summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-10-26bump to 0.2.4.5-alpha-devRoger Dingledine
2012-10-26forward-port the 0.2.3.24-rc changelogtor-0.2.4.5-alphaRoger Dingledine
2012-10-26touch-upsRoger Dingledine
2012-10-25Optimistically say 0.2.4.5-alpha is coming out todayNick Mathewson
2012-10-25Bump the version number to 0.2.4.5-alphaNick Mathewson
(For real this time. It turns out that 4 and 5 are different numbers.)
2012-10-25Bump version to 0.2.4.5-alphaNick Mathewson
2012-10-25Fold in changelog item; draft blurb for 0.2.4.5-alphaNick Mathewson
2012-10-25Merge branch 'link_negotiation_assert_024'Nick Mathewson
2012-10-25Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
(Using an -s ours merge for Not taking the CVE-2012-2250 fix from maint-0.2.3; it would conflict.)
2012-10-25Start an 0.2.4.5 changelog.Nick Mathewson
The items from 0.2.3.x are copy-and-pastd from current release-0.2.3 changelog; the others are folded in from changes/*.
2012-10-24Change changes file and comment for 7189, for making it 0.2.4-only for nowNick Mathewson
2012-10-24Merge remote-tracking branch 'public/bug7189_tentative'Nick Mathewson
2012-10-24Only disable TLS tickets when being/acting as a server.Nick Mathewson
Fix for bug 7189.
2012-10-24Fix instructions for using Tor with gcovNick Mathewson
It seems as if our new build system broke gcov for me. I've tried to fix doc/HACKING to describe what I needed to do in order to make it work again.
2012-10-23Fix a remotely triggerable assertion failure (CVE-2012-2250)Nick Mathewson
If we completed the handshake for the v2 link protocol but wound up negotiating the wong protocol version, we'd become so confused about what part of the handshake we were in that we'd promptly die with an assertion. This is a fix for CVE-2012-2250; it's a bugfix on 0.2.3.6-alpha. All servers running that version or later should really upgrade. Bug and fix from "some guy from France." I tweaked his code slightly to make it log the IP of the offending node, and to forward-port it to 0.2.4.
2012-10-23Fix a remotely triggerable assertion failure (CVE-2012-2250)Nick Mathewson
If we completed the handshake for the v2 link protocol but wound up negotiating the wong protocol version, we'd become so confused about what part of the handshake we were in that we'd promptly die with an assertion. This is a fix for CVE-2012-2250; it's a bugfix on 0.2.3.6-alpha. All servers running that version or later should really upgrade. Bug and fix from "some guy from France." I tweaked his code slightly to make it log the IP of the offending node.
2012-10-23Use the same changes file for bug7191 as in 0.2.[23]Nick Mathewson
2012-10-23Merge remote-tracking branch 'andrea/bug7191_v2'Nick Mathewson
2012-10-23Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
This is an "ours" merge; we want a separate fix for this bug (bug7191) in master. Rather than catching the two failing cases, we need to make them not fail.
2012-10-23Make unit test for bug7191 work with new smartlist_new() nameNick Mathewson
2012-10-23Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson
2012-10-23Add some unit tests for smartlist_bsearch_idx() on short listsAndrea Shepard
Conflicts: src/test/test_containers.c
2012-10-23Add a changes file for bug 7191.Nick Mathewson
2012-10-23Fix binary search on lists of 0 or 1 element.Nick Mathewson
The implementation we added has a tendency to crash with lists of 0 or one element. That can happen if we get a consensus vote, v2 consensus, consensus, or geoip file with 0 or 1 element. There's a DOS opportunity there that authorities could exploit against one another, and which an evil v2 authority could exploit against anything downloading v2 directory information.. This fix is minimalistic: It just adds a special-case for 0- and 1-element lists. For 0.2.4 (the current alpha series) we'll want a better patch. This is bug 7191; it's a fix on 0.2.0.10-alpha.
2012-10-23Add some unit tests for smartlist_bsearch_idx() on short listsAndrea Shepard
2012-10-23Rewrite smartlist_bsearch_idx() to not be broken for lists of length zero or ↵Andrea Shepard
one (fixes bug 7191)
2012-10-23Merge branch 'maint-0.2.3'Roger Dingledine
2012-10-23Roll enh6876 into Changelog for 0.2.4.4 alpha, which had the change but not ↵Nick Mathewson
the entry.
2012-10-23Merge remote-tracking branch 'linus/enh6876_changes_file'Nick Mathewson
2012-10-23Let 0.2.3 clients exit to internal addresses if they wantRoger Dingledine
Clients now consider the ClientRejectInternalAddresses config option when using a microdescriptor consensus stanza to decide whether an exit relay would allow exiting to an internal address. Fixes bug 7190; bugfix on 0.2.3.1-alpha.
2012-10-23fix typoRoger Dingledine
2012-10-23Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
2012-10-23Fix parse_short_policy (bug 7192.)Nick Mathewson
Our implementation of parse_short_policy was screwed up: it would ignore the last character of every short policy. Obviously, that's broken. This patch fixes the busted behavior, and adds a bunch of unit tests to make sure the rest of that function is okay. Fixes bug 7192; fix on 0.2.3.1-alpha.
2012-10-22add a unit test to expose bug 7192Roger Dingledine
2012-10-22Fix more madness from the split_circuitbuild mergeNick Mathewson
2012-10-22Kill extraneous x from 907db008ab0007f0a02Nick Mathewson
Looks like clang doesn't complain about this kind of thing. Spotted by Andrea. Bug not in any released version.
2012-10-22Merge branch 'split_circuitbuild'Nick Mathewson
Conflicts: src/or/circuitbuild.c There was a huge-looking conflict in circuitbuild.c, but the only change that had been made to circuitbuild.c since I forked off the split_circuitbuild branch was 17442560c44e8093f9a. So I took the split_circuitbuild version of the conflicting part, and manually re-applied the change from 17442560c44e8093f9a..
2012-10-22Add changes file for ticket 6876 missing from 0.2.4.4-alpha ChangeLog.Linus Nordberg
2012-10-22Possessive "it's" → "its" in .nsi files.David Fifield
2012-10-21bump to 0.2.4.4-alpha-devRoger Dingledine
2012-10-20bump to 0.2.4.4-alphator-0.2.4.4-alphaRoger Dingledine
2012-10-20fold in changes files for upcoming 0.2.4.4-alphaRoger Dingledine
2012-10-20forward-port the 0.2.3.23-rc changelogRoger Dingledine
2012-10-19Merge branch 'block_renegotiate_024'Nick Mathewson
2012-10-19Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
This is an "ours" commit ; I'm merging a separate version of the block-renegotiate patch into 0.2.4.
2012-10-19Merge branch 'block_renegotiate_023' into maint-0.2.3Nick Mathewson
2012-10-19Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
2012-10-19Merge branch 'bug7149' into maint-0.2.3Nick Mathewson
2012-10-19Don't serve or accept v2 HS descs over a DirPortRobert Ransom
(changes file tweaked by nickm)
2012-10-19Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion