Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-06-02 | Silence unused-const-variable warnings in zstd.h on some gcc versions | teor | |
Fixes bug 26272; bugfix on 0.3.1.1-alpha. | |||
2018-05-24 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-05-16 | Return -1 from our PEM password callback | Nick Mathewson | |
Apparently, contrary to its documentation, this is how OpenSSL now wants us to report an error. Fixes bug 26116; bugfix on 0.2.5.16. | |||
2018-04-23 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-04-23 | Permit the nanosleep system call in the seccomp2 callbox | Nick Mathewson | |
Fixes bug 24969; bugfix on 0.2.5.1-alpha when the sandbox was introduced. | |||
2018-04-16 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-04-16 | Fix an LCOV exclusion pattern in address.c | Nick Mathewson | |
2018-03-26 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-03-20 | Remove sb_poll check: all poll() calls are ok. | Nick Mathewson | |
2018-03-20 | Add the poll() syscall as permitted by the sandbox | Nick Mathewson | |
Apparently, sometimes getpwnam will call this. Fixes bug 25513. | |||
2018-02-16 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-02-16 | Merge remote-tracking branch 'dgoulet/ticket24902_029_05' into maint-0.2.9 | Nick Mathewson | |
2018-02-12 | Have tor_addr hashes return a randomized hash for AF_UNSPEC. | Nick Mathewson | |
We don't expect this to come up very much, but we may as well make sure that the value isn't predictable (as we do for the other addresses) in case the issue ever comes up. Spotted by teor. | |||
2018-02-12 | Fix a typo in an address_set.c comment. | Nick Mathewson | |
2018-02-11 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-02-11 | Merge remote-tracking branch 'public/bug24198_029' into maint-0.2.9 | Nick Mathewson | |
2018-02-11 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-02-11 | Merge branch 'ticket24315_029' into maint-0.2.9 | Nick Mathewson | |
2018-02-11 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-02-11 | Merge remote-tracking branch 'public/bug21074_029' into maint-0.2.9 | Nick Mathewson | |
2018-02-10 | Merge branch 'maint-0.2.9' into maint-0.3.1 | Nick Mathewson | |
2018-02-08 | Merge branch 'ticket25183_029_01' into ticket24902_029_05 | David Goulet | |
2018-02-08 | Function to add an ipv4 address to an address_set | Nick Mathewson | |
This is a convenience function, so callers don't need to wrap the IPv4 address. | |||
2018-02-08 | Add an address-set backend using a bloom filter. | Nick Mathewson | |
We're going to need this to make our anti-DoS code (see 24902) more robust. | |||
2018-01-30 | dos: Initial code of Denial of Service mitigation | David Goulet | |
This commit introduces the src/or/dos.{c|h} files that contains the code for the Denial of Service mitigation subsystem. It currently contains basic functions to initialize and free the subsystem. They are used at this commit. The torrc options and consensus parameters are defined at this commit and getters are implemented. Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-01-23 | Make Tor support TLS1.3 ciphers with OpenSSL 1.1.1 | Nick Mathewson | |
Without this patch, not only will TLS1.3 not work with Tor, but OpenSSL 1.1.1 with TLS1.3 enabled won't build any connections at all: It requires that either TLS1.3 be disabled, or some TLS1.3 ciphersuites be listed. Closes ticket 24978. | |||
2018-01-17 | Add a cast to avoid a signed/unsigned comparison | Nick Mathewson | |
2018-01-04 | Don't treat a setrlimit failure as fatal. | Nick Mathewson | |
Fixes bug 21074; bugfix on 4689243242e2e12 in 0.0.9rc5 when we started doing setrlimit() in the first place. | |||
2017-12-11 | Merge remote-tracking branch 'public/bug24099_031' into maint-0.3.1 | Nick Mathewson | |
2017-11-30 | Merge branch 'maint-0.3.0' into maint-0.3.1 | Nick Mathewson | |
2017-11-30 | Merge branch 'maint-0.2.8' into maint-0.2.9 | Nick Mathewson | |
2017-11-30 | Merge branch 'maint-0.2.9' into maint-0.3.0 | Nick Mathewson | |
2017-11-30 | Merge branch 'maint-0.2.5' into maint-0.2.8 | Nick Mathewson | |
2017-11-27 | Avoid asking for passphrase on junky PEM input | Nick Mathewson | |
Fixes bug 24246 and TROVE-2017-011. This bug is so old, it's in Matej's code. Seems to have been introduced with e01522bbed6eea. | |||
2017-11-20 | In storagedir, take more care with errno on empty or mislabeled file | Nick Mathewson | |
Required for 24099 fix -- we won't be able to act based on errno unless we can trust it. | |||
2017-11-16 | Check the libc version to decide whether to allow openat. | Nick Mathewson | |
2017-11-16 | Make our seccomp2 sandbox handle Glibc 2.26 | Nick Mathewson | |
There are three changes here: * We need to allow epoll_pwait. * We need to allow PF_NETLINK sockets to be opened with SOCK_CLOEXEC. * We need to use openat() instead of open(). Note that this fix is not complete, since the openat() change is turned off. The next commit will make the openat() change happen when we're running glibc 2.26 or later. Fix for 24315. | |||
2017-11-16 | Permit kill(pid, 0) in the seccomp2 sandbox. | Nick Mathewson | |
We don't want to allow general signals to be sent, but there's no problem sending a kill(0) to probe whether a process is there. Fixes bug 24198; bugfix on 0.2.5.1-alpha when the seccomp2 sandbox was introduced. | |||
2017-09-28 | Better error handling when trying to compress/decompress into empty buffer. | Alexander Færøy | |
This patch ensures that we return TOR_COMPRESS_BUFFER_FULL in case we have a input bytes left to process, but are out of output buffer or in case we need to finish where the compression implementation might need to write an epilogue. See: https://bugs.torproject.org/23551 | |||
2017-09-20 | in zstd compression, fix 32 bit build | Andreas Stieger | |
format '%lu' expects argument of type 'long unsigned int', but argument ... has type 'size_t' Closes ticket 23568. | |||
2017-09-12 | Merge branch 'maint-0.2.9' into maint-0.3.0 | Nick Mathewson | |
2017-09-12 | One more implicit fallthrough warning to fix on GCC 7 | Nick Mathewson | |
2017-09-11 | Merge branch 'maint-0.2.9' into maint-0.3.0 | Nick Mathewson | |
2017-09-11 | Fix mixed-sign comparison warning in fix for 22797. | Nick Mathewson | |
2017-09-11 | Merge branch 'teor-bug22797-025' into maint-0.2.9 | Nick Mathewson | |
2017-09-11 | Extract the important parts of the run-pending-timers function. | Nick Mathewson | |
Our unit tests will need this, so that they can simulate advancing time without getting libevent involved. | |||
2017-08-25 | Merge branch 'bug19418_029' into maint-0.3.1 | Nick Mathewson | |
2017-08-09 | Make sure we always wind up checking i2d_*'s output. | Nick Mathewson | |
The biggest offender here was sometimes not checking the output of crypto_pk_get_digest. Fixes bug 19418. Reported by Guido Vranken. | |||
2017-08-08 | Use a single free-and-exit strategy in config_process_include. | Nick Mathewson | |
This avoids a double-free when a pointer already freed with tor_free(config_line) is freed again in the cleanup-and-exit code. Fixes bug 23155. | |||
2017-08-08 | Remove some LCOV_EXCL stuff that I think may be testable after all. | Nick Mathewson | |
This is partial revert on 22286. Also, tweak some log messages to be distinct. |