summaryrefslogtreecommitdiff
path: root/src/common
AgeCommit message (Collapse)Author
2016-01-15Whitespace cleanupNick Mathewson
2016-01-13Revert my addition of callback cleaner and instead use existing ↵Ola Bini
functionality for temporary log files
2016-01-13Remove a small memory leak in log callback setupOla Bini
2016-01-13Add tests for options_actOla Bini
2016-01-11Try a little harder to only use SecureZeroMemory when it's presentNick Mathewson
We could be using AC_CHECK_FUNC_DECL too, but it shouldn't be needed.
2016-01-11Merge remote-tracking branch 'rl1987/feature17950'Nick Mathewson
2016-01-09Re-add the removed address family check.rl1987
2016-01-08Merge commit '110765f5564a588c5f019d32b5e6f66cc7806c41'Nick Mathewson
2016-01-08Merge remote-tracking branch 'public/feature16794_more'Nick Mathewson
2016-01-08Simplify micro-revision dependency rulescypherpunks
The Automake variable OBJEXT is automatically adjusted to the correct object file extension for the target platform.
2016-01-07On win32, use SecureZeroMemory() to securely wipe buffers.rl1987
{Also tweak the comments. -nickm)
2016-01-07Use memset_s or explicit_bzero when available.Nick Mathewson
2016-01-07Merge remote-tracking branch 'teor/comments-20151213'Nick Mathewson
2016-01-07Compatibility defines should be used for LibreSSL.dana koch
LibreSSL doesn't use OpenSSL_version (it uses the older SSLeay_version API), but it reports a major version number as 2 in OPENSSL_VERSION_NUMBER. Instead of fudging the version check, for now, let's just check if we're using LibreSSL by checking the version number macro exists, and use compatibility defines unconditionally when we detect LibreSSL.
2016-01-07Merge remote-tracking branch 'public/17826_redux'Nick Mathewson
2016-01-06Use get_interface6_via_udp_socket_hack() properly in _list().rl1987
When _list() is called with AF_UNSPEC family and fails to enumerate network interfaces using platform specific API, have it call _hack() twice to find out IPv4 and/or IPv6 address of a machine Tor instance is running on. This is correct way to handle this case because _hack() can only be called with AF_INET and AF_INET6 and does not support any other address family.
2016-01-06Tweak ioctl case.rl1987
2016-01-03Add family argument to get_interface_addresses_raw (and subfunctions).rl1987
2016-01-03Fix a typo in the comment for tor_addr_port_splitteor (Tim Wilson-Brown)
2015-12-29Merge branch 'feature17796_squashed'Nick Mathewson
2015-12-29Remove the (now-unused) digest_algorithm_bitfield_tNick Mathewson
2015-12-29When allocating a crypto_digest_t, allocate no more bytes than neededNick Mathewson
Previously we would allocate as many bytes as we'd need for a keccak--even when we were only calculating SHA1. Closes ticket 17796.
2015-12-29Use timingsafe_memcmp() where available.Nick Mathewson
See ticket 17944; patch from "logan".
2015-12-26Mark all object files built based on micro-revision.i as depending on itNick Mathewson
Fixes make -j for some users; fixes bug 17826. Bugfix on 0.2.5.1, when we started building testing versions of all the object files.
2015-12-23Disable the dynlock functions we were giving openssl.Nick Mathewson
OpenSSL doesn't use them, and fwict they were never called. If some version of openssl *does* start using them, we should test them before we turn them back on. See ticket 17926
2015-12-23Unit tests for crypto_force_rand_ssleay().Nick Mathewson
Part of 16794.
2015-12-23Always test both ed25519 backends.Nick Mathewson
Part of #16794
2015-12-22Add an unreachable line to make the compiler happyNick Mathewson
2015-12-20Appease "make check-spaces"Nick Mathewson
2015-12-20Merge remote-tracking branch 'yawning/feature17783_take2'Nick Mathewson
2015-12-19Add `crypto_xof_t` and assorted routines, backed by SHAKE256.Yawning Angel
This is an eXtendable-Output Function with the following claimed security strengths against *all* adversaries: Collision: min(d/2, 256) Preimage: >= min(d, 256) 2nd Preimage: min(d, 256) where d is the amount of output used, in bits.
2015-12-19Add the SHA-3 hash functions to common/crypto.h.Yawning Angel
* DIGEST_SHA3_[256,512] added as supported algorithms, which do exactly what is said on the tin. * test/bench now benchmarks all of the supported digest algorithms, so it's possible to see just how slow SHA-3 is, though the message sizes could probably use tweaking since this is very dependent on the message size vs the SHA-3 rate.
2015-12-18mark a variable unused to fix a warning.Nick Mathewson
2015-12-18Remove an extra space in backtrace version stringcypherpunks
2015-12-18Move some more code inside a tortls.c ifdef to fix deadcode warning.Nick Mathewson
2015-12-18Fix a coverity NULL-pointer deref warning in the tortls tests.Nick Mathewson
Also, make our cert validation code more NULL-resistant. This is CID 1327891.
2015-12-18Fix some dead code in tortls.cNick Mathewson
If SSL_CIPHER_find exists, then we won't use either of the two kludges that would replace it. Found by Coverity; fixes CID 1340256.
2015-12-17Improve warning messagecypherpunks
The user parameter is not checked so we do not know the user has been specified.
2015-12-16Merge branch 'maint-0.2.7'Nick Mathewson
2015-12-16Don't call pthread_condattr_setclock() unless it existsNick Mathewson
Fixes bug 17819; bugfix on 0.2.6.3-alpha (specifically, d684dbb0).
2015-12-16Merge branch 'maint-0.2.7'Nick Mathewson
2015-12-16... and fix another backtrace_symbols_fd call in sandbox.cNick Mathewson
2015-12-16... and fix the linux backtrace_symbols{,_fd} callsNick Mathewson
2015-12-16Merge remote-tracking branch 'teor/feature17863'Nick Mathewson
2015-12-16... and fix the linux backtrace_symbols{,_fd} callsNick Mathewson
2015-12-16Limit IPv6 mask bits to 128teor (Tim Wilson-Brown)
2015-12-15Merge branch 'feature8195_small_squashed'Nick Mathewson
2015-12-15Update KeepCapabilities based on comments from asnNick Mathewson
* The option is now KeepBindCapabilities * We now warn if the user specifically asked for KeepBindCapabilities and we can't deliver. * The unit tests are willing to start. * Fewer unused-variable warnings. * More documentation, fewer misspellings.
2015-12-15Add ability to keep the CAP_NET_BIND_SERVICE capability on LinuxNick Mathewson
This feature allows us to bind low ports when starting as root and switching UIDs. Based on code by David Goulet. Implement feature 8195
2015-12-15Merge remote-tracking branch 'teor/feature4483-v10-squashed'Nick Mathewson
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion