summaryrefslogtreecommitdiff
path: root/changes
AgeCommit message (Collapse)Author
2021-03-15Changelog for 0.4.5.7Nick Mathewson
2021-03-15Merge branch 'maint-0.4.5' into release-0.4.5Nick Mathewson
2021-03-15Merge branch 'maint-0.4.4' into maint-0.4.5Nick Mathewson
2021-03-15Merge branch 'maint-0.3.5' into maint-0.4.4Nick Mathewson
2021-03-15Merge branch 'bug40316_035_v2' into maint-0.3.5Nick Mathewson
2021-03-15Fix detection of point to insert signatures on a pending consensus.Nick Mathewson
We were looking for the first instance of "directory-signature " when instead the correct behavior is to look for the first instance of "directory-signature " at the start of a line. Unfortunately, this can be exploited as to crash authorities while they're voting. Fixes #40316; bugfix on 0.2.2.4-alpha. This is TROVE-2021-002, also tracked as CVE-2021-28090.
2021-03-15Merge branch 'maint-0.4.5' into release-0.4.5Nick Mathewson
2021-03-15Merge branch 'maint-0.4.4' into maint-0.4.5Nick Mathewson
2021-03-15Merge branch 'maint-0.3.5' into maint-0.4.4Nick Mathewson
2021-03-15Clarify new intended strategy with TROVE-2021-001Nick Mathewson
We're going to disable this feature in all versions for now.
2021-03-15Merge branch 'maint-0.4.5' into release-0.4.5Nick Mathewson
2021-03-15Merge branch 'maint-0.4.4' into maint-0.4.5Nick Mathewson
2021-03-15Merge branch 'maint-0.3.5' into maint-0.4.4Nick Mathewson
2021-03-15Merge branch 'bug40286_disable_min_035' into maint-0.3.5Nick Mathewson
2021-03-12Merge branch 'maint-0.4.5' into release-0.4.5Nick Mathewson
2021-03-12Merge branch 'maint-0.4.4' into maint-0.4.5Nick Mathewson
2021-03-12Merge branch 'maint-0.3.5' into maint-0.4.4Nick Mathewson
2021-03-12Use the right ticket number.Nick Mathewson
2021-03-12Merge branch 'maint-0.4.5' into release-0.4.5Nick Mathewson
2021-03-12Merge branch 'maint-0.4.4' into maint-0.4.5Nick Mathewson
2021-03-12Merge branch 'maint-0.3.5' into maint-0.4.4Nick Mathewson
2021-03-12update geoip-2021-03-12 to mention provider transition.Nick Mathewson
2021-03-12Update geoip files to match ipfire location db, 2021/03/12.Nick Mathewson
2021-03-10Merge branch 'maint-0.4.5' into release-0.4.5Nick Mathewson
2021-03-10Merge remote-tracking branch 'tor-gitlab/mr/335' into maint-0.4.5Nick Mathewson
2021-03-10Merge branch 'maint-0.4.5' into release-0.4.5David Goulet
2021-03-10Merge branch 'tor-gitlab/mr/331' into maint-0.4.5David Goulet
2021-03-10Merge branch 'maint-0.4.5' into release-0.4.5David Goulet
2021-03-10hs: Remove hamrless BUG() that can happenDavid Goulet
When reloading a service, we can re-register a service and thus end up again in the metrics store initialization code path which is fine. No need to BUG() anymore. Fixes #40334 Signed-off-by: David Goulet <dgoulet@torproject.org>
2021-03-08Fix documentation formatting for VirtualAddrNetworkIPv6Nick Mathewson
Fixes bug #40256; bugfix on 0.2.9.4-alpha.
2021-03-03Fix parsing bug in linux get_total_system_memory().Nick Mathewson
Use find_str_at_start_of_line(), not strstr() here: we don't want to match "MemTotal: " if it appears in the middle of a line. Fixes #40315; bugfix on 0.2.5.4-alpha.
