| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
| |
This removes the Makefile.am from doc/design-paper and replaces it with
a static Makefile. We don't need to call it during the normal Tor build
process, as we don't need its targets normally. Keeping it around in
case we want to rebuild the pdf or ps files later.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I propose a backward-compatible change to the Tor connection
establishment protocol to avoid the use of TLS
renegotiation.
Rather than doing a TLS renegotiation to exchange
certificates and authenticate the original handshake, this
proposal takes an approach similar to Steven Murdoch's
proposal 124, and uses Tor cells to authenticate the
parties' identities once the initial TLS handshake is
finished.
|
|
|
|
| |
rieo pointed out something isn't right here
|
| |
|
| |
|
| |
|
|\ |
|
| |
| |
| |
| | |
Updated a little by Sebastian
|
| |
| |
| |
| | |
Edited a little by Sebastian
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This should be a very faithful conversion, preserving as much of the layout
of the old manpage as possible. This wasn't possible for the nt-service
and the DataDirectory/state parts. See a later commit for some small
cleanups.
Tiago Faria helped with the asciidoc conversion, big thanks!
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
The website wasn't used by our packages, and most users will not know how
to open html.en files anyways.
|
|/ |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
We accidentally freed the internal buffer for bridge stats when we
were writing the bridge stats file or honoring a control port
request for said data. Change the interfaces for
geoip_get_bridge_stats* to prevent these problems, and remove the
offending free/add a tor_strdup.
Fixes bug 1208.
|
|\ |
|
| |
| |
| |
| |
| |
| |
| | |
This was freaking out some relay operators without good reason, as
it is nothing the relay operator can do anything about anyways.
Quieting this warning suggested by rieo.
|
| |
| |
| |
| |
| |
| |
| |
| | |
I believe that since we were allocating *cp while holding a mutex,
coverity deduced that *cp must be protected by that mutex, and later
flipped out when we didn't use it that way. If this is so, we can
solve our problems by moving the *cp = tor_strdup(buf) part outside of
the mutex-protected code.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
It's a bit confusing to have a loop where another function,
confusingly named "*_free", is responsible for advancing the loop
variable (or rather, for altering a structure so that the next time
the loop variable's initializer is evaluated it evaluates to something
different.)
Not only has this confused people: it's also confused coverity scan.
Let's fix that.
|
|/
|
|
| |
This might please coverity scan.
|
| |
|
|
|
|
| |
Does not deal with error handling in dump_microdescriptor's callers.
|
|\
| |
| |
| |
| |
| |
| | |
Resolved conflicts in:
configure.in
src/or/Makefile.am
src/tools/Makefile.am
|
| |
| |
| |
| |
| | |
These options only work when using --with-(openssl|libevent)-dir to
explicitly pick a libevent or openssl location.
|
| |
| |
| |
| |
| |
| | |
the new configure option --enable-gcc-warnings-advisory enables
all the gcc flags that --enable-gcc-warnings does with the
exception of -Werror.
|
|\| |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
We were checking for msg==NULL, but not lib or proc. This case can
only occur if we have an error whose string we somehow haven't loaded,
but it's worth coding defensively here.
Spotted by rieo on IRC.
|
| |
| |
| |
| | |
weasel makes a good point.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The OutboundBindAddress option is useful for making sure that all of
your outbond connections use a given interface. But when connecting
to 127.0.0.1 (or ::1 even) it's important to actually have the
connection come _from_ localhost, since lots of programs running on
localhost use the source address to authenticate that the connection
is really coming from the same host.
Our old code always bound to OutboundBindAddress, whether connecting
to localhost or not. This would potentially break DNS servers on
localhost, and socks proxies on localhost. This patch changes the
behavior so that we only look at OutboundBindAddress when connecting
to a non-loopback address.
|
| | |
|
| | |
|
|\|
| |
| |
| |
| |
| | |
Conflicts:
ChangeLog
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
also reorder the stable changelog entries so they're in temporal order
|
|\|
| |
| |
| |
| |
| |
| |
| |
| | |
Conflicts:
ChangeLog
configure.in
contrib/tor-mingw.nsi.in
src/win32/orconfig.h
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
this case can now legitimately happen, if you have a cached v2 status
from moria1, and you run with the new list of dirservers that's missing
the old moria1. it's nothing to worry about; the file will die off in
a month or two.
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
Fixes bug 1198. Solaris doesn't have RLIMIT_MEMLOCK for get/setrlimit,
so disable support because we don't know if all memory can be locked.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The following commit:
commit e56747f9cf29ed788baf8805bfe391925d8a19da
Author: Nick Mathewson <nickm@torproject.org>
Date: Tue Dec 15 14:32:55 2009 -0500
Refactor a bit so that it is safe to include math.h, and mostly not needed.
introduced this line:
tor_resolve_LDADD = -lm ../common/libor.a @TOR_LIB_WS32@
which caused the build to fail, because only ../common/libor.a
(via the embedded ../common/util.o via ../common/util.c)
referenced libm's `lround' and `log' symbols, so that the
linker (GNU ld) didn't bother to import those symbols before
reading ../common/libor.a, thus leaving those symbols undefined.
The solution was to swap the order, producing the line:
tor_resolve_LDADD = ../common/libor.a -lm @TOR_LIB_WS32@
Signed-off-by: Michael Witten <mfwitten@gmail.com>
|