aboutsummaryrefslogtreecommitdiff
path: root/changes
AgeCommit message (Collapse)Author
2014-05-20sandbox: permit gettid, sched_getaffinityNick Mathewson
These are needed under some circumstances if we are running with expensive-hardening and sandbox at the same time. fixes 11477, bugfix on 0.2.5.4-alpha (where we introduced expensive-hardening)
2014-05-20sandbox: support logfile rotationNick Mathewson
Fixes bug 12032; bugfix on 0.2.5.1-alpha
2014-05-20sandbox: tolerate reloading with DirPortFrontPage setNick Mathewson
Also, don't tolerate changing DirPortFrontPage. Fixes bug 12028; bugfix on 0.2.5.1-alpha.
2014-05-20sandbox: Disallow options which would make us call exec()Nick Mathewson
None of the things we might exec() can possibly run under the sanbox, so rather than crash later, we have to refuse to accept the configuration nice and early. The longer-term solution is to have an exec() helper, but wow is that risky. fixes 12043; bugfix on 0.2.5.1-alpha
2014-05-20sandbox: Permit access to stats/dirreq-statsNick Mathewson
This prevents a crash when rotating logs with dirreq-stats enabled fixes 12035; bugfix on 0.2.5.1-alpha.
2014-05-20Sandbox: allow access to stats/bridge-statsNick Mathewson
Fix for 12041; bugfix on 0.2.5.1-alpha.
2014-05-15Merge remote-tracking branch 'public/bug11469_024'Nick Mathewson
2014-05-14Use DirPort for uploading descriptors.Nick Mathewson
When we converted the horrible set of options that previously controlled "use ORPort or DirPort? Anonymously or Non-anonymouly?" to a single 'indirection' argument, we missed directory_post_to_dirservers. The problematic code was introduced in 5cbeb6080, which went into 0.2.4.3-alpha. This is a fix for bug 11469.
2014-05-14Use tor_getpw{nam,uid} wrappers to fix bug 11946Nick Mathewson
When running with User set, we frequently try to look up our information in the user database (e.g., /etc/passwd). The seccomp2 sandbox setup doesn't let us open /etc/passwd, and probably shouldn't. To fix this, we have a pair of wrappers for getpwnam and getpwuid. When a real call to getpwnam or getpwuid fails, they fall back to a cached value, if the uid/gid matches. (Granting access to /etc/passwd isn't possible with the way we handle opening files through the sandbox. It's not desirable either.)
2014-05-12Merge branch 'bug9781_v2'Nick Mathewson
2014-05-12Log an error reply from tor-fw-helper correctly.Nick Mathewson
Fix for bug 9781; bugfix on cd05f35d2cdf50 in 0.2.4.2-alpha.
2014-05-12changes file for gisle vanem's MSVC fixNick Mathewson
2014-05-11Quench clang's complaints with -Wshorten-64-to-32 when time_t is not long.dana koch
On OpenBSD 5.4, time_t is a 32-bit integer. These instances contain implicit treatment of long and time_t as comparable types, so explicitly cast to time_t.
2014-05-08Merge remote-tracking branch 'public/bug11648'Nick Mathewson
2014-05-08changes file for 11648Nick Mathewson
2014-05-08Return success when get_total_system_memory() succeeds.Nick Mathewson
Fixes bug 11805; bugfix on 0.2.5.4-alpha.
