summaryrefslogtreecommitdiff
path: root/src/or
AgeCommit message (Collapse)Author
2012-03-27Refactor the API for setting up a block cipher.Nick Mathewson
It allows us more flexibility on the backend if the user needs to specify the key and IV at setup time.
2012-03-27Merge remote-tracking branch 'karsten/bug5053'Nick Mathewson
2012-03-26Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
Conflicts: src/or/control.c
2012-03-26Merge remote-tracking branch 'rransom-tor/safecookie-022-v3' into maint-0.2.2Nick Mathewson
2012-03-22Never disable debugger attachment for the unit testsSebastian Hahn
2012-03-14Stop discarding command-line arguments when TestingTorNetwork is setRoger Dingledine
Discovered by Kevin Bauer. Fixes bug 5373; bugfix on 0.2.3.9-alpha, where task 4552 added support for two layers of torrc files.
2012-03-09Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
Conflicts: src/or/circuitbuild.c
2012-03-09Never choose a bridge as an exit. Bug 5342.Nick Mathewson
2012-03-09Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-03-09Revise "sufficient exit nodes" check to work with restrictive ExitNodesNick Mathewson
If you set ExitNodes so that only 1 exit node is accepted, the previous patch would have made you unable to build circuits.
2012-03-09Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
Conflicts: src/or/routerlist.c
2012-03-08Require a threshold of exit nodes before building circuitsNick Mathewson
This mitigates an attack proposed by wanoskarnet, in which all of a client's bridges collude to restrict the exit nodes that the client knows about. Fixes bug 5343.
2012-03-08Merge remote-tracking branch 'public/bug4361'Nick Mathewson
Conflicts: src/or/command.c
2012-03-07Remove misleading function comment (bug 5324)Roger Dingledine
In the distant past, connection_handle_read() could be called when there are pending bytes in the TLS object during the main loop. The design since then has been to always read all pending bytes immediately, so read events only trigger when the socket actually has bytes to read. Resolves bug 5324.
2012-03-05Merge remote-tracking branch 'public/bug4760'Nick Mathewson
2012-02-29Merge remote-tracking branch 'sebastian/bug5231'Nick Mathewson
2012-02-29Merge branch 'maint-0.2.2'Roger Dingledine
2012-02-29new ip address for maatuskaRoger Dingledine
2012-02-29whitespace fixRoger Dingledine
2012-02-25Don't cannibalize already cannibalized circuitsSebastian Hahn
This ensures we don't build circuits that have 5 hops or more. Patch contributed by wanoskarnet, thanks!
2012-02-23When not fetching v2 dir info, don't require it for cleaning descriptorsDaniel Bryg
Bugfix on 0.2.2.26-beta, which introduced the idea of caches not cacheing v2 info. Fixes bug 4838.
2012-02-22Implement 'safe cookie authentication'Robert Ransom
2012-02-17document a cool attack that we evaluatedRoger Dingledine
2012-02-17Merge branch 'bug5105-v2-squashed'Nick Mathewson
Conflicts: src/or/transports.c
2012-02-17Heap-allocate strings returned by get_current_process_environment_variablesRobert Ransom
2012-02-17Pass process_environment_t * to tor_spawn_backgroundRobert Ransom
Now tor_spawn_background's prototype is OS-independent.
2012-02-17Rewrite managed proxy environment setup codeRobert Ransom
Now, the environment setup is entirely OS-independent, as well as less hacky and brittle.
2012-02-15Downgrade "Registered server transport" msg to notice. Bug 5136Nick Mathewson
2012-02-14Use _NSGetEnviron() instead of environ where requiredSebastian Hahn
OS X would otherwise crash with a segfault when linked statically to some libraries.
2012-02-13Reinstate TOR_PR_EXTENDED_SERVER_PORT, just a littleNick Mathewson
2012-02-12set_managed_proxy_environment() can't fail anymoreSebastian Hahn
It already couldn't fail on Windows, now it can't fail on non-Windows, either.
2012-02-12Properly set up environment for managed-mode obfsproxySebastian Hahn
2012-02-12Try to have (and maintain!) an invariant about unconfigured_proxies_nNick Mathewson
The invariant is: unconfigured_proxies_n is exactly the number of managed_proxy_t not in state PT_PROTO_COMPLETED. To maintain this, we need to stop overloading unconfigured_proxies_n to also count managed_proxy_t items that are in PT_PROTO_COMPLETED but which might need relaunching. To make it so we can detect those, we introduce another variable. This commit also adds a function to assert that we haven't broken the invariant. Fix for bug 5084; bugfix on 0.2.3.6-alpha, I think.
2012-02-12Don't smartlist_remove a managed proxy from a list we're iterating over.Nick Mathewson
In some cases, we solve this by doing a SMARTLIST_DEL_CURRENT before calling managed_proxy_destroy. But for a trickier one, we just make a copy of the list before iterating over it, so that changes to the manage proxy list don't hurt our iteration. This could be related to bug 5084.
2012-02-12Fix a check-spaces complaintSebastian Hahn
2012-02-12Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
Conflicts: src/common/Makefile.am src/or/Makefile.am
2012-02-12Unpack a smartlist_foreach and add an assert: try to hunt #5102Nick Mathewson
2012-02-12Fix #5097 on Windows, tooRobert Ransom
2012-02-12Fix bug #5097: remove bogus envvar from managed proxies' environmentRobert Ransom
2012-02-10Properly protect paths to sed, sha1sum, opensslSebastian Hahn
in Makefile.am, we used it without quoting it, causing build failure if your openssl/sed/sha1sum happened to live in a directory with a space in it (very common on windows)
2012-02-10Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-02-10Downgrade "missing a certificate" from notice to infoNick Mathewson
It was apparently getting mistaken for a problem, even though it was at notice. Fixes 5067; fix on 0.2.0.10-alpha.
2012-02-09Roger notes that address and addr are two different things.Karsten Loesing
2012-02-09Simply geoip_get_country_by_addr based on arma's comment.Karsten Loesing
2012-02-09Add braces around a two-line code block.Karsten Loesing
2012-02-09Count IPv6 connections in bridge and entry stats.Karsten Loesing
2012-02-08Fix fencepost error with HearbeatPeriod optionSebastian Hahn
We'd only log every HeartbeatPeriod + 1 seconds. Discovered by Scott Bennett, reported as bug 4942.
2012-01-31Set IPV6_V6ONLY on listener sockets bound to IPv6 addresses.Nick Mathewson
If we don't do this, [::] can be interpreted to mean all v4 and all v6 addresses. Found by dcf. Fixes bug 4760. See RFC 3493 section 5.3 for more info.
2012-01-31Fix straggling MS_WINDOWS issues; add a changes fileNick Mathewson
There was one MS_WINDOWS that remained because it wasn't on a macro line; a few remaining uses (and the definition!) in configure.in; and a now-nonsensical stanza of eventdns_tor.h that previously defined 'WIN32' if it didn't exist.
2012-01-31Use the standard _WIN32, not the Torism MS_WINDOWS or deprecated WIN32Nick Mathewson
This commit is completely mechanical; I used this perl script to make it: #!/usr/bin/perl -w -i.bak -p if (/^\s*\#/) { s/MS_WINDOWS/_WIN32/g; s/\bWIN32\b/_WIN32/g; }