aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | | | Fix bug 1042.Karsten Loesing2009-10-26
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If your relay can't keep up with the number of incoming create cells, it would log one warning per failure into your logs. Limit warnings to 1 per minute.
* | | | | | Merge commit 'origin/maint-0.2.1'Nick Mathewson2009-10-26
|\| | | | |
| * | | | | Fix an apparently bogus check; fortunately, it seems to be untriggered.Nick Mathewson2009-10-26
| | | | | |
* | | | | | Fix an accidentally removed free in 385853a282138a61, and repair a check.Nick Mathewson2009-10-26
| | | | | |
* | | | | | Merge commit 'karsten/fix-1066-3'Roger Dingledine2009-10-26
|\ \ \ \ \ \
| * | | | | | Fix bug 1066.Karsten Loesing2009-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If all authorities restart at once right before a consensus vote, nobody will vote about "Running", and clients will get a consensus with no usable relays. Instead, authorities refuse to build a consensus if this happens.
* | | | | | | Note coverity fixes in changelog.Nick Mathewson2009-10-26
| | | | | | |
* | | | | | | Fix/annotate deadcode for CID 402,403Nick Mathewson2009-10-26
| | | | | | |
* | | | | | | Fix the very noisy unit test memory leak of CID 420-421.Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On any failing case in test_util_config_line, we would leak a couple of strings.
* | | | | | | Fix dead code found by Coverity (CID 419).Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was left over from an early draft of the microdescriptor code; it began to populate the signatures array of a networkstatus vote, even though there's no actual need to do that for a vote.
* | | | | | | Fix a very stupid coverity complaint (CID 416).Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In its zeal to keep me from saying memset(x, '0', sizeof(x)), Coverity disallows memset(x, 48, sizeof(x)). Fine. I'll choose a different magic number, see if I care!
* | | | | | | Remove checks for array existence. (CID 410..415)Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In C, the code "char x[10]; if (x) {...}" always takes the true branch of the if statement. Coverity notices this now. In some cases, we were testing arrays to make sure that an operation we wanted to do would suceed. Those cases are now always-true. In some cases, we were testing arrays to see if something was _set_. Those caes are now tests for strlen(s), or tests for !tor_mem_is_zero(d,len).
* | | | | | | Fix CID 409: check return value of base64_encode in testsNick Mathewson2009-10-26
| | | | | | |
* | | | | | | Clarification to suppress Coverity CID 405.Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Every or conn has an outbuf, but coverity has no way of knowing that. Add an assert to ease its conscience.
* | | | | | | Merge commit 'origin/maint-0.2.1'Nick Mathewson2009-10-26
|\ \ \ \ \ \ \ | | |/ / / / / | |/| | | | |
| * | | | | | Add changelog to describe coverity fixes for 0.2.1.21Nick Mathewson2009-10-26
| | | | | | |
| * | | | | | Fix two memory leaks found by Coverity (CIDs 417-418)Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The first happens on an error case when a controller wants an impossible directory object. The second happens when we can't write our fingerprint file.
| * | | | | | Add missing break statements for Coverity CIDs #406,407.Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The code for these was super-wrong, but will only break things when we reset an option on a platform where sizeof(time_t) is different from sizeof(int).
* | | | | | | Merge commit 'origin/maint-0.2.1'Nick Mathewson2009-10-26
|\| | | | | | | |/ / / / / |/| | | | | | | | | | | | | | | | | Conflicts: ChangeLog
| * | | | | Only send the if_modified_since header for a v3 consensus.Nick Mathewson2009-10-26
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | Spotted by xmux; bugfix on 0.2.0.10-alpha. (Bug introduced by 20b10859)
* | | | | add a changelog entry to karsten's fix for bug 1114Roger Dingledine2009-10-26
| | | | |
* | | | | Reduce log level for someone else sending us weak DH keys.Karsten Loesing2009-10-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See task 1114. The most plausible explanation for someone sending us weak DH keys is that they experiment with their Tor code or implement a new Tor client. Usually, we don't care about such events, especially not on warn level. If we really care about someone not following the Tor protocol, we can set ProtocolWarnings to 1.
* | | | | clean up the XXX comments around bug 1038Roger Dingledine2009-10-26
| | | | |
* | | | | Merge commit 'debian-tor-0.2.2.4-alpha-1'Roger Dingledine2009-10-25
|\ \ \ \ \ | | |/ / / | |/| | |
| * | | | Merge branch 'debian-merge' into debianPeter Palfrader2009-10-11
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * debian-merge: (52 commits) Ship debian source with src/test/test.h New testsuite location New upstream version Fix testsuite call. bump to 0.2.2.4-alpha Don't set unreachable from dirvote unless we've been running a while. correct the spec for the stream_bw event. fix a bug where we were decrementing the wrong bucket remove some dead code. some of it was tickling coverity. add blurbs for recent alpha releases Fix a memleak when throwing away some build times amend changelog for recent commits, plus clean up Tweak an assert that shouldn't fire either way. Tweak values for when to discard all of our history. Remove another overzealous assert. try to stem the 'sea of fail' fix the wiki link in doc pages. remove obsolete FAQ. Ignore one-hop circuits for circuit timeout calc Move Tonga to an alternate IP address update spec to reflect change in Fast definition ...
| | * | | | Ship debian source with src/test/test.hPeter Palfrader2009-10-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream failed to ship src/test/test.h. Ship it in debian/ and manually copy it in place during configure and clean up in clean. Let's not use the patch system as this will most likely be rectified by next release.
| | * | | | New testsuite locationPeter Palfrader2009-10-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The testsuite moved from src/or/test to src/test/test, but let's call it using "make check" now.
| | * | | | New upstream versionPeter Palfrader2009-10-11
| | | | | |
| | * | | | Merge commit 'tor-0.2.2.4-alpha' into debian-mergePeter Palfrader2009-10-11
| |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * commit 'tor-0.2.2.4-alpha': (49 commits) Fix testsuite call. bump to 0.2.2.4-alpha Don't set unreachable from dirvote unless we've been running a while. correct the spec for the stream_bw event. fix a bug where we were decrementing the wrong bucket remove some dead code. some of it was tickling coverity. add blurbs for recent alpha releases Fix a memleak when throwing away some build times amend changelog for recent commits, plus clean up Tweak an assert that shouldn't fire either way. Tweak values for when to discard all of our history. Remove another overzealous assert. try to stem the 'sea of fail' fix the wiki link in doc pages. remove obsolete FAQ. Ignore one-hop circuits for circuit timeout calc Move Tonga to an alternate IP address update spec to reflect change in Fast definition Move moria1 to a nearby IP address Dir auths reject relays running < Tor 0.1.2.14 Fix 1108: Handle corrupt or large build times state. ...
* | | | | | Fix two bugs found by Coverity scan.Nick Mathewson2009-10-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | One was a simple buffer overrun; the other was a high-speed pointer collision. Both were introduced by my microdescs branch.
* | | | | | Merge branch 'microdesc'Nick Mathewson2009-10-19
|\ \ \ \ \ \
| * | | | | | Changelog for microdescriptor branch.Nick Mathewson2009-10-19
| | | | | | |
| * | | | | | Fix compile with warnings problems on Snow LeopardSebastian Hahn2009-10-19
| | | | | | |
| * | | | | | Add functions to serve microdescs and flavored consensuses.Nick Mathewson2009-10-18
| | | | | | |
| * | | | | | Revise consensus-flavors proposal to better URLs.Nick Mathewson2009-10-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old flavored consensus URL format made it harder to decode URLs based on their prefixes, and didn't take into account our "only give it to me if it's signed by enough authorities" stuff.
| * | | | | | Document the microdescriptor code better.Nick Mathewson2009-10-18
| | | | | | |
| * | | | | | Fix various bugs in microdescriptor caching.Nick Mathewson2009-10-18
| | | | | | |
| * | | | | | Make start_writing_to_stdio_file() respect O_BINARY.Nick Mathewson2009-10-15
| | | | | | |
| * | | | | | Actually remember all the consensus types when we are done generating them.Nick Mathewson2009-10-15
| | | | | | |
| * | | | | | Parse detached signatures and microdesc networkstatuses correctly.Nick Mathewson2009-10-15
| | | | | | |
| * | | | | | Revise proposal 162: SHA256(x), not SHA256(SHA256(x))Nick Mathewson2009-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The point of doing SHA256 twice is, generally, is to prevent message extension attacks where an attacker who knows H(A) can calculate H(A|B). But for attaching a signature to a document, the attacker already _knows_ A, so trying to keep them from calculating H(A|B) is pointless.
| * | | | | | Implement signatures for microdesc consensuses right.Nick Mathewson2009-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This means we need to handle the existence of multiple flavors of signature in a detached signatures document, generate them correctly, and so on.
| * | | | | | Generate all the flavors of consensuses when building consensuses.Nick Mathewson2009-10-15
| | | | | | |
| * | | | | | Parse detached signature documents with multiple flavors and algorithms.Nick Mathewson2009-10-15
| | | | | | |
| * | | | | | Refactor consensus signature storage for multiple digests and flavors.Nick Mathewson2009-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch introduces a new type called document_signature_t to represent the signature of a consensus document. Now, each consensus document can have up to one document signature per voter per digest algorithm. Also, each detached-signatures document can have up to one signature per <voter, algorithm, flavor>.
| * | | | | | Code to generate, store, and parse microdescriptors and consensuses.Nick Mathewson2009-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The consensus documents are not signed properly, not served, and not exchanged yet.
| * | | | | | Add a function to get the most frequent member of a list.Nick Mathewson2009-10-15
| | | | | | |
| * | | | | | Add ability to parse one or more m line from a vote.Nick Mathewson2009-10-15
| | | | | | |
| * | | | | | Functions to encode microdescriptors and their lines.Nick Mathewson2009-10-15
| | | | | | |
| * | | | | | Revise 162's idea of how detached signatures work with flavorsNick Mathewson2009-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The original proposal was vague and would have made older Tors reject detached-signature documents as soon as they saw one with flavors.