summaryrefslogtreecommitdiff
path: root/changes
AgeCommit message (Collapse)Author
2017-02-13Merge remote-tracking branch 'dgoulet/bug21116_030_01'Nick Mathewson
2017-02-13Merge branch 'maint-0.2.9'Nick Mathewson
2017-02-13Merge branch 'maint-0.2.8' into maint-0.2.9Nick Mathewson
2017-02-13Merge branch 'maint-0.2.7' into maint-0.2.8Nick Mathewson
2017-02-13Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2017-02-13Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2017-02-13Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2017-02-12Update geoip and geoip6 to the February 8 2017 database.Karsten Loesing
2017-02-08test: Add missing socket errno in test_util.cDavid Goulet
According to 21116, it seems to be needed for Wheezy Raspbian build. Also, manpage of socket(2) does confirm that this errno value should be catched as well in case of no support from the OS of IPv4 or/and IPv6. Fixes #21116 Signed-off-by: David Goulet <dgoulet@torproject.org>
2017-02-07Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2017-02-07Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2017-02-07Merge remote-tracking branch 'public/bug18710_025' into maint-0.2.5Nick Mathewson
2017-02-07Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2017-02-07Change behavior on missing/present event to warn instead of asserting.Nick Mathewson
Add a changes file.
2017-02-07Revert "Add hidserv-stats filname to our sandbox filter"Nick Mathewson
Reverting this in 0.2.6 only -- we're no backporting seccomp2-loosening fixes to 0.2.6. This reverts commit 2ec5e24c58a08816ed2f09c8bd6301599bc2f2f7.
2017-02-07(this already went in to 0.3.0.3-alpha)Nick Mathewson
2017-02-07Merge branch 'maint-0.2.9'Nick Mathewson
2017-02-07changes file for 21280Nick Mathewson
2017-02-07Merge branch 'teor_bug21357-v2_029' into maint-0.2.9Nick Mathewson
2017-02-07Merge branch 'bug21108_029' into maint-0.2.9Nick Mathewson
2017-02-07Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2017-02-07Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2017-02-07Backport the tonga->bifroest move to 0.2.4.Nick Mathewson
This is a backport of 19728 and 19690
2017-02-07Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
2017-02-07Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2017-02-07Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2017-02-07Merge remote-tracking branch 'public/bug19152_024_v2' into maint-0.2.4Nick Mathewson
2017-02-07Merge branch 'maint-0.2.5' into maint-0.2.6Nick Mathewson
2017-02-07Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2017-02-07Merge remote-tracking branch 'public/bug17404_024' into maint-0.2.4Nick Mathewson
2017-02-07Merge branch 'maint-0.2.4' into maint-0.2.5Nick Mathewson
2017-02-07Make memwipe() do nothing when passed a NULL pointer or zero sizeteor (Tim Wilson-Brown)
Check size argument to memwipe() for underflow. Closes bug #18089. Reported by "gk", patch by "teor". Bugfix on 0.2.3.25 and 0.2.4.6-alpha (#7352), commit 49dd5ef3 on 7 Nov 2012.
2017-02-07Fix out-of-bounds read in INTRODUCE2 client authJohn Brooks
The length of auth_data from an INTRODUCE2 cell is checked when the auth_type is recognized (1 or 2), but not for any other non-zero auth_type. Later, auth_data is assumed to have at least REND_DESC_COOKIE_LEN bytes, leading to a client-triggered out of bounds read. Fixed by checking auth_len before comparing the descriptor cookie against known clients. Fixes #15823; bugfix on 0.2.1.6-alpha.
2017-02-03Start on an 0.3.0.3-alpha changelogNick Mathewson
2017-02-03Merge branch 'bug21372_squashed'Nick Mathewson
2017-02-03Prevention: never die from extend_info_from_node() failure.Nick Mathewson
Bug 21242 occurred because we asserted that extend_info_from_node() had succeeded...even though we already had the code to handle such a failure. We fixed that in 93b39c51629ed0ded2bf807cb6. But there were four other cases in our code where we called extend_info_from_node() and either tor_assert()ed that it returned non-NULL, or [in one case] silently assumed that it returned non-NULL. That's not such a great idea. This patch makes those cases check for a bug of this kind instead. Fixes bug 21372; bugfix on 0.2.3.1-alpha when extend_info_from_node() was introduced.
2017-02-03further lintchanges fixesNick Mathewson
2017-02-03Merge branch 'dgoulet/bug21302_030_01_squashed'Nick Mathewson
2017-02-03hs: Remove intro point expiring node if no circuitDavid Goulet
Once a second, we go over all services and consider the validity of the intro points. Now, also try to remove expiring nodes that have no more circuit associated to them. This is possible if we moved an intro point object previously to that list and the circuit actually timed out or was closed by the introduction point itself. Signed-off-by: David Goulet <dgoulet@torproject.org>
2017-02-03Merge remote-tracking branch 'dgoulet/bug20980_030_01'Nick Mathewson
2017-02-03Use the standard OpenBSD preprocessor definitioncypherpunks
2017-02-03Fix all warnings from lintchangesNick Mathewson
2017-02-02dirauth: Fix for calling routers unreachable for wrong ed25519Nick Mathewson
Previously the dirserv_orconn_tls_done() function would skip routers when they advertised an ed25519 key but didn't present it during the link handshake. But that covers all versions between 0.2.7.2-alpha and 0.2.9.x inclusive! Fixes bug 21107; bugfix on 0.3.0.1-alpha.
2017-02-02Merge remote-tracking branch 'public/bug21356_029'Nick Mathewson
2017-02-02Merge branch 'bug21294_030_01_squashed'Nick Mathewson
2017-02-02config: Stop recommending Tor2web if in non anonymous modeDavid Goulet
Because we don't allow client functionalities in non anonymous mode, recommending Tor2web is a bad idea. If a user wants to use Tor2web as a client (losing all anonymity), it should run a second tor, not use it with a single onion service tor. Fixes #21294. Signed-off-by: David Goulet <dgoulet@torproject.org>
2017-02-01Merge remote-tracking branch 'asn/bug21052'Nick Mathewson
2017-02-01Merge remote-tracking branch 'dgoulet/bug21290_030_01'Nick Mathewson
2017-02-01Merge branch 'maint-0.2.9'Nick Mathewson
2017-02-01Rework 21359 changes file slightly.Nick Mathewson