| Commit message (Expand) | Author | Age |
... | |
| * | | I think it is correct to decorate these addresses. | Nick Mathewson | 2012-11-14 |
| * | | Better checking of exit policies for connections by hostname | Nick Mathewson | 2012-11-14 |
| * | | Only send begin cell flags when we have some to send | Nick Mathewson | 2012-11-14 |
| * | | Never support IPv6 traffic on a SOCKS4 connection. | Nick Mathewson | 2012-11-14 |
| * | | Add a function to set a tor_addr_t to a null address | Nick Mathewson | 2012-11-14 |
| * | | Get the client side of receiving an IPv6 address to work•••This makes it so we can handle getting an IPv6 in the 3 different
formats we specified it for in RESOLVED cells,
END_STREAM_REASON_EXITPOLICY cells, and CONNECTED cells.
We don't cache IPv6 addresses yet, since proposal 205 isn't
implemented.
There's a refactored function for parsing connected cells; it has unit
tests.
| Nick Mathewson | 2012-11-14 |
| * | | Reject IPv4 or IPv6 addresses from the user depending on SOCKS settings | Nick Mathewson | 2012-11-14 |
| * | | Rename ipv{4,6}_only to bind_ipv{4,6}_only•••This is to avoid confusion with the ipv{4,6}_traffic flags.
| Nick Mathewson | 2012-11-14 |
| * | | Add {No,}IPv{4,6}Traffic options to SOCKSPort•••These options are for telling the SOCKSPort that it should allow or
not allow connections to IPv4/IPv6 addresses.
These aren't implemented yet; this is just the code to read the
options and get them into the entrey_connection_t.
| Nick Mathewson | 2012-11-14 |
| * | | Make DNS callback pass IPv6 answers to dns_answer_found•••Also, count ipv6 timeouts vs others. If we have too many ipv6
requests time out, then we could be degrading performance because of a
broken DNS server that ignores AAAA requests. Other cases in which
we never learn an AAAA address aren't so bad, since they don't slow
A (ipv4) answers down very much.
| Nick Mathewson | 2012-11-14 |
| * | | Make dns wildcarding checks work for ipv6 | Nick Mathewson | 2012-11-14 |
| * | | Add an IPv6Exit configuration option•••Don't advertise an IPv6 exit policy, or accept IPv6 exit requests,
if IPv6Exit is not true.
| Nick Mathewson | 2012-11-14 |
| * | | Simplest version of server-side IPv6 support (no dns)•••This is a relatively simple set of changes: we mostly need to
remove a few "but not for IPv6" changes. We also needed to tweak
the handling of DNS code to generate RESOLVED cells that could get
an IPv6 answer in return.
| Nick Mathewson | 2012-11-14 |
| * | | Record, send, and receive flags in BEGIN cells | Nick Mathewson | 2012-11-14 |
| * | | Add IPv6 support to compare_to_addr_to_node_policy | Nick Mathewson | 2012-11-14 |
| * | | Authorities put p6 lines into microdescriptors. | Nick Mathewson | 2012-11-14 |
| * | | Parse IPv6 policy summaries from router descriptors and microdescs | Nick Mathewson | 2012-11-14 |
| * | | Better policy support for IPv6•••Now, "accept *:80" means "accept all addresses on port 80", and not
just IPv4. For just v4, say "accept *4:80"; for just v6 say "accept
*6:80".
We can parse these policies from torrc just fine, and we should be
successfully keeping them out of descriptors for now.
We also now include appropriate IPv6 addresses in "reject private:*"
| Nick Mathewson | 2012-11-14 |
| * | | Add a new family-specific syntax for tor_addr_parse_mask_ports•••By default, "*" means "All IPv4 addresses" with
tor_addr_parse_mask_ports, so I won't break anything. But if the new
EXTENDED_STAR flag is provided, then * means "any address", *4 means
"any IPv4 address" (that is, 0.0.0.0/0), and "*6" means "any IPv6
address" (that is, [::]/0).
This is going to let us have a syntax for specifying exit policies in
torrc that won't drive people mad.
Also, add a bunch of unit tests for tor_addr_parse_mask_ports to test
these new features, and to increase coverage.
| Nick Mathewson | 2012-11-14 |
| * | | Refactor begin cell parsing into its own function, with tests.•••Add 'flags' argument to begin cells, per proposal 208.
| Nick Mathewson | 2012-11-14 |
| * | | Refactor client_dns_set_{reverse_,}addressmap() to take a circ•••We'd like these functions to be circuit-relative so that we can
implement a per-circuit DNS cache and per-circuit DNS cache rules for
proposal 205 or its successors. I'm doing this now, as a part of the
IPv6 exits code, since there are about to be a few more instances
of code using this.
