Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-09-04 | Merge branch 'maint-0.2.3' into release-0.2.3 | Roger Dingledine | |
2012-08-31 | Merge branch 'bug6732' into maint-0.2.3 | Nick Mathewson | |
2012-08-31 | Document consensus and microdesc files | Nick Mathewson | |
Bugfix for #6732. | |||
2012-08-27 | Quiet "Set buildtimeout to low val" warnings: make them info | Nick Mathewson | |
Fix for #6251 | |||
2012-08-27 | Downgrade path-bias warning messages to INFO for now. | Nick Mathewson | |
We've had over two months to fix them, and didn't. Now we need 0.2.3.x stable. Yes, it would be cool to get this working in 0.2.3.x, but not at the expense of delaying every other feature that _does_ work in 0.2.3.x. We can do a real fix in 0.2.4. | |||
2012-08-27 | Merge branch 'bug6710_023' into maint-0.2.3 | Nick Mathewson | |
2012-08-27 | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3 | Nick Mathewson | |
Conflicts: src/or/policies.c | |||
2012-08-27 | go back in time and revise the 0.2.2.38 blurb too | Roger Dingledine | |
2012-08-27 | i should have removed these changes files during 0.2.3.20 release | Roger Dingledine | |
2012-08-27 | Fix changes file for 6710: before 0.0.8pre1, you couldn't extend to | Nick Mathewson | |
a router that another router wasn't already connected to. | |||
2012-08-27 | Do not assert when comparing a null address/port against a policy | Nick Mathewson | |
This can create a remote crash opportunity for/against directory authorities. | |||
2012-08-27 | Disable extending to private/internal addresses by default | Nick Mathewson | |
This is important, since otherwise an attacker can use timing info to probe the internal network. Also, add an option (ExtendAllowPrivateAddresses) so that TestingTorNetwork won't break. Fix for bug 6710; bugfix on all released versions of Tor. | |||
2012-08-24 | Merge remote-tracking branch 'public/bug6472' into maint-0.2.3 | Nick Mathewson | |
2012-08-22 | Remove #6480 fix from 0.2.2.38 changelog - it was not included | Peter Palfrader | |
(Forward-port change from release-0.2.2 into release-0.2.3) | |||
2012-08-21 | Merge remote-tracking branch 'public/bug6404' into maint-0.2.3 | Nick Mathewson | |
2012-08-17 | When iterating over connections pending DNS, skip marked ones | Nick Mathewson | |
Failure to do this would lead to double-free cases and similar, especially when the exit's DNS was broken. See bug 6472 for full details; this is a fix for 6472. Anonymous patch from "cypherpunks" on trac. | |||
2012-08-17 | Consider IPv6 OR ports when deciding whether a routerinfo change is cosmetic. | Linus Nordberg | |
Closes #6423. | |||
2012-08-17 | Merge branch 'bug6379' into maint-0.2.3 | Nick Mathewson | |
2012-08-17 | Merge remote-tracking branch 'public/bug6244_part_c' into maint-0.2.3 | Nick Mathewson | |
2012-08-17 | Merge remote-tracking branch 'public/bug6507' into maint-0.2.3 | Nick Mathewson | |
2012-08-17 | Merge remote-tracking branch 'mikeperry/bug6475' into maint-0.2.3 | Nick Mathewson | |
2012-08-17 | Merge remote-tracking branch 'public/bug6514' into maint-0.2.3 | Nick Mathewson | |
2012-08-16 | Address Nick's comments from code review. | Mike Perry | |
Also promote log messages to notice and rate-limit them. | |||
2012-08-15 | Fix warnings and 64-bit problems in openbsd-malloc code | Nick Mathewson | |
The warning fixes are: - Only define issetugid if it's missing. - Explicitly ignore the return value of writev. - Explicitly cast the retval of readlink() to int. The 64-bit problems are related to just storing a size_t in an int. Not cool! Use a size_t instead. Fix for bug 6379. Bugfix on 0.2.0.20-rc, which introduced openbsd-malloc. | |||
2012-08-15 | Fix wildcarded address mappings from the control port | Nick Mathewson | |
Apparently, we weren't actually detecting wildcardedness when parsing them: whoops! bug 6244. Bugfix on 0.2.3.9-alpha | |||
2012-08-14 | Update description of what we did to upper limit on md size | Nick Mathewson | |
Spotted by asn | |||
2012-08-09 | Reject attempts to say FooPort and FooPort 0 in the same cfg domain | Nick Mathewson | |
2012-08-09 | Don't infer we have a FooPort from the presence of a FooPort line | Nick Mathewson | |
Thanks to the changes we started making with SocksPort and friends in 0.2.3.3-alpha, any of our code that did "if (options->Sockport)" became wrong, since "SocksPort 0" would make that test true whereas using the default SocksPort value would make it false. (We didn't actually do "if (options->SockPort)" but we did have tests for TransPort. When we moved DirPort, ORPort, and ControlPort over to the same system in 0.2.3.9-alpha, the problem got worse, since our code is littered with checks for DirPort and ORPort as booleans. This code renames the current linelist-based FooPort options to FooPort_lines, and adds new FooPort_set options which get set at parse-and-validate time on the or_options_t. FooPort_set is true iff we will actually try to open a listener of the given type. (I renamed the FooPort options rather than leave them alone so that every previous user of a FooPort would need to get inspected, and so that any new code that forgetfully uses FooPort will need fail to compile.) Fix for bug 6507. | |||
2012-08-09 | Merge remote-tracking branch 'public/bug6252_again' into maint-0.2.3 | Nick Mathewson | |
2012-08-03 | Merge remote-tracking branch 'origin/maint-0.2.3' into release-0.2.3 | Nick Mathewson | |
2012-08-03 | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3 | Nick Mathewson | |
Conflicts: src/or/routerlist.c | |||
2012-08-03 | Try to clarify impact of bug 6537 | Nick Mathewson | |
I don't personally agree that this is likely to be easy to exploit, and some initial experimention I've done suggests that cache-miss times are just plain too fast to get useful info out of when they're mixed up with the rest of Tor's timing noise. Nevertheless, I'm leaving Robert's initial changelog entry in the git history so that he can be the voice of reason if I'm wrong. :) | |||
2012-08-03 | Mitigate a side-channel leak of which relays Tor chooses for a circuit | Robert Ransom | |
Tor's and OpenSSL's current design guarantee that there are other leaks, but this one is likely to be more easily exploitable, and is easy to fix. | |||
2012-08-03 | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3 | Nick Mathewson | |
2012-08-03 | Clarify security impact of bug 6530 | Nick Mathewson | |
2012-08-03 | Avoid possible segfault when handling networkstatus vote with bad flavor | Nick Mathewson | |
Fix for 6530; fix on 0.2.2.6-alpha. | |||
2012-08-01 | Defensive programming: clear rs_out between iterations. | Nick Mathewson | |
I can't currently find a bug here, but there are a couple of near-misses. Addresses ticket 6514; reported pseudonymously on IRC. | |||
2012-07-31 | Avoid hard (impossible?)-to-trigger double-free in dns_resolve() | Nick Mathewson | |
Fixes 6480; fix on 0.2.0.1-alpha; based on pseudonymous patch. | |||
2012-07-31 | changelog for bug6043 | Nick Mathewson | |
2012-07-31 | Warn at parse time for routerstatus entry missing a microdesc consensus | Nick Mathewson | |
In 0.2.3.18-rc, we started warning on this case while building a list of missing microdescriptor digests. That turned out to spam the logs; instead let's warn at parse time. Partial fix for bug 6404. | |||
2012-07-31 | Don't include a router in an md consensus if we can't find a md for it. | Nick Mathewson | |
The spec requires that every router in a microdesc consensus have an m line; we weren't obeying that spec. This creates a new consensus method (13) to allow voting to continue to work right. Partial fix for bug 6404; fix on 0.2.2.6-alpha. | |||
2012-07-31 | Allow microdescs to be up to 2k. Partial fix for 6404. | Nick Mathewson | |
2012-07-31 | Merge branch 'bug6490_v2' into maint-0.2.3 | Nick Mathewson | |
2012-07-31 | Warn when accounting is used in a way likely to link hidden services | Nick Mathewson | |
Fix for 6490. | |||
2012-07-31 | Fix some manpage typos | Nick Mathewson | |
This is based on a pair of patches from A. Costa. I couldn't apply those directly, since they changed the generated *roff files, not the asciidoc source. Fixes Tor bug 6500 and Debian bug 683359. | |||
2012-07-31 | fold in changes so far | Roger Dingledine | |
2012-07-31 | Merge branch 'maint-0.2.3' into release-0.2.3 | Roger Dingledine | |
2012-07-23 | Merge remote-tracking branch 'asn/bug6274_take3' into maint-0.2.3 | Nick Mathewson | |
2012-07-20 | changes file for bug 6436. | Nick Mathewson | |
2012-07-18 | Better handling of server managed proxies when Tor is not a relay. | George Kadianakis | |