Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-05-07 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-05-07 | Update geoip files to match ipfire location db, 2021/05/07. | Nick Mathewson | |
2021-04-16 | Stop calling evdns_set_random_bytes_fn() | Nick Mathewson | |
This function has been a no-op since Libevent 2.0.4-alpha, when libevent got an arc4random() implementation. Libevent has finally removed it, which will break our compilation unless we stop calling it. (This is currently breaking compilation in OSS-fuzz.) Closes #40371. | |||
2021-04-13 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-04-13 | fallbackdir: Renegerate list with 200 relays | David Goulet | |
Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2021-04-13 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-04-13 | Update geoip files to match ipfire location db, 2021/04/13. | Nick Mathewson | |
2021-03-15 | Changelog for 0.3.5.14. | Nick Mathewson | |
2021-03-15 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-03-15 | Merge branch 'bug40316_035_v2' into maint-0.3.5 | Nick Mathewson | |
2021-03-15 | Fix detection of point to insert signatures on a pending consensus. | Nick Mathewson | |
We were looking for the first instance of "directory-signature " when instead the correct behavior is to look for the first instance of "directory-signature " at the start of a line. Unfortunately, this can be exploited as to crash authorities while they're voting. Fixes #40316; bugfix on 0.2.2.4-alpha. This is TROVE-2021-002, also tracked as CVE-2021-28090. | |||
2021-03-15 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-03-15 | Clarify new intended strategy with TROVE-2021-001 | Nick Mathewson | |
We're going to disable this feature in all versions for now. | |||
2021-03-15 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-03-15 | Merge branch 'bug40286_disable_min_035' into maint-0.3.5 | Nick Mathewson | |
2021-03-12 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-03-12 | Use the right ticket number. | Nick Mathewson | |
2021-03-12 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-03-12 | update geoip-2021-03-12 to mention provider transition. | Nick Mathewson | |
2021-03-12 | Update geoip files to match ipfire location db, 2021/03/12. | Nick Mathewson | |
2021-03-01 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-02-23 | Remove mallinfo() from codebase | David Goulet | |
Now deprecated in libc >= 2.33 Closes #40309 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2021-02-19 | Disable the dump_desc() function. | Nick Mathewson | |
It can be called with strings that should have been length-delimited, but which in fact are not. This can cause a CPU-DoS bug or, in a worse case, a crash. Since this function isn't essential, the best solution for older Tors is to just turn it off. Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was introduced. | |||
2021-02-03 | Fold in the entry for 2667tor-0.3.5.13 | Nick Mathewson | |
2021-02-03 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-02-02 | start a changelog for 0.3.5.13. | Nick Mathewson | |
2021-01-29 | exit: Deny re-entry into the network | Roger Dingledine | |
Exit relays now reject exit attempts to known relay addresses + ORPort and also to authorities on the ORPort and DirPort. Closes #2667 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2021-01-28 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'tor-gitlab/mr/50' into maint-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'tor-gitlab/mr/239' into maint-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'tor-gitlab/mr/243' into maint-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'tor-gitlab/mr/254' into maint-0.3.5 | David Goulet | |
2021-01-28 | Merge remote-tracking branch 'tor-gitlab/mr/140' into maint-0.3.5 | David Goulet | |
2021-01-28 | Merge remote-tracking branch 'tor-gitlab/mr/186' into maint-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'tor-gitlab/mr/140' into maint-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-01-28 | Merge branch 'tor-gitlab/mr/186' into maint-0.3.5 | David Goulet | |
2021-01-21 | Merge branch 'maint-0.3.5' into release-0.3.5 | David Goulet | |
2021-01-21 | build: Add "make lsp" command | David Goulet | |
Generates the compile_commands.json file using the "bear" application so the ccls server can be more efficient with our code base. Closes #40227 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2021-01-19 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-01-19 | Merge remote-tracking branch 'tor-gitlab/mr/143' into maint-0.3.5 | Nick Mathewson | |
2021-01-19 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-01-13 | Better fix for #40241 (--enable-all-bugs-are-fatal and fallthrough) | Nick Mathewson | |
This one should work on GCC _and_ on Clang. The previous version made Clang happier by not having unreachable "fallthrough" statements, but made GCC sad because GCC didn't think that the unconditional failures were really unconditional, and therefore _wanted_ a FALLTHROUGH. This patch adds a FALLTHROUGH_UNLESS_ALL_BUGS_ARE_FATAL macro that seems to please both GCC and Clang in this case: ordinarily it is a FALLTHROUGH, but when ALL_BUGS_ARE_FATAL is defined, it's an abort(). Fixes bug 40241 again. Bugfix on earlier fix for 40241, which was merged into maint-0.3.5 and forward, and released in 0.4.5.3-rc. | |||
2021-01-12 | hs-v3: Require reasonably live consensus | David Goulet | |
Some days before this commit, the network experienced a DDoS on the directory authorities that prevented them to generate a consensus for more than 5 hours straight. That in turn entirely disabled onion service v3, client and service side, due to the subsystem requiring a live consensus to function properly. We know require a reasonably live consensus which means that the HSv3 subsystem will to its job for using the best consensus tor can find. If the entire network is using an old consensus, than this should be alright. If the service happens to use a live consensus while a client is not, it should still work because the client will use the current SRV it sees which might be the previous SRV for the service for which it still publish descriptors for. If the service is using an old one and somehow can't get a new one while clients are on a new one, then reachability issues might arise. However, this is a situation we already have at the moment since the service will simply not work if it doesn't have a live consensus while a client has one. Fixes #40237 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2021-01-11 | Merge branch 'maint-0.3.5' into release-0.3.5 | Nick Mathewson | |
2021-01-11 | Fix warnings in current debian-hardened CI. | Nick Mathewson | |
We're getting "fallback annotation annotation in unreachable code" warnings when we build with ALL_BUGS_ARE_FATAL. This patch fixes that. Fixes bug 40241. Bugfix on 0.3.5.4-alpha. |