| Nick Mathewson | 2012-11-14 |
| * | | Move address map into its own file. | Nick Mathewson | 2012-11-14 |
|/ / |
|
* | | Merge branch 'bug7267' of ssh://git-rw.torproject.org/user/andrea/tor | Andrea Shepard | 2012-11-13 |
|\ \ |
|
| * | | Add comment explaining different channel close functions | Andrea Shepard | 2012-11-13 |
| * | | Add changes file for bug 7267 | Andrea Shepard | 2012-11-13 |
| * | | Call channel_mark_for_close() properly in hibernate_go_dormant() | Andrea Shepard | 2012-11-13 |
* | | | Merge remote-tracking branch 'public/bug7059' | Nick Mathewson | 2012-11-13 |
|\ \ \ |
|
| * | | | Allow an optional $ in GETINFO ns/id/<identity>•••That's not where I'd want to put a $, but apparently the other
foo/id/<identity> things allow it, as does an arguably valid
interpretation of control-spec.txt. So let's be consistent.
Fix for a piece of bug 7059.
| Nick Mathewson | 2012-11-04 |
* | | | | Actually distribute the geoip6 file.•••Fixes a bug (with no ticket) on 0.2.4.6-alpha.
| Nick Mathewson | 2012-11-13 |
* | | | | bump to 0.2.4.6-alpha-dev | Roger Dingledine | 2012-11-13 |
| |/ /
|/| | |
|
* | | | bump to 0.2.4.6-alpha | Roger Dingledine | 2012-11-13 |
* | | | fold in changes files | Roger Dingledine | 2012-11-12 |
* | | | Merge branch 'maint-0.2.3' | Roger Dingledine | 2012-11-12 |
|\ \ \ |
|
| * | | | use a more logical operator•••Fix a harmless bug when opting against publishing a relay descriptor
because DisableNetwork is set.
Fixes bug 7464; bugfix on 0.2.3.9-alpha.
| Roger Dingledine | 2012-11-12 |
* | | | | Possible fix for bug 7212•••This is the simplest possible workaround: make it safe to call
circuit_cell_queue_clear() on a non-attached circuit, and make it
safe-but-a-LD_BUG-warning to call update_circuit_on_cmux() on a
non-attached circuit.
LocalWords: unstage src Untracked
| Nick Mathewson | 2012-11-12 |
* | | | | Merge branch 'check_for_orconn_on_close_squashed' of ssh://git-rw.torproject.... | Andrea Shepard | 2012-11-10 |
|\ \ \ \ |
|
| * | | | | Add changes file for connection_mark_for_close()/connection_mark_and_flush() ... | Andrea Shepard | 2012-11-10 |
| * | | | | Make everything in connection.c that uses connection_or_notify_error() also u... | Andrea Shepard | 2012-11-10 |
| * | | | | Check for orconns in connection_mark_for_close and connection_mark_and_flush,... | Andrea Shepard | 2012-11-10 |
* | | | | | Fix a memory leak in handling errors on CERTS cells. bug 7422 | Nick Mathewson | 2012-11-08 |
* | | | | | Fix test.c compilation on mingw32.•••Looks like windows doesn't have an s6_addr32 in its in6_addr.
Bug not in any released version of Tor; bugfix on abb886014e1ee.
| Nick Mathewson | 2012-11-08 |
* | | | | | Merge remote-tracking branch 'origin/maint-0.2.3' | Nick Mathewson | 2012-11-08 |
|\ \ \ \ \
| | |/ / /
| |/| | | |
|
| * | | | | Turn a memwipe in tor_process_handle_destroy() back to memset•••It broke linking on tor-resolve.c, and it's not actually sanitizing
anything sensitive. Fix for bug 7420; bug not on ony released Tor.
| Nick Mathewson | 2012-11-08 |
* | | | | | Turn some memset()s introduced in tor 0.2.4 into memwipe()s | Nick Mathewson | 2012-11-08 |
* | | | | | Merge remote-tracking branch 'origin/maint-0.2.3'•••Conflicts:
src/common/crypto.c
src/or/rendservice.c
| Nick Mathewson | 2012-11-08 |
|\| | | |
| |/ / /
|/| | | |
|
| * | | | Merge branch 'bug7352_023_rebased' into maint-0.2.3 | Nick Mathewson | 2012-11-08 |
| |\ \ \ |
|
| | * | | | Add and use and unlikely-to-be-eliminated memwipe()•••Apparently some compilers like to eliminate memset() operations on
data that's about to go out-of-scope. I've gone with the safest
possible replacement, which might be a bit slow. I don't think this
is critical path in any way that will affect performance, but if it
is, we can work on that in 0.2.4.
Fixes bug 7352.
| Nick Mathewson | 2012-11-08 |
| |/ / / |
|
* | | | | Merge branch 'bug7350' of ssh://git-rw.torproject.org/user/andrea/tor | Andrea Shepard | 2012-11-07 |
|\ \ \ \ |
|
| * | | | | Add changes file for bug7350 | Andrea Shepard | 2012-11-07 |
| * | | | | Don't call channel_send_destroy() when closing a circuit on a closing channel | Andrea Shepard | 2012-11-06 |