2014-05-07Merge commit 'bb9b4c37f8e7f5cf78918f382e90d8b11ff42551' into maint-0.2.4Nick Mathewson
2014-05-07Merge remote-tracking branch 'public/ticket11528_024' into maint-0.2.4Nick Mathewson
2014-05-07Merge remote-tracking branch 'public/bug11513_024' into maint-0.2.4Nick Mathewson
2014-05-07Merge remote-tracking branch 'public/update_ciphers_ff28' into maint-0.2.4Nick Mathewson
2014-05-07Merge remote-tracking branch 'public/bug11737_diagnostic'Nick Mathewson
2014-05-07Improve bug11743 message a bit.Nick Mathewson
2014-05-07Merge remote-tracking branch 'public/bug8387_diagnostic'Nick Mathewson
2014-05-06Merge remote-tracking branch 'public/bug11750'Nick Mathewson
2014-05-06Merge branch 'bug11743_option_b'Nick Mathewson
2014-05-06changes file for bug11743Nick Mathewson
2014-05-06Merge remote-tracking branch 'karsten/bug11742'Nick Mathewson
2014-05-06Check HT_REP_IS_BAD_() when giving a bug-7164 warning.Nick Mathewson
This may let us know if we're hitting 7164 because of an hte_hash-corruption situation proposed by "cypherpunks" in bug 11737.
2014-05-06Fix compilation with DEBUG_DNS_CACHENick Mathewson
Reported by cypherpunks. Fix for #11761; bugfix on 0.2.3.13-alpha where we made ht.h stop using _identifiers.
2014-05-05Use siphash on channel/circuit-id map tooNick Mathewson
Fixes ticket 11750.
2014-05-05Fix cross-compiling when 128-bit math compiles but won't linkNick Mathewson
Apparently, there exist cross-compiling environments for arm7 where you can compile a 64x64->128 multiply, but not link it. Fixes bug 11729; bugfix on 0.2.4.8-alpha. Patch from 'conradev'.
2014-05-05Don't start sandbox except for CMD_RUN_TORNick Mathewson
This was crashing on --verify-config in the debian startup script, if you had sandboxing enabled. Fixes 11609; fix on 0.2.5.1-alpha.
2014-05-05Remove /tor/dbg-stability.txt URL.Karsten Loesing
The /tor/dbg-stability.txt URL was meant to help debug WFU and MTBF calculations, but nobody was using it. Fixes #11742.
2014-05-01Merge remote-tracking branch 'public/bug9635'Nick Mathewson
2014-05-01Merge remote-tracking branch 'public/bug11233_diagnose'Nick Mathewson
2014-05-01Merge branch 'bug11654_squashed'Nick Mathewson
2014-05-01Fix a misuse of strlcpy() introduced by the #11156 patch.George Kadianakis
2014-05-01Merge remote-tracking branch 'public/valgrind_tests'Nick Mathewson
2014-05-01Merge remote-tracking branch 'public/bug4345a_024'Nick Mathewson
2014-05-01Merge remote-tracking branch 'public/bug10849_025'Nick Mathewson
Conflicts: src/or/config.c
2014-05-01Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson
Conflicts: src/or/microdesc.c
2014-05-01Downgrade bug 7164 warning to INFONick Mathewson
The 0.2.5.x warning is the one that might help us track this down; the warnings in stable are just annoying users over and over and over.
2014-05-01Changes file for bug 11623 (fix was in 91ff10f6be9)Nick Mathewson
2014-04-30Merge remote-tracking branch 'origin/maint-0.2.4'Nick Mathewson
2014-04-30Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson
2014-04-30Merge remote-tracking branch 'public/bug10849_023_bruteforce' into maint-0.2.3Nick Mathewson
2014-04-30Merge remote-tracking branch 'public/bug11628'Nick Mathewson
2014-04-29Drop the MaxMemInCellQueues lower limit down to 256 MB.Nick Mathewson
on #9686, gmorehose reports that the 500 MB lower limit is too high for raspberry pi users. This is a backport of 647248729fa65f0e51d062e2af8f4e8b38592bf5 to 0.2.4. Note that in 0.2.4, the option is called MaxMemInCellQueues.
2014-04-29Merge remote-tracking branch 'public/bug11605_024'Nick Mathewson
2014-04-29Log info on ancient one-hop circuits in heartbeatNick Mathewson
This is an attempt to diagnose 8387.
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion