summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-11-20Block OutboundBindAddressIPv[4|6]_ and configured ports on exit relaysteor (Tim Wilson-Brown)
Modify policies_parse_exit_policy_reject_private so it also blocks the addresses configured for OutboundBindAddressIPv4_ and OutboundBindAddressIPv6_, and any publicly routable port addresses on exit relays. Add and update unit tests for these functions.
2015-11-20Add unit tests for policies_parse_exit_policy_reject_privateteor (Tim Wilson-Brown)
Test that policies_parse_exit_policy_reject_private rejects supplied IPv4 and IPv6 relay addresses, and the addresses of local interfaces.
2015-11-20Refactor policies_parse_exit_policy_internalteor (Tim Wilson-Brown)
Move the code that rejects publicly routable exit relay addresses to policies_parse_exit_policy_reject_private. Add addr_policy_append_reject_addr_list and use it to reject interface addresses. This removes the duplicate reject checks on local_address and ipv6_local_address, but duplicates will be removed by exit_policy_remove_redundancies at the end of the function. This also removes the info-level logging on rejected interface addresses. Instead, log a debug-level message in addr_policy_append_reject_addr. This simplifies policies_parse_exit_policy_internal and prepares for reporting these addresses over the control port in #17183.
2015-11-18Merge remote-tracking branch 'teor/bug17632-no-ipv4-no-localhost'Nick Mathewson
2015-11-19Really Really Fixup 86eba14ac549: Windows support, error return valuesteor (Tim Wilson-Brown)
2015-11-18Really Fixup 86eba14ac549: error return values are negativeteor (Tim Wilson-Brown)
2015-11-18Fixup 86eba14ac549: add errno.h for EPROTONOSUPPORTteor (Tim Wilson-Brown)
2015-11-18Update comments in get_interface_addresses_ioctlteor (Tim Wilson-Brown)
Comment-only change noting platforms that can return IPv6 addresses from SIOCGIFCONF (or SIOCGLIFCONF).
2015-11-18Fix unit tests on systems without IPv4 or localhost addressesteor (Tim Wilson-Brown)
Make unit tests pass on IPv6-only systems, and systems without localhost addresses (like some FreeBSD jails). Fixes: * get_if_addrs_ifaddrs: systems without localhost * get_if_addrs_ioctl: only works on IPv4 systems * socket: check IPv4 and IPv6, skip on EPROTONOSUPPORT * socketpair_ersatz: uses IPv4, skip on EPROTONOSUPPORT Fixes bug #17632; bugfix on unit tests in 0.2.7.3-rc. c464a367728d was a partial fix for this issue in #17255; it was released in unit tests in 0.2.7.4-rc. Patch by "teor".
2015-11-18Fix a startup time assert caused by periodic events not being initialized.Yawning Angel
Loading a on disk bridge descriptor causes a directory download to be scheduled, which asserts due to the periodic events not being initialized yet. Fixes bug #17635, not in any released version of tor.
2015-11-17windows already has a CALLBACK macro...Nick Mathewson
2015-11-17Fix a server-side crash on DNS initNick Mathewson
2015-11-17Some unit tests now require that periodic events be initialized.Nick Mathewson
2015-11-17Whoops; in this context the EV_TIMEOUT flag is neededNick Mathewson
2015-11-17Merge branch 'bug3199_redux_3'Nick Mathewson
2015-11-17Changes to 3199 branch based on feedback from specialNick Mathewson
2015-11-16Add documentation for periodic event apiNick Mathewson
2015-11-13Change periodic.c to use libevent directlyNick Mathewson
Libevent's periodic timers aren't the right solution when the timeout potentially changes every time.
2015-11-13fix whitespace; remove dead codeNick Mathewson
2015-11-13Fold all of the run-every-second stuff back into run_scheduled_events()Nick Mathewson
2015-11-13Turn all of run_scheduled_events() into a bunch of periodic eventsNick Mathewson
This patch is designed to look good when you see it through 'diff -b': it mostly leaves entries in the same order, and leaves the code unmodified.
2015-11-13Connect periodic events to mainNick Mathewson
2015-11-13Infrastructure for replacing global periodic events in main.cKevin Butler
(This is from Kevin's bug3199 patch series; nick extracted it into a new file and changed the interface a little, then did some API tweaks on it.)
2015-11-13appease check-spacesNick Mathewson
2015-11-13Merge remote-tracking branch 'public/ticket11150_client_only'Nick Mathewson
2015-11-13Remove a little duplicated code in TAP key expansionNick Mathewson
patch from pfrankw; closes 17587.
2015-11-13fix an email address in doc/HACKING/ReleasingTor.mdNick Mathewson
2015-11-13Merge commit '741d2dc685a0e380bc4d8fbcda5a33b70272b3f7'Nick Mathewson
2015-11-13Merge commit '7b859fd8c558c9cf08add79db87fb1cb76537535'Nick Mathewson
2015-11-13Bump to 0.2.7.5Nick Mathewson
2015-11-12Merge branch 'decouple_circuit_mark_squashed'Nick Mathewson
2015-11-12Experimentally decouple the main body of circuit_mark_for_closeNick Mathewson
2015-11-12+ and / usage clarification - Fixes #13158Joan Queralt
2015-11-12Merge branch 'karsten_bug13192_026_03_teor'Nick Mathewson
2015-11-12Rename cast_double_to_int64 to clamp_double_to_int64Nick Mathewson
2015-11-12Make round_to_next_multiple_of always round upwards.Nick Mathewson
Yes, even if it has to return a non-multiple. This prevents us from ever having a bug where we try to use it for allocation, and under-allocate.
2015-11-10Merge branch 'bug17549'Nick Mathewson
2015-11-10appease check-spacesNick Mathewson
2015-11-10every version of openssl we support has SSL_get_stateNick Mathewson
2015-11-10Every openssl we support has ERR_remove_thread_stateNick Mathewson
2015-11-10Move openssl version compatibility defines into a new header.Nick Mathewson
2015-11-10Mark fallback directoriess as too busy after a 503 responseteor (Tim Wilson-Brown)
Mark fallback directory mirrors as "too busy" when they return a 503 response. Previously, the code just marked authorities as busy. Unless clients set their own fallback directories, they will never see this bug. (There are no default fallbacks yet.) Fixes bug 17572; bugfix on 5c51b3f1f0d4 released in 0.2.4.7-alpha. Patch by "teor".
2015-11-06Fix the tortls.c unit tests to pass with OpenSSL 1.1.0-dev.Yawning Angel
The string description for the states got changed slightly.
2015-11-06Fix compilation with OpenSSL 1.1.0 --enable-gcc-warnings is set.Yawning Angel
2015-11-06Fix compilation with OpenSSL 1.1.0-dev.Yawning Angel
OpenSSL changed the API: * https://github.com/openssl/openssl/commit/5998e2903589e7b19e102ebff06521f2dcb60409 * https://github.com/openssl/openssl/commit/b0700d2c8de79252ba605748a075cf2e5d670da1
2015-11-06"And now a better patch which builds the tests if LibreSSL is used."Nick Mathewson
Works on the latest LibreSSL (in OpenBSD-current). (Patch from 'rubiate' on #17253.
2015-11-05Fix SipHash-2-4 performance for non multiple of 8 buffers.Yawning Angel
Code cribbed from Andrew Moon's Public Domain SipHash-2-4 implementation (which IMO is also cleaner). Fixes bug 17544.
2015-11-05Delete trailing whitespace in md filesNick Mathewson
2015-11-05add release notesNick Mathewson
2015-11-05added some markdown formattingtom lurge