --git a/changes/19271 b/changes/19271
deleted file mode 100644
index dc06ead999..0000000000
--- a/changes/19271
+++ /dev/null
@@ -1,2 +0,0 @@
- o Directory authority changes:
- - Urras is no longer a directory authority. Closes ticket 19271.
diff --git a/changes/asciidoc-UTC b/changes/asciidoc-UTC
deleted file mode 100644
index 21fbfc1d67..0000000000
--- a/changes/asciidoc-UTC
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (build):
- - When building manual pages, set the timezone to "UTC", so that the
- output is reproducible. Fixes bug 19558; bugfix on 0.2.2.9-alpha.
- Patch from intrigeri.
diff --git a/changes/bug17150 b/changes/bug17150
deleted file mode 100644
index 686cc34296..0000000000
--- a/changes/bug17150
+++ /dev/null
@@ -1,7 +0,0 @@
- o Minor bugfixes (directory warnings):
- - When fetching extrainfo documents, compare their SHA256 digests
- and Ed25519 signing key certificates
- with the routerinfo that led us to fetch them, rather than
- with the most recent routerinfo. Otherwise we generate many
- spurious warnings about mismatches. Fixes bug 17150; bugfix
- on 0.2.7.2-alpha.
diff --git a/changes/bug18397 b/changes/bug18397
new file mode 100644
index 0000000000..53993da4e6
--- /dev/null
+++ b/changes/bug18397
@@ -0,0 +1,7 @@
+ o Minor bugfixes (Linux seccomp2 sandbox):
+ - Add a few missing syscalls to the seccomp2 sandbox: sysinfo,
+ getsockopt(SO_SNDBUF), and setsockopt(SO_SNDBUFFORCE). On
+ some systems, these are required for Tor to start with
+ "Sandbox 1" enabled.
+ Fixes bug 18397; bugfix on 0.2.5.1-alpha. Patch from
+ Daniel Pinto.
diff --git a/changes/bug18456 b/changes/bug18456
new file mode 100644
index 0000000000..843c70a587
--- /dev/null
+++ b/changes/bug18456
@@ -0,0 +1,6 @@
+ o Major bugfixes (exit policies):
+ - Avoid disclosing exit outbound bind addresses, configured port bind
+ addresses, and local interface addresses in relay descriptors by
+ default under ExitPolicyRejectPrivate. Instead, only reject these
+ (otherwise unlisted) addresses if ExitPolicyRejectLocalInterfaces is set.
+ Fixes bug 18456; bugfix on 0.2.7.2-alpha. Patch by teor.
diff --git a/changes/bug18668 b/changes/bug18668
deleted file mode 100644
index 4b186b5c05..0000000000
--- a/changes/bug18668
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (tests):
- - Avoid "WSANOTINITIALISED" warnings in the unit tests. Fixes bug 18668;
- bugfix on 0.2.8.1-alpha.
diff --git a/changes/bug18809 b/changes/bug18809
deleted file mode 100644
index 1e151874b7..0000000000
--- a/changes/bug18809
+++ /dev/null
@@ -1,16 +0,0 @@
- o Major bugfixes (bootstrap):
- - Check if bootstrap consensus downloads are still needed
- when the linked connection attaches. This prevents tor
- making unnecessary begindir-style connections, which are
- the only directory connections tor clients make since
- the fix for 18483 was merged.
- - Fix some edge cases where consensus download connections
- may not have been closed, even though they were not needed.
- Related to fix 18809.
- - Make relays retry consensus downloads the correct number of
- times, rather than the more aggressive client retry count.
- Fixes part of ticket 18809.
- - Stop downloading consensuses when we have a consensus,
- even if we don't have all the certificates for it yet.
- Fixes bug 18809; bugfix on 0.2.8.1-alpha.
- Patches by arma and teor.
diff --git a/changes/bug18812 b/changes/bug18812
deleted file mode 100644
index 793e1102f7..0000000000
--- a/changes/bug18812
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (bootstrap):
- - When a fallback changes its fingerprint from the hard-coded
- fingerprint, log a less severe, more explanatory log message.
- Fixes bug 18812; bugfix on 0.2.8.1-alpha. Patch by teor.
diff --git a/changes/bug18849 b/changes/bug18849
deleted file mode 100644
index b12a8da011..0000000000
--- a/changes/bug18849
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfix (logging):
- - Reduce excessive logging when directories can't be found.
- Fixes bug 18849; bugfix on 0.2.8.3-alpha and 0.2.8.1-alpha.
- Patch by teor.
diff --git a/changes/bug19161 b/changes/bug19161
deleted file mode 100644
index 78c2165308..0000000000
--- a/changes/bug19161
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (compilation):
- - When libscrypt.h is found, but no libscrypt library can be linked,
- treat libscrypt as absent. Fixes bug 19161; bugfix on 0.2.6.1-alpha.
diff --git a/changes/bug19191 b/changes/bug19191
deleted file mode 100644
index 8670aaa7fd..0000000000
--- a/changes/bug19191
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (downloading):
- - Predict more correctly whether we'll be downloading over HTTP when we
- determine the maximum length of a URL. This should avoid a "BUG"
- warning about the Squid HTTP proxy and its URL limits. Fixes bug 19191;
- bugfix on ?????.
diff --git a/changes/bug19203 b/changes/bug19203
deleted file mode 100644
index 96bc1e855a..0000000000
--- a/changes/bug19203
+++ /dev/null
@@ -1,4 +0,0 @@
- o Major bugfixes (user interface):
- - Correctly give a warning in the cases where a relay is specified by
- nickname, and one such relay is found, but it is not officially Named.
- Fixes bug 19203; bugfix on 0.2.3.1-alpha.
diff --git a/changes/bug19213 b/changes/bug19213
deleted file mode 100644
index 6217814fb4..0000000000
--- a/changes/bug19213
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (compilation):
- - Cause the unit tests to compile correctly on mingw64 versions
- that lack sscanf. Fixes bug 19213; bugfix on 0.2.7.1-alpha.
diff --git a/changes/bug19406 b/changes/bug19406
deleted file mode 100644
index e8b661b512..0000000000
--- a/changes/bug19406
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (build):
- - Tor now again builds with the recent OpenSSL 1.1 development branch
- (tested against 1.1.0-pre5 and 1.1.0-pre6-dev).
-
diff --git a/changes/bug19421 b/changes/bug19421
new file mode 100644
index 0000000000..c7aba2637d
--- /dev/null
+++ b/changes/bug19421
@@ -0,0 +1,4 @@
+ o Minor bugfixes (testing):
+ - Fix the test-network-all target on out-of-tree builds by using the
+ correct path to the test driver script. Fixes bug #19421; bugfix on
+ 0.2.7.3-rc.
diff --git a/changes/bug19435 b/changes/bug19435
new file mode 100644
index 0000000000..d0a29d1983
--- /dev/null
+++ b/changes/bug19435
@@ -0,0 +1,6 @@
+ o Major bugfixes (user interface):
+ - Fix an integer overflow in the rate-limiter that caused displaying of
+ wrong number of suppressed messages (if there are too many of them).
+ If the number of messages hits the limit of messages per interval the
+ rate-limiter doesn't count any further.
+ Fixes bug 19435; bugfix on 0.2.4.11-alpha.
diff --git a/changes/bug19454 b/changes/bug19454
deleted file mode 100644
index 05650b5c61..0000000000
--- a/changes/bug19454
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (heartbeat):
- - Fix regression that crashes Tor when disabling heartbeats. Fixes bug
- 19454; bugfix on tor-0.2.8.1-alpha. Reported by "kubaku".
diff --git a/changes/bug19464 b/changes/bug19464
deleted file mode 100644
index 22c9e73dc7..0000000000
--- a/changes/bug19464
+++ /dev/null
@@ -1,6 +0,0 @@
- o Minor bugfixes (user interface):
- - Remove a warning message "Service [scrubbed] not found after
- descriptor upload". This message appears when one uses HSPOST control
- command to upload a service descriptor. Since there is only a descriptor
- and no service, showing this message is pointless and confusing.
