diff options
| author | Nick Mathewson <nickm@torproject.org> | 2014-05-22 17:39:36 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2014-05-22 17:39:36 -0400 |
| commit | e425fc78045f99725d256956acc7360ed71bfaa5 (patch) | |
| tree | 99ae8b3c82aa3f5641f264cd7a4b84f90152c827 /changes | |
| parent | 1a73e178011d24ad2ef252dab7256d7c4fa94a64 (diff) | |
| download | tor-e425fc78045f99725d256956acc7360ed71bfaa5.tar tor-e425fc78045f99725d256956acc7360ed71bfaa5.tar.gz | |
sandbox: revamp sandbox_getaddrinfo cacheing
The old cache had problems:
* It needed to be manually preloaded. (It didn't remember any
address you didn't tell it to remember)
* It was AF_INET only.
* It looked at its cache even if the sandbox wasn't turned on.
* It couldn't remember errors.
* It had some memory management problems. (You can't use memcpy
to copy an addrinfo safely; it has pointers in.)
This patch fixes those issues, and moves to a hash table.
Fixes bug 11970; bugfix on 0.2.5.1-alpha.
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug11970 | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/bug11970 b/changes/bug11970 new file mode 100644 index 000000000..896f0cfaf --- /dev/null +++ b/changes/bug11970 @@ -0,0 +1,7 @@ + o Minor bugfixes (linux seccomp sandbox): + - Refactor the getaddrinfo workaround that the seccomp sandbox + uses to avoid calling getaddrinfo() after installing the sandbox + filters. Previously, it preloaded a cache with the IPv4 address + for our hostname, and nothing else. Now, it loads the cache with + every address that it used to initialize the Tor process. Fixes + bug 11970; bugfix on 0.2.5.1-alpha. |