Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-01-15 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
2011-01-15 | Zero out some more key data before freeing it | Nick Mathewson | |
Found by cypherpunks; fixes bug 2384. | |||
2011-01-15 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
Conflicts: src/or/routerparse.c src/or/test.c | |||
2011-01-15 | Merge branch 'bug2352_obsize' into maint-0.2.1 | Nick Mathewson | |
2011-01-15 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
2011-01-15 | Merge branch 'bug2324_uncompress' into maint-0.2.1 | Nick Mathewson | |
2011-01-15 | clean up message; explain a magic number in a comment | Nick Mathewson | |
2011-01-15 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
Conflicts: src/or/config.c src/or/networkstatus.c src/or/rendcommon.c src/or/routerparse.c src/or/test.c | |||
2011-01-15 | Fix a heap overflow found by debuger, and make it harder to make that ↵ | Nick Mathewson | |
mistake again Our public key functions assumed that they were always writing into a large enough buffer. In one case, they weren't. (Incorporates fixes from sebastian) | |||
2011-01-12 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
2011-01-12 | Make our replacement INT32_MAX always signed | Nick Mathewson | |
The C standard says that INT32_MAX is supposed to be a signed integer. On platforms that have it, we get the correct platform-defined value. Our own replacement, however, was unsigned. That's going to cause a bug somewhere eventually. | |||
2011-01-10 | Add logic in routerparse to not read overlong private keys | Nick Mathewson | |
I am not at all sure that it is possible to trigger a bug here, but better safe than sorry. | |||
2011-01-05 | Fix size_t vs unsigned comparison too | Nick Mathewson | |
2011-01-05 | Fix a SIZE_T_CEILING check in torgzip.c; noticed by cypherpunks | Nick Mathewson | |
2011-01-03 | Fix up size and sign issues in base32 code | Nick Mathewson | |
Fixes bug 2331. | |||
2011-01-03 | Detect and disallow compression bombs | Nick Mathewson | |
2011-01-03 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
2011-01-03 | Avoid assertion on read_file_to_str() with size==SIZE_T_CEILING-1 | Nick Mathewson | |
Spotted by doors, fixes bug 2326. | |||
2011-01-03 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
2011-01-03 | Check size against SIZE_T_CEILING in realloc too. | Nick Mathewson | |
Fixes bug 2324. | |||
2011-01-03 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
2011-01-03 | Merge remote branch 'sebastian/bug2314' into maint-0.2.2 | Nick Mathewson | |
2011-01-03 | Never include pthread.h when building for Windows. | Nick Mathewson | |
On Windows, we never use pthreads, since it doesn't usually exist, and when it does it tends to be a little weirdly-behaved. But some mingw installations have a pthreads installed, so autoconf detects pthread.h and tells us about it. This would make us include pthread.h, which could make for trouble when the iffy pthread.h tried to include config.h. This patch changes compat.h so that we never include pthread.h on Windows. Fixes bug 2313; bugfix on 0.1.0.1-rc. | |||
2011-01-03 | Bump copyright statements to 2011 (0.2.2) | Nick Mathewson | |
2011-01-03 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
Conflicts: src/common/test.h src/or/test.c | |||
2011-01-03 | Bump copyright statements to 2011 | Nick Mathewson | |
2010-12-27 | Fix compile wanrings revealed by gcc 4.5 on mingw | Sebastian Hahn | |
2010-12-21 | Merge remote branch 'rransom/bug2190_the_hard_way' into maint-0.2.2 | Nick Mathewson | |
2010-12-21 | Merge remote branch 'public/bug2190_021' into maint-0.2.1 | Nick Mathewson | |
2010-12-15 | Merge remote branch fix_security_bug_021 into fix_security_bug_022 | Nick Mathewson | |
Conflicts: src/common/memarea.c src/or/or.h src/or/rendclient.c | |||
2010-12-15 | Make payloads into uint8_t. | Nick Mathewson | |
This will avoid some signed/unsigned assignment-related bugs. | |||
2010-12-13 | Have all of our allocation functions and a few others check for underflow | Nick Mathewson | |
It's all too easy in C to convert an unsigned value to a signed one, which will (on all modern computers) give you a huge signed value. If you have a size_t value of size greater than SSIZE_T_MAX, that is way likelier to be an underflow than it is to be an actual request for more than 2gb of memory in one go. (There's nothing in Tor that should be trying to allocate >2gb chunks.) | |||
2010-12-13 | Base SIZE_T_CEILING on SSIZE_T_MAX. | Nick Mathewson | |
2010-12-11 | Only add each log message to pending_cb_messages once. | Robert Ransom | |
2010-12-11 | Don't call flush_pending_log_callbacks while logging LD_NOCB messages. | Robert Ransom | |
Found by boboper. | |||
2010-11-29 | Add wrappers function for libc random() | Nick Mathewson | |
On windows, it's called something different. | |||
2010-11-23 | Fix compilation with mingw and OpenSSL 0.9.8m+ | mingw-san | |
2010-11-21 | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2 | Nick Mathewson | |
2010-11-20 | Do not set the hostname TLS extension server-side; only client-side | Nick Mathewson | |
This may fix bug 2204, and resolve the incompatibility with openssl 0.9.8p/1.0.0b. | |||
2010-11-19 | Better fix for 2190: defer libevent->controller messages instead of dropping | Nick Mathewson | |
2010-11-19 | Do not send Libevent log messages to a controller (0.2.1 backport) | Nick Mathewson | |
Doing so could make Libevent call Libevent from inside a Libevent logging call, which is a recipe for reentrant confusion and hard-to-debug crashes. This would especially hurt if Libevent debug-level logging is enabled AND the user has a controller watching for low-severity log messages. Fix bug 2190; fix on 0.1.0.2-rc. | |||
2010-11-19 | Do not send Libevent log messages to a controller. | Nick Mathewson | |
Doing so could make Libevent call Libevent from inside a Libevent logging call, which is a recipe for reentrant confusion and hard-to-debug crashes. This would especially hurt if Libevent debug-level logging is enabled AND the user has a controller watching for low-severity log messages. Fix bug 2190; fix on 0.1.0.2-rc. | |||
2010-10-26 | Properly refcount client_identity_key | Sebastian Hahn | |
In a2bb0bf we started using a separate client identity key. When we are in "public server mode" (that means not a bridge) we will use the same key. Reusing the key without doing the proper refcounting leads to a segfault on cleanup during shutdown. Fix that. Also introduce an assert that triggers if our refcount falls below 0. That should never happen. | |||
2010-10-04 | Maintain separate server and client TLS contexts. | Robert Ransom | |
Fixes bug #988. | |||
2010-10-04 | Refactor tor_tls_context_new: | Robert Ransom | |
* Make tor_tls_context_new internal to tortls.c, and return the new tor_tls_context_t from it. * Add a public tor_tls_context_init wrapper function to replace it. | |||
2010-10-04 | Correct a bogus comment. | Robert Ransom | |
Whether or not OpenSSL reference-counts SSL_CTX objects is irrelevant; what matters is that Tor reference-counts its wrapper objects for SSL_CTXs. | |||
2010-10-04 | Correct a couple of log messages in tortls.c | Robert Ransom | |
2010-10-04 | Fix several comments in tortls.c | Robert Ransom | |
2010-09-30 | Fix check-spaces | Sebastian Hahn | |
2010-09-27 | Merge remote branch 'public/bug1954' into maint-0.2.2 | Nick Mathewson | |