- Fixes bug 19464; bugfix on 0.2.7.2-alpha.
diff --git a/changes/bug19499 b/changes/bug19499
deleted file mode 100644
index 59bdb29dfa..0000000000
--- a/changes/bug19499
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (build):
- - Tor now again builds with the recent OpenSSL 1.1 development branch
- (tested against 1.1.0-pre6-dev). Closes ticket 19499.
-
diff --git a/changes/bug19554 b/changes/bug19554
new file mode 100644
index 0000000000..5855586908
--- /dev/null
+++ b/changes/bug19554
@@ -0,0 +1,4 @@
+ o Dependency changes (Libevent)
+ - Tor requires Libevent version 2.0.10-stable or later now.
+ Implements ticket 19554.
+
diff --git a/changes/bug19556 b/changes/bug19556
deleted file mode 100644
index 31856b3db9..0000000000
--- a/changes/bug19556
+++ /dev/null
@@ -1,7 +0,0 @@
- o Minor bugfixes (sandboxing):
- - When sandboxing is enabled, we could not write any stats to
- disk. check_or_create_data_subdir("stats"), which prepares the
- private stats directory, calls check_private_dir(), which also
- opens and not just stats() the directory. Therefore, we need to
- also allow open() for the stats dir in our sandboxing setup.
- Fixes bug 19556; bugfix on 0.2.5.1-alpha.
diff --git a/changes/bug19557 b/changes/bug19557
deleted file mode 100644
index 55214b0c97..0000000000
--- a/changes/bug19557
+++ /dev/null
@@ -1,4 +0,0 @@
- o Major bugfixes (sandboxing):
- - Our sandboxing code would not allow us to write to stats/hidserv-stats,
- causing tor to abort while trying to write stats. This was previously
- masked by bug 19556. Fixes bug 19557; bugfix on 0.2.6.1-alpha.
diff --git a/changes/bug19660 b/changes/bug19660
new file mode 100644
index 0000000000..72d32c8fe2
--- /dev/null
+++ b/changes/bug19660
@@ -0,0 +1,8 @@
+ o Minor bugfixes (sandboxing):
+ - If we did not find a non-private IPaddress by iterating over
+ interfaces, we would try to get one via
+ get_interface_address6_via_udp_socket_hack(). This opens a
+ datagram socket with IPPROTO_UDP. Previously all our datagram
+ sockets (via libevent) used IPPROTO_IP, so we did not have that
+ in the sandboxing whitelist. Add (SOCK_DGRAM, IPPROTO_UDP)
+ sockets to the sandboxing whitelist. Fixes bug 19660.
diff --git a/changes/bug19682 b/changes/bug19682
new file mode 100644
index 0000000000..c799c417ac
--- /dev/null
+++ b/changes/bug19682
@@ -0,0 +1,3 @@
+ o Minor bugfixes (compilation):
+ - Fix compilation warning in the unit tests on systems where
+ char is signed. Fixes bug 19682; bugfix on 0.2.8.1-alpha.
diff --git a/changes/bug19702 b/changes/bug19702
new file mode 100644
index 0000000000..4ec2699ef8
--- /dev/null
+++ b/changes/bug19702
@@ -0,0 +1,3 @@
+ o Minor bugfixes (test networks):
+ - Allow clients to retry HSDirs much faster in test networks.
+ Fixes bug #19702; bugfix on 0.2.7.1-alpha. Patch by teor.
diff --git a/changes/feature19116 b/changes/feature19116
new file mode 100644
index 0000000000..4f6af5f46a
--- /dev/null
+++ b/changes/feature19116
@@ -0,0 +1,4 @@
+ o Minor features:
+ - Move the test-network.sh script to chutney, and modify tor's
+ test-network.sh to call the (newer) chutney version when available.
+ Resolves ticket 19116. Patch by teor.
diff --git a/changes/geoip-july2016 b/changes/geoip-july2016
new file mode 100644
index 0000000000..d9963bd6a8
--- /dev/null
+++ b/changes/geoip-july2016
@@ -0,0 +1,4 @@
+ o Minor features:
+ - Update geoip and geoip6 to the July 6 2016 Maxmind GeoLite2
+ Country database.
+
diff --git a/changes/geoip-jun2016 b/changes/geoip-jun2016
deleted file mode 100644
index 6c9847ca58..0000000000
--- a/changes/geoip-jun2016
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (geoip):
- - Update geoip and geoip6 to the June 7 2016 Maxmind GeoLite2
- Country database.
-
diff --git a/changes/memarea_overflow b/changes/memarea_overflow
deleted file mode 100644
index 8fdc38cc09..0000000000
--- a/changes/memarea_overflow
+++ /dev/null
@@ -1,7 +0,0 @@
- o Minor bugfixes (pointer arithmetic):
- - Fix a bug in memarea_alloc() that could have resulted in remote heap
- write access, if Tor had ever passed an unchecked size to
- memarea_alloc(). Fortunately, all the sizes we pass to memarea_alloc()
- are pre-checked to be less than 128 kilobytes. Fixes bug 19150; bugfix
- on 0.2.1.1-alpha. Bug found by Guido Vranken.
-
diff --git a/changes/monotonic b/changes/monotonic
new file mode 100644
index 0000000000..7143f69b89
--- /dev/null
+++ b/changes/monotonic
@@ -0,0 +1,6 @@
+ o Minor features (backend):
+ - Tor now uses the operating system's monotonic timers (where available)
+ for internal fine-grained timing. Previously we would look at the
+ system clock, and then attempt to compensate for the clock running
+ backwards. Closes ticket 18908.
+
diff --git a/changes/rsa_init_bug b/changes/rsa_init_bug
deleted file mode 100644
index 6b5fb4f2f9..0000000000
--- a/changes/rsa_init_bug
+++ /dev/null
@@ -1,7 +0,0 @@
- o Major bugfixes (key management):
- - If OpenSSL fails to generate an RSA key, do not retain a dangling pointer
- to the previous (uninitialized) key value. The impact here should be
- limited to a difficult-to-trigger crash, if OpenSSL is running an
- engine that makes key generation failures possible, or if OpenSSL runs
- out of memory. Fixes bug 19152; bugfix on 0.2.1.10-alpha. Found by
- Yuan Jochen Kang, Suman Jana, and Baishakhi Ray.
diff --git a/changes/ticket19071-19480 b/changes/ticket19071-19480
deleted file mode 100644
index ab5c72a2d1..0000000000
--- a/changes/ticket19071-19480
+++ /dev/null
@@ -1,13 +0,0 @@
- o Minor bugfixes (fallback directory selection):
- - Avoid errors during fallback selection if there are no eligible
- fallbacks. Fixes bug 19480; bugfix on ba76910 and 78ec782 in
- 0.2.8.3-alpha. Patch by teor.
- o Minor features (fallback directory list):
- - Update hard-coded fallback list to remove unsuitable fallbacks.
- Resolves ticket 19071. Patch by teor.
- - Add a comment to the generated list that explains how to comment-out
- unsuitable fallbacks in a way that's compatible with the stem fallback
- parser.
- - Update fallback whitelist and blacklist based on relay operator
- emails. Blacklist unsuitable fallbacks. Resolves ticket 19071.
- Patch by teor.