2021-02-24Merge branch 'maint-0.4.5' into release-0.4.5David Goulet
2021-02-24Merge branch 'tor-gitlab/mr/321' into maint-0.4.5David Goulet
2021-02-23Merge branch 'maint-0.4.5' into release-0.4.5David Goulet
2021-02-23Merge branch 'tor-gitlab/mr/326' into maint-0.4.5David Goulet
2021-02-23Remove mallinfo() from codebaseDavid Goulet
Now deprecated in libc >= 2.33 Closes #40309 Signed-off-by: David Goulet <dgoulet@torproject.org>
2021-02-23Remove mallinfo() from codebaseDavid Goulet
Now deprecated in libc >= 2.33 Closes #40309 Signed-off-by: David Goulet <dgoulet@torproject.org>
2021-02-23relay: Avoid a directory early fetchDavid Goulet
The directory_fetches_from_authorities() is used to know if a client or relay should fetch data from an authority early in the boot process. We had a condition in that function that made a relay trigger that fetch if it didn't know its address (so we can learn it). However, when this is called, the address discovery has not been done yet so it would always return true for a relay. Furthermore, it would always trigger a log notice that the IPv4 couldn't be found which was inevitable because the address discovery process has not been done yet (done when building our first descriptor). It is also important to point out that starting in 0.4.5.1-alpha, asking an authority for an address is done during address discovery time using a one-hop circuit thus independent from the relay deciding to fetch or not documents from an authority. Small fix also is to reverse the "IPv(4|6)Only" flag in the notice so that if we can't find IPv6 it would output to use IPv4Only. Fixes #40300 Signed-off-by: David Goulet <dgoulet@torproject.org>
2021-02-22Merge remote-tracking branch 'tor-gitlab/mr/316' into maint-0.4.5Nick Mathewson
2021-02-22Merge remote-tracking branch 'tor-gitlab/mr/316' into release-0.4.5Nick Mathewson
2021-02-22Merge branch 'maint-0.4.5' into release-0.4.5Alexander Færøy
2021-02-22Merge remote-tracking branch 'tor-gitlab/mr/309' into maint-0.4.5Alexander Færøy
2021-02-22relay: Move log notice after suggested address lookupDavid Goulet
When trying to find our address to publish, we would log notice if we couldn't find it from the cache but then we would look at the suggested cache (which contains the address from the authorities) in which we might actually have the address. Thus that log notice was misplaced. Move it down after the suggested address cache lookup. Closes #40300 Signed-off-by: David Goulet <dgoulet@torproject.org>
2021-02-19Disable the dump_desc() function.Nick Mathewson
It can be called with strings that should have been length-delimited, but which in fact are not. This can cause a CPU-DoS bug or, in a worse case, a crash. Since this function isn't essential, the best solution for older Tors is to just turn it off. Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was introduced.
2021-02-19Merge branch 'maint-0.4.5' into release-0.4.5George Kadianakis
2021-02-19Merge remote-tracking branch 'tor-gitlab/mr/308' into maint-0.4.5George Kadianakis
2021-02-18Merge branch 'maint-0.4.5' into release-0.4.5Nick Mathewson
2021-02-17Make our configure.ac script use the portable `=` comparisonNick Mathewson
Back in 0.4.5.1-alpha we added an `==` comparison, which isn't portable. Fixes bug #40298; bugfix on 0.4.5.1-alpha.
2021-02-17relay: No longer test dirport reachability for authoritiesRoger Dingledine
Now that exit relays don't allow exit connections to directory authority DirPorts, the follow-up step is to make directory authorities stop doing DirPort reachability checks. Fixes #40287 Signed-off-by: David Goulet <dgoulet@torproject.org>
2021-02-17metrics: Handle the connection finished flushing eventDavid Goulet
Turns out, we forgot to add the METRICS connection type fo the finished flushing handler. Fixes #40295 Signed-off-by: David Goulet <dgoulet@torproject.org>