aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-10-24catch up on changes filesRoger Dingledine
2011-10-24Merge branch 'maint-0.2.1' into release-0.2.1Roger Dingledine
2011-10-13Update to the October 2011 GeoIP database.Karsten Loesing
2011-09-15Update to the September 2011 GeoIP database.Karsten Loesing
2011-09-13Generate our ssl session certs with a plausible lifetimeRoger Dingledine
Nobody but Tor uses certs on the wire with 2 hour lifetimes, and it makes us stand out. Resolves ticket 4014.
2011-08-08Update to the August 2011 GeoIP database.Karsten Loesing
2011-07-07update to the july 2011 geoip dbRoger Dingledine
2011-07-01Merge branches 'cov217_021' and 'cid_450' into maint-0.2.1Nick Mathewson
2011-07-01Use strlcpy in create_unix_sockaddr()Nick Mathewson
Using strncpy meant that if listenaddress were ever >= sizeof(sockaddr_un.sun_path), we would fail to nul-terminate sun_path. This isn't a big deal: we never read sun_path, and the kernel is smart enough to reject the sockaddr_un if it isn't nul-terminated. Nonetheless, it's a dumb failure mode. Instead, we should reject addresses that don't fit in sockaddr_un.sun_path. Coverity found this; it's CID 428. Bugfix on 0.2.0.3-alpha.
2011-07-01Fix a rare memory leak in rend_cache_storeNick Mathewson
When we rejected a descriptor for not being the one we wanted, we were letting the parsed descriptor go out of scope. Found by Coverity; CID # 30. Bugfix on 0.2.1.26. (No changes file yet, since this is not in any 0.2.1.x release.)
2011-07-01Fix insanely large stack_allocation in log_credential_statusNick Mathewson
I'm not one to insist on C's miserly stack limits, but allocating a 256K array on the stack is too much even for me. Bugfix on 0.2.1.7-alpha. Found by coverity. Fixes CID # 450.
2011-06-17Abandon rendezvous circuits on SIGNAL NEWNYMRobert Ransom
2011-06-05move to the june 1 2011 maxmind geoip dbRoger Dingledine
2011-05-28Fix typo in changes/bug2574. Thanks, rransomNick Mathewson
2011-05-28Merge branch 'bug2574' into maint-0.2.1Nick Mathewson
2011-05-23Work correctly if your nameserver is ::1Nick Mathewson
We had all the code in place to handle this right... except that we were unconditionally opening a PF_INET socket instead of looking at sa_family. Ow. Fixes bug 2574; not a bugfix on any particular version, since this never worked before.
2011-05-16fold in new changes entriesRoger Dingledine
2011-05-16Merge remote-tracking branch 'origin/maint-0.2.1' into release-0.2.1Nick Mathewson
2011-05-16rm files for changes merged in all of release021, release022, masterNick Mathewson
2011-05-16Merge branch 'maint-0.2.1' into release-0.2.1Nick Mathewson
2011-05-16squash! Add crypto_pk_check_key_public_exponent functionNick Mathewson
Rename crypto_pk_check_key_public_exponent to crypto_pk_public_exponent_ok: it's nice to name predicates s.t. you can tell how to interpret true and false.
2011-05-16Require that certain public keys have public exponent 65537Robert Ransom
2011-05-16Add crypto_pk_check_key_public_exponent functionRobert Ransom
2011-05-16Check fetched rendezvous descriptors' service IDsRobert Ransom
2011-05-15Fixup whitespace issues from 3122 commitNick Mathewson
2011-05-15Another doc tweak on tor_memcmp: <b>b</b>, not <b>.Nick Mathewson
2011-05-15minor tweaks to 4b19730c8234dRoger Dingledine
2011-05-14fold in latest changes entriesRoger Dingledine
2011-05-13Merge branch 'maint-0.2.1' into release-0.2.1Roger Dingledine
2011-05-12Merge remote-tracking branch 'public/bug3122_memcmp_squashed' into maint-0.2.1Nick Mathewson
2011-05-11Merge branch 'bug3135' into maint-0.2.1Nick Mathewson
2011-05-11Fix crash when read_file_to_string() fails in SAVECONFNick Mathewson
The new behavior is to try to rename the old file if there is one there that we can't read. In all likelihood, that will fail too, but at least we tried, and at least it won't crash.
2011-05-11Hand-conversion and audit phase of memcmp transitionNick Mathewson
Here I looked at the results of the automated conversion and cleaned them up as follows: If there was a tor_memcmp or tor_memeq that was in fact "safe"[*] I changed it to a fast_memcmp or fast_memeq. Otherwise if there was a tor_memcmp that could turn into a tor_memneq or tor_memeq, I converted it. This wants close attention. [*] I'm erring on the side of caution here, and leaving some things as tor_memcmp that could in my opinion use the data-dependent fast_memcmp variant.
2011-05-11Automated conversion of memcmp to tor_memcmp/tor_mem[n]eqNick Mathewson
This commit is _exactly_ the result of perl -i -pe 's/\bmemcmp\(/tor_memcmp\(/g' src/*/*.[ch] perl -i -pe 's/\!\s*tor_memcmp\(/tor_memeq\(/g' src/*/*.[ch] perl -i -pe 's/0\s*==\s*tor_memcmp\(/tor_memeq\(/g' src/*/*.[ch] perl -i -pe 's/0\s*!=\s*tor_memcmp\(/tor_memneq\(/g' src/*/*.[ch] git checkout src/common/di_ops.[ch] git checkout src/or/test.c git checkout src/common/test.h
2011-05-11Add a "di_ops.h" include to util.hNick Mathewson
2011-05-11Add a data-independent variant of memcmp and a d-i memeq function.Nick Mathewson
The tor_memcmp code is by Robert Ransom, and the tor_memeq code is by me. Both incorporate some ideas from DJB's stuff.
2011-05-10fold in changes fileRoger Dingledine
2011-05-10Merge branch 'maint-0.2.1' into release-0.2.1Roger Dingledine
2011-05-10Update to the May 1 2011 Maxmind GeoLite Country databaseRoger Dingledine
2011-05-10fold in changes files for 0.2.1.31Roger Dingledine
2011-05-10Merge branch 'maint-0.2.1' into release-0.2.1Roger Dingledine
2011-04-28Fix a failure case of connection_ap_handshake_attach_circuit()Sebastian Hahn
tor_fragile_assert() might be a no-op, so we have to return something here to indicate failure to the caller.
2011-04-28Fix a bug introduced by purging rend_cache on NEWNYMRobert Ransom
If the user sent a SIGNAL NEWNYM command after we fetched a rendezvous descriptor, while we were building the introduction-point circuit, we would give up entirely on trying to connect to the hidden service. Original patch by rransom slightly edited to go into 0.2.1
2011-04-28Allow rend_client_send_introduction to fail transientlyRobert Ransom
i.e. without closing the AP connection.
2011-04-28Forget all rendezvous client state on SIGNAL NEWNYMRobert Ransom
2011-04-26Make SIZE_T_CEILING unsigned; add a signed SSIZE_T_CEILINGNick Mathewson
None of the comparisons were _broken_ previously, but avoiding signed/unsigned comparisons makes everybody happier. Fixes bug2475.
2011-04-21Fix a bug in removing DNSPort requests from their circular listNick Mathewson
Under heavy load, this could result in an assertion failure. Fix for bug 2933; bugfix on 0.2.0.10-alpha.
2011-04-19Merge remote-tracking branch 'rransom/bug2750-v3' into maint-0.2.1Nick Mathewson
2011-04-19Ouch: correctly tabify the micro-revision.i target in Makefile.am (0.2.1 only)Nick Mathewson
2011-04-18Add an XXXRobert Ransom
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion