Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-03-01 | Draft changelog for 0.2.9.15 | Nick Mathewson | |
2018-03-01 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-03-01 | Forbid UINT32_MAX as a protocol version | Nick Mathewson | |
The C code and the rust code had different separate integer overflow bugs here. That suggests that we're better off just forbidding this pathological case. Also, add tests for expected behavior on receiving a bad protocol list in a consensus. Fixes another part of 25249. | |||
2018-03-01 | Forbid "-0" as a protocol version. | Nick Mathewson | |
Fixes part of 24249; bugfix on 0.2.9.4-alpha. | |||
2018-03-01 | Add another NULL-pointer fix for protover.c. | Nick Mathewson | |
This one can only be exploited if you can generate a correctly signed consensus, so it's not as bad as 25074. Fixes bug 25251; also tracked as TROVE-2018-004. | |||
2018-03-01 | Correctly handle NULL returns from parse_protocol_list when voting. | Nick Mathewson | |
In some cases we had checked for it, but in others we had not. One of these cases could have been used to remotely cause denial-of-service against directory authorities while they attempted to vote. Fixes TROVE-2018-001. | |||
2018-02-27 | start a new 029 changelog | Roger Dingledine | |
created by catting all the changes/ files together, then overwriting each entry with how it was written in a later release, then running the format_changelog.py script hopefully this will save nickm a bit of time -- if not feel free to overwrite. :) | |||
2018-02-16 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-16 | Merge remote-tracking branch 'dgoulet/ticket24902_029_05' into maint-0.2.9 | Nick Mathewson | |
2018-02-16 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-16 | stop calling channel_mark_client in response to a create_fast | Roger Dingledine | |
since all it does is produce false positives this commit should get merged into 0.2.9 and 0.3.0 *and* 0.3.1, even though the code in the previous commit is already present in 0.3.1. sorry for the mess. | |||
2018-02-16 | backport to make channel_is_client() accurate | Roger Dingledine | |
This commit takes a piece of commit af8cadf3a9 and a piece of commit 46fe353f25, with the goal of making channel_is_client() be based on what sort of connection handshake the other side used, rather than seeing whether the other side ever sent a create_fast cell to us. | |||
2018-02-13 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-13 | fix make check-changes | Taylor Yu | |
2018-02-13 | Make check-changes happy | David Goulet | |
Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-02-13 | Merge remote-tracking branch 'dgoulet/bug25223_029_01' into ticket24902_029_05 | David Goulet | |
2018-02-13 | dos: Add extra safety asserts in cc_stats_refill_bucket() | David Goulet | |
Never allow the function to set a bucket value above the allowed circuit burst. Closes #25202 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-02-13 | dos: Don't set consensus param if we aren't a public relay | David Goulet | |
We had this safeguard around dos_init() but not when the consensus changes which can modify consensus parameters and possibly enable the DoS mitigation even if tor wasn't a public relay. Fixes #25223 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-02-13 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-13 | dirserv: Improve returned message when relay is rejected | David Goulet | |
Explicitly inform the operator of the rejected relay to set a valid email address in the ContactInfo field and contact bad-relays@ mailing list. Fixes #25170 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-02-12 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-12 | Merge branch 'bug23318-redux_029' into maint-0.2.9 | Nick Mathewson | |
2018-02-11 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-11 | Merge remote-tracking branch 'public/bug24198_029' into maint-0.2.9 | Nick Mathewson | |
2018-02-11 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-11 | Merge branch 'ticket24315_029' into maint-0.2.9 | Nick Mathewson | |
2018-02-11 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-11 | Merge remote-tracking branch 'public/bug21074_029' into maint-0.2.9 | Nick Mathewson | |
2018-02-10 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-10 | Merge branch 'bug24978_029_enable' into maint-0.2.9 | Nick Mathewson | |
2018-02-08 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-02-08 | Merge branch 'maint-0.2.5' into maint-0.2.9 | Nick Mathewson | |
2018-02-08 | Update geoip and geoip6 to the February 7 2018 database. | Karsten Loesing | |
2018-02-02 | Merge branch 'ticket25122_029_02' into ticket24902_029_05 | David Goulet | |
2018-02-02 | geoip: Hook the client history cache into the OOM handler | David Goulet | |
If the cache is using 20% of our maximum allowed memory, clean 10% of it. Same behavior as the HS descriptor cache. Closes #25122 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-01-31 | channel_tls_get_remote_addr_method now returns real_addr. | Fernando Fernandez Mancera | |
The accurate address of a connection is real_addr, not the addr member. channel_tls_get_remote_addr_method() now returns real_addr instead. Fixes #24952; bugfix on 707c1e2 in 0.2.4.11-alpha. Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net> | |||
2018-01-30 | dos: Add changes file for ticket 24902 | David Goulet | |
Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-01-23 | Make Tor support TLS1.3 ciphers with OpenSSL 1.1.1 | Nick Mathewson | |
Without this patch, not only will TLS1.3 not work with Tor, but OpenSSL 1.1.1 with TLS1.3 enabled won't build any connections at all: It requires that either TLS1.3 be disabled, or some TLS1.3 ciphersuites be listed. Closes ticket 24978. | |||
2018-01-19 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-01-19 | hs: Use hs_service_max_rdv_failures consensus param, defaulting to 2 | Roger Dingledine | |
2018-01-19 | MAX_REND_FAILURES is 1, but we would try three times | Roger Dingledine | |
Fix an "off by 2" error in counting rendezvous failures on the onion service side. While we thought we would stop the rendezvous attempt after one failed circuit, we were actually making three circuit attempts before giving up. Fixes bug 24895; bugfix on 0.0.6. | |||
2018-01-08 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-01-08 | Add changes file for new fallback directory list. | Nick Mathewson | |
2018-01-08 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-01-08 | Merge branch 'maint-0.2.5' into maint-0.2.9 | Nick Mathewson | |
2018-01-08 | Update geoip and geoip6 to the January 5 2018 database. | Karsten Loesing | |
2018-01-05 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2018-01-05 | Merge branch 'teor_ticket24681_028' into maint-0.2.9 | Nick Mathewson | |
2018-01-04 | Don't treat a setrlimit failure as fatal. | Nick Mathewson | |
Fixes bug 21074; bugfix on 4689243242e2e12 in 0.0.9rc5 when we started doing setrlimit() in the first place. | |||
2018-01-03 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |