summaryrefslogtreecommitdiff
path: root/changes
AgeCommit message (Collapse)Author
2016-10-17Fold 20384 into changelogNick Mathewson
2016-10-17Merge branch 'maint-0.2.8'Nick Mathewson
2016-10-17Merge branch 'buf_sentinel_026_v2' into maint-0.2.8Nick Mathewson
2016-10-17Add a one-word sentinel value of 0x0 at the end of each buf_t chunkNick Mathewson
This helps protect against bugs where any part of a buf_t's memory is passed to a function that expects a NUL-terminated input. It also closes TROVE-2016-10-001 (aka bug 20384).
2016-10-17Start on an 0.2.9.4-alpha changelogNick Mathewson
2016-10-17changes file for module docsNick Mathewson
2016-10-14Merge remote-tracking branch 'public/spaces_in_unix_addrs'Nick Mathewson
2016-10-14Merge branch 'bug18357_v2'Nick Mathewson
2016-10-11Merge remote-tracking branch 'yawning-schwanenlied/bug20261'Nick Mathewson
2016-10-11torrc parsing b0rks on carriage-returnpaolo.ingls@gmail.com
(Specifically, carriage return after a quoted value in a config line. Fixes bug 19167; bugfix on 0.2.0.16-alpha when we introduced support for quoted values. Unit tests, changes file, and this parenthetical by nickm.)
2016-10-11Merge remote-tracking branch 'asn/bug19223'Nick Mathewson
2016-10-10Fix non-triggerable heap corruption at do_getpass().George Kadianakis
2016-10-06Stop implying that we support openssl 1.0.0; we don't.Nick Mathewson
Closes ticket 20303. The LIBRESSL_VERSION_NUMBER check is needed because if our openssl is really libressl, it will have an openssl version number we can't really believe.
2016-10-06Merge branch 'maint-0.2.8'Nick Mathewson
2016-10-06Merge branch 'maint-0.2.7' into maint-0.2.8Nick Mathewson
2016-10-06Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2016-10-06Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2016-10-06Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2016-10-06Only use -levent when checking functions if we will use it to link.Nick Mathewson
Fixes 19904; bugfix on b62abf9f21499ab; patch from Rubiate.
2016-10-05Clean up and fix exit policy check in connection_exit_connect().Nick Mathewson
Previously, we would reject even rendezvous connections to IPv6 addresses when IPv6Exit was false. But that doesn't make sense; we don't count that as "exit"ing. I've corrected the logic and tried to make it a lottle more clear. Fixes bug 18357; this code has been wrong since 9016d9e8294a352 in 0.2.4.7-alpha.
2016-10-05Update geoip and geoip6 to the October 6 2016 database.Karsten Loesing
2016-10-04Allow a unix: address to contain a C-style quoted string.Nick Mathewson
Feature 18753 -- all this to allow spaces.
2016-10-03Teach 'make tags' about MOCK_IMPL.Nick Mathewson
Patch from nherring; closes ticket 16869
2016-10-03Avoid reordering IPv6 interface addressescypherpunks
When deleting unsuitable addresses in get_interface_address6_list(), to avoid reordering IPv6 interface addresses and keep the order returned by the OS, use SMARTLIST_DEL_CURRENT_KEEPORDER() instead of SMARTLIST_DEL_CURRENT(). This issue was reported by René Mayrhofer. [Closes ticket 20163; changes file written by teor. This paragraph added by nickm]
2016-10-03Fix parse_virtual_addr_network minimum network sizePaolo Inglese
2016-09-30Bug 20261: Disable IsolateClientAddr on AF_LOCAL SocksPorts.Yawning Angel
The client addr is essentially meaningless in this context (yes, it is possible to explicitly `bind()` AF_LOCAL client side sockets to a path, but no one does it, and there are better ways to grant that sort of feature if people want it like using `SO_PASSCRED`).
2016-09-26Merge remote-tracking branch 'public/ticket20001_v2'Nick Mathewson
2016-09-26Merge branch 'protover_v2_squashed'Nick Mathewson
2016-09-26Changes file for prop264 / ticket 19958.Nick Mathewson
2016-09-24Merge branch 'osx_sierra_028'Nick Mathewson
2016-09-24changes file for osx sierra fixesNick Mathewson
2016-09-23Remove changes files that we have folded inNick Mathewson
2016-09-23Merge branch 'maint-0.2.8'Nick Mathewson
2016-09-23Merge remote-tracking branch 'teor/broken-028-fallbacks' into maint-0.2.8Nick Mathewson
2016-09-22remove changes files that are also in 0.2.8.8Nick Mathewson
2016-09-22Merge branch 'maint-0.2.8'Nick Mathewson
2016-09-22LintChanges fixNick Mathewson
2016-09-22Merge branch 'bug20203_027_squashed' into maint-0.2.8Nick Mathewson
2016-09-22When clearing cells from a circuit for OOM reasons, tell cmux we did so.Nick Mathewson
Not telling the cmux would sometimes cause an assertion failure in relay.c when we tried to get an active circuit and found an "active" circuit with no cells. Additionally, replace that assert with a test and a log message. Fix for bug 20203. This is actually probably a bugfix on 0.2.8.1-alpha, specifically my code in 8b4e5b7ee902fb7fa0776 where I made circuit_mark_for_close_() do less in order to simplify our call graph. Thanks to "cypherpunks" for help diagnosing.
2016-09-22Merge branch 'maint-0.2.8'Nick Mathewson
2016-09-22Fix lintchanges warnings in 028Nick Mathewson
2016-09-22Fix warnings from lintChanges.pyNick Mathewson
2016-09-22Changes file for #20190: remove broken fallbacksteor
2016-09-20Merge branch 'maint-0.2.8'Nick Mathewson
2016-09-20Don't look at any routerstatus_t when the networkstatus is inconsistentNick Mathewson
For a brief moment in networkstatus_set_current_consensus(), the old consensus has been freed, but the node_t objects still have dead pointers to the routerstatus_t objects within it. During that interval, we absolutely must not do anything that would cause Tor to look at those dangling pointers. Unfortunately, calling the (badly labeled!) current_consensus macro or anything else that calls into we_use_microdescriptors_for_circuits(), can make us look at the nodelist. The fix is to make sure we identify the main consensus flavor _outside_ the danger zone, and to make the danger zone much much smaller. Fixes bug 20103. This bug has been implicitly present for AGES; we just got lucky for a very long time. It became a crash bug in 0.2.8.2-alpha when we merged 35bbf2e4a4e8ccb to make find_dl_schedule start looking at the consensus, and 4460feaf2850ef0 which made node_get_all_orports less (accidentally) tolerant of nodes with a valid ri pointer but dangling rs pointer.
2016-09-19Merge remote-tracking branch 'teor/bug20117'Nick Mathewson
2016-09-14Remove an extraneous parenthesis in IF_BUG_OHNCE__Nick Mathewson
Fixes bug 20141; bugfix on 0.2.9.1-alpha. Patch from Gisle Vanem.
2016-09-14Merge remote-tracking branch 'teor/feature20072'Nick Mathewson
2016-09-14Merge branch 'bug20081'Nick Mathewson
2016-09-14Add some chutney single onion networks to make test-network-allteor
This requires a recent version of chutney, with the single onion network flavours (git c72a652 or later). Closes ticket #20072.
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion