aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | Make rotate_request_period use BEGIN/END versions of FOREACHNick Mathewson2010-05-17
| | | | | | | | | | | | | | | | | | | | This appeases some versions of MSVC, which don't like it when you have preprocessor commands inside a set of macro arguments.
* | | | Clarify 'marking connection as too old' messagesNick Mathewson2010-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Back when we changed the idea of a connection being "too old" for new circuits into the connection being "bad" for new circuits, we didn't actually change the info messages. This led to telling the user that we were labelling connections as "too old" for being worse than connections that were actually older than them. Found by Scott on or-talk.
* | | | Merge commit 'linus/master'Roger Dingledine2010-05-07
|\ \ \ \
| * | | | Don't be bashistic.Linus Nordberg2010-05-07
| | | | |
* | | | | use ssp-buffer-size=1 to avoid Werror failuresAndy Isaacson2010-05-07
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build on Ubuntu 10.04 64-bit was failing: util.c: In function ‘parse_http_time’: util.c:1370: error: not protecting function: no buffer at least 8 bytes long We don't want to lose -Werror, and we don't care too much about the added overhead of protecting even small buffers, so let's simply turn on SSP for all buffers. Thanks to Jacob Appelbaum for the pointer and SwissTorExit for the original report. Signed-off-by: Andy Isaacson <adi@hexapodia.org>
* | | | Merge commit 'ioerror/compileTimeHardening'Roger Dingledine2010-05-07
|\ \ \ \
| * | | | Add support for gcc compiler/linker hardening flags.Jacob Appelbaum2010-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds support for two new configure options: '--enable-gcc-hardening' This sets CFLAGS to include: "-D_FORTIFY_SOURCE=2 -fstack-protector-all" "-fwrapv -fPIE -Wstack-protector -Wformat -Wformat-security" "-Wpointer-sign" It sets LDFLAGS to include: "-pie" '--enable-linker-hardening' This sets LDFLAGS to include: " -z relro -z now"
* | | | | Merge branch 'maint-0.2.1'Roger Dingledine2010-05-06
|\ \ \ \ \ | |/ / / / |/| | / / | | |/ / | |/| |
| * | | move to maxmind geoip dbRoger Dingledine2010-05-06
| | | |
* | | | Merge branch 'maint-0.2.1'Roger Dingledine2010-05-05
|\| | |
| * | | release notes entry for 0.2.1.26Roger Dingledine2010-05-05
| | | |
* | | | bump to 0.2.2.13-alpha-devRoger Dingledine2010-05-05
| | | |
* | | | put the blurb in 0.2.2.13-alphaRoger Dingledine2010-05-05
| |/ / |/| |
* | | Merge branch 'hacking'Nick Mathewson2010-04-27
|\ \ \
| * | | Add new sections to the HACKING fileNick Mathewson2010-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The main changes are to explain how we use git branches, how we use changes files, and what should go into a patch. Putting these in HACKING means that we shouldn't need to constantly refer to the or-dev emails where we explain this stuff.
| * | | Convert HACKING file to asciidoc: I am tired of re-numbering the sections.Nick Mathewson2010-04-16
| | | |
* | | | bump to 0.2.2.13-alphaRoger Dingledine2010-04-24
| | | |
* | | | prepare the 0.2.2.13-alpha changelogRoger Dingledine2010-04-23
| | | |
* | | | Merge branch 'maint-0.2.1'Roger Dingledine2010-04-23
|\ \ \ \ | | |/ / | |/| |
| * | | windows packaging cleanups from phobosRoger Dingledine2010-04-23
| | | |
* | | | Merge branch 'maint-0.2.1'Roger Dingledine2010-04-23
|\| | |
| * | | close idle tls conns earlyRoger Dingledine2010-04-23
| | | |
* | | | Merge branch 'maint-0.2.1'Roger Dingledine2010-04-23
|\| | |
| * | | finally get rid of "clique mode"Roger Dingledine2010-04-23
| | | |
| * | | close idle dir-fetch circs earlyRoger Dingledine2010-04-23
| | | |
* | | | blurbs for two recent alphasRoger Dingledine2010-04-23
| | | |
* | | | finally get rid of "clique mode"Roger Dingledine2010-04-21
| | | |
* | | | stop authority reachability check on startupRoger Dingledine2010-04-21
| | | |
* | | | immediate reachability check for new relaysRoger Dingledine2010-04-21
| | | |
* | | | windows packaging cleanups from phobosRoger Dingledine2010-04-20
| | | |
* | | | more logging when tracking missing descriptorsRoger Dingledine2010-04-20
| | | |
* | | | bump to 0.2.2.12-alpha-devRoger Dingledine2010-04-20
| | | |
* | | | merge in the bug 1364 fixRoger Dingledine2010-04-20
| | | |
* | | | Demote a warning about missing client ciphersSebastian Hahn2010-04-20
| | | |
* | | | bump to 0.2.2.12-alphaRoger Dingledine2010-04-20
| | | |
* | | | prepare for 0.2.2.12-alphaRoger Dingledine2010-04-20
| | | |
* | | | fetch descriptors from the authority that told us about themRoger Dingledine2010-04-20
| | | |
* | | | fetch unknown descriptors if we see them in a voteRoger Dingledine2010-04-20
| | | |
* | | | minor cleanupsRoger Dingledine2010-04-20
| | | |
* | | | Switch geoip_get_request_history to asprintf; fix bug 1365Nick Mathewson2010-04-20
| | | |
* | | | fix "Got a certificate for ?? that we already have"Roger Dingledine2010-04-19
| | | | | | | | | | | | | | | | | | | | | | | | what's happening here is that we're fetching certs for obsolete authorities -- probably legacy signers in this case. but try to remain general in the log message.
* | | | Fix a compilation warning on compat_libevent.c on some versions of windows ↵Nick Mathewson2010-04-19
| | | | | | | | | | | | | | | | libevent
* | | | Move the declaration of bandwidth_rate_rule_to_stringNick Mathewson2010-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's natural for the definition of bandwidth_rule_t to be with the functions that actually care about its values. Unfortunately, this means declaring bandwidth_rate_rule_to_string() out of sequence. Someday we'll just rename reasons.c to strings.c, and put it at the end of or.h, and this will all be better.
* | | | Fix two compile-blockers in tor_vasprintf().Nick Mathewson2010-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1) mingw doesn't have _vscprintf(); mingw instead has a working snprintf. 2) windows compilers that _do_ have a working _vscprintf spell it so; they do not spell it _vcsprintf().
* | | | bump to 0.2.2.11-alpha-devRoger Dingledine2010-04-19
| | | |
* | | | parameterize update_consensus_router_descriptor_downloadsRoger Dingledine2010-04-19
| | | |
* | | | bump to 0.2.2.11-alphaRoger Dingledine2010-04-15
| | | |
* | | | gather together the 0.2.2.11-alpha changelogRoger Dingledine2010-04-15
| |/ / |/| |
* | | Merge commit 'origin/maint-0.2.1'Nick Mathewson2010-04-15
|\| |
| * | Fix renegotiation on OpenSSL versions that backport RFC5746.Nick Mathewson2010-04-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Our code assumed that any version of OpenSSL before 0.9.8l could not possibly require SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION. This is so... except that many vendors have backported the flag from later versions of openssl when they backported the RFC5476 renegotiation feature. The new behavior is particularly annoying to detect. Previously, leaving SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION unset meant that clients would fail to renegotiate. People noticed that one fast! Now, OpenSSL's RFC5476 support means that clients will happily talk to any servers there are, but servers won't accept renegotiation requests from unpatched clients unless SSL_OP_ALLOW_etc is set. More fun: servers send back a "no renegotiation for you!" error, which unpatched clients respond to by stalling, and generally producing no useful error message. This might not be _the_ cause of bug 1346, but it is quite likely _a_ cause for bug 1346.
generated by cgit v1.2.3 (git 2.49.0) at 2025-05-02 08:14:56 +0000