aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-04-30Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-04-30Fix typo in tor-relays list addresshiro
2024-04-29Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-04-16circuit: Remove log_warn triggered by a proto violationDavid Goulet
Fixes #40932 Signed-off-by: David Goulet <dgoulet@torproject.org>
2024-04-15Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-04-15Merge branch 'tor-gitlab/mr/808' into maint-0.4.8David Goulet
2024-04-15conflux: Don't process a closed circuit on get packaged windowDavid Goulet
Signed-off-by: David Goulet <dgoulet@torproject.org>
2024-04-15conflux: Avoid noting a cell was sent on a closed circuitDavid Goulet
It turns out that circuit_package_relay_cell() returns 0 in order to drop a cell but there is a code path, if the circuit queue is full, that also silently closes the circuit and returns 0. This lead to Conflux thinking a cell was sent but actually the cell was not and the circuit was closed leading to the hard assert. And so this function makes sure that circuit_package_relay_cell() and append_cell_to_circuit_queue() returns a value that indicate what happened with the cell and circuit so the caller can make an informed decision with it. This change makes it that we do NOT enter the Conflux subsystem if the cell is not queued on the circuit. Fixes #40921 Signed-off-by: David Goulet <dgoulet@torproject.org>
2024-04-10Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-04-10version: Bump version to 0.4.8.11-devTor CI Release
2024-04-10Merge branch 'maint-0.4.8' into release-0.4.8tor-0.4.8.11David Goulet
2024-04-10version: Bump version to 0.4.8.11Tor CI Release
2024-04-10release: ChangeLog and ReleaseNotes for 0.4.8.11David Goulet
Signed-off-by: David Goulet <dgoulet@torproject.org>
2024-04-10Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-04-10fallbackdir: Update list generated on April 10, 2024Tor CI Release
2024-04-10Update geoip files to match ipfire location db, 2024/04/10.Tor CI Release
2024-04-09Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-04-08dirauth: New keys and address for tor26David Goulet
Signed-off-by: David Goulet <dgoulet@torproject.org>
2024-02-28Merge branch 'maint-0.4.8' into release-0.4.8Alexander Færøy
2024-02-06Try to appease the changefile format checkerSebastian Hahn
2024-02-01Update test stringsSebastian Hahn
2024-02-01Add a changes fileSebastian Hahn
2024-02-01dirauth: Warn when failing to post during a voteSebastian Hahn
The only way to figure out that posting a vote or signatures to another dirauth failed is by counting how many success messages there are on notice level, and noticing that it is fewer than the number of configured dirauths. Closes #40910.
2024-01-30Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-01-30dirauth: Reject 0.4.7.x series at the authority levelDavid Goulet
Signed-off-by: David Goulet <dgoulet@torproject.org>
2024-01-30Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-01-30bwauth: Allow "node_id" KeyValue without "$"juga
Allow "node_id" KeyValue without the dollar sign at the start of the hexdigit in the BandwidthFiles, in order to easier database queries combining Tor documents in which the relays fingerprint doesn't include it. Bugfix on all supported versions of Tor. Closes #40891
2024-01-09Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2024-01-09add release note and changelog entry for #40819trinity-1686a
2023-12-08Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2023-12-08version: Bump version to 0.4.8.10-devTor CI Release
2023-12-08Merge branch 'maint-0.4.8' into release-0.4.8tor-0.4.8.10David Goulet
2023-12-08version: Bump version to 0.4.8.10Tor CI Release
2023-12-08release: ChangeLog and ReleaseNotes for 0.4.8.10Tor CI Release
2023-12-08Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2023-12-08fallbackdir: Update list generated on December 08, 2023Tor CI Release
2023-12-08Update geoip files to match ipfire location db, 2023/12/08.Tor CI Release
2023-12-08Merge branch 'maint-0.4.8' into release-0.4.8David Goulet
2023-12-08Merge remote-tracking branch 'mikeperry-private/bug40897' into maint-0.4.8David Goulet
2023-12-07Merge branch 'maint-0.4.8' into release-0.4.8Alexander Færøy
2023-12-07Merge remote-tracking branch 'origin/merge-requests/776' into maint-0.4.8Alexander Færøy
2023-12-07Bug 40897: Changes fileMike Perry
2023-12-07Bug 40897 Bug Bounty: Double the number of max conflux circsMike Perry
We strongly suspect that bug 40897 was caused by a custom Tor client that tried to use more than the default number of conflux circuits, for either performance or traffic analysis defense gains, or both. This entity hit a safety check on the exit side, which caused a UAF. Our "belt and suspenders" snapped off, and hit us in the face... again... Since there are good reasons to try more than 2 conflux legs, and research has found some traffic analysis benefits with as many as 5, we're going to raise and parameterize this limit as a form of bug bounty for finding this UAF, so that this entity can try out a little more confluxing. This should also make it easier for researchers to try things like gathering traces with larger amounts of confluxing than normal, to measure real-world traffic analysis impacts of conflux. Shine on, you yoloing anonymous diamond. Let us know if you find out anything interesting!
2023-12-07Bug 40897: Add more checks to free pathsMike Perry
Similar double-frees would be caught earlier by these, so long as the pointers remain nulled out.
2023-12-07Bug 40897: Move safety check to proper location and give it error handling.Mike Perry
2023-12-06update changes file with correct introduced versiontrinity-1686a
2023-11-09version: Bump version to 0.4.8.9-devTor CI Release
2023-11-09Merge branch 'maint-0.4.8' into release-0.4.8tor-0.4.8.9David Goulet
2023-11-09version: Bump version to 0.4.8.9Tor CI Release
2023-11-09release: ChangeLog and ReleaseNotes for 0.4.8.9Tor CI Release
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion