aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | Fix weird formatting of html manpageSebastian Hahn2011-07-06
| | | | | | | | | | | | | | | | | | Asciidoc was inserting <pre> tags for paragraphs that started with a '+' at the beginning of the line. Instead, we need a space in front of the plus.
* | | appease check-spacesRoger Dingledine2011-07-06
| | |
* | | Merge remote-tracking branch 'rransom-tor/bug3465-022' into maint-0.2.2Nick Mathewson2011-07-05
|\ \ \
| * | | Add BUILDTIMEOUT_SET to the result of GETINFO events/namesRobert Ransom2011-06-25
| | | |
| * | | Correct a commentRobert Ransom2011-06-24
| | | |
| * | | Fix minor comment issuesRobert Ransom2011-06-23
| | | |
* | | | Merge branch 'cov217_022_squashed' into maint-0.2.2Nick Mathewson2011-07-01
|\ \ \ \
| * | | | Use strlcpy when copying node IDs into measured_bw_line_tNick Mathewson2011-07-01
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were using strncpy before, which isn't our style for stuff like this. This isn't a bug, though: before calling strncpy, we were checking that strlen(src) was indeed == HEX_DIGEST_LEN, which is less than sizeof(dst), so there was no way we could fail to NUL-terminate. Still, strncpy(a,b,sizeof(a)) is an idiom that we ought to squash everyplace. Fixes CID #427.
* | | | Merge branch 'cid30_changelog' into maint-0.2.2Nick Mathewson2011-07-01
|\ \ \ \
| * | | | Add a changelog entry for cid30 fix.Nick Mathewson2011-07-01
| |/ / /
* | | | Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson2011-07-01
|\ \ \ \ | |/ / / |/| / / | |/ /
| * | Merge branches 'cov217_021' and 'cid_450' into maint-0.2.1Nick Mathewson2011-07-01
| |\ \
| | * | Fix insanely large stack_allocation in log_credential_statusNick Mathewson2011-07-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | I'm not one to insist on C's miserly stack limits, but allocating a 256K array on the stack is too much even for me. Bugfix on 0.2.1.7-alpha. Found by coverity. Fixes CID # 450.
| * | | Use strlcpy in create_unix_sockaddr()Nick Mathewson2011-07-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using strncpy meant that if listenaddress were ever >= sizeof(sockaddr_un.sun_path), we would fail to nul-terminate sun_path. This isn't a big deal: we never read sun_path, and the kernel is smart enough to reject the sockaddr_un if it isn't nul-terminated. Nonetheless, it's a dumb failure mode. Instead, we should reject addresses that don't fit in sockaddr_un.sun_path. Coverity found this; it's CID 428. Bugfix on 0.2.0.3-alpha.
| * | | Fix a rare memory leak in rend_cache_storeNick Mathewson2011-07-01
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When we rejected a descriptor for not being the one we wanted, we were letting the parsed descriptor go out of scope. Found by Coverity; CID # 30. Bugfix on 0.2.1.26. (No changes file yet, since this is not in any 0.2.1.x release.)
* | | Improve documentation of smartlist_split_stringRobert Ransom2011-06-22
| | |
* | | Fix minor comment issuesRobert Ransom2011-06-22
| | |
* | | Fix comment typoRobert Ransom2011-06-22
| | |
* | | explain that the ./publish should happen soon after the scpRoger Dingledine2011-06-21
| | | | | | | | | | | | otherwise you scp a tarball up but only one version of the website has it.
* | | Fix overwide lines in util.cNick Mathewson2011-06-20
| | |
* | | Tweak bug2355_revert at suggestion from RogerNick Mathewson2011-06-19
| | |
* | | Add changes file for bug2355 revertNick Mathewson2011-06-17
| | |
* | | Revert "Add an "auto" option to UseBridges"Nick Mathewson2011-06-17
| | | | | | | | | | | | This reverts commit 507c1257a4d9c629fefc2adbad8db73607749734.
* | | Revert "Update man page for new UseBridges tristate behaviour."Nick Mathewson2011-06-17
| | | | | | | | | | | | This reverts commit 40cfad1b5ae90b06eb74861a4fdc1310f8611111.
* | | Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson2011-06-17
|\| |
| * | Abandon rendezvous circuits on SIGNAL NEWNYMRobert Ransom2011-06-17
| | |
* | | Merge branch 'bug3407' into maint-0.2.2Nick Mathewson2011-06-17
|\ \ \
| * | | Make send_control_event_impl's behaviour saneRobert Ransom2011-06-17
| | | |
| * | | Fix comment typoRobert Ransom2011-06-17
| | | |
| * | | Make connection_printf_to_buf's behaviour saneRobert Ransom2011-06-17
| | | |
| * | | Correct some outdated commentsRobert Ransom2011-05-24
| | | |
* | | | log when we finish ssl handshake and move to renegotiationRoger Dingledine2011-06-17
| | | | | | | | | | | | | | | | | | | | | | | | debug-level since it will be quite common. logged at both client and server side. this step should help us track what's going on with people filtering tor connections by our ssl habits.
* | | | Merge remote-tracking branch 'public/bug3369' into maint-0.2.2Nick Mathewson2011-06-14
|\ \ \ \
| * | | | changelog entry for bug3369Nick Mathewson2011-06-13
| | | | |
| * | | | client-side DNS proxy server: reply NOTIMPL to unsupported queriesintrigeri2011-06-13
| | | | | | | | | | | | | | | | | | | | Fix for bug 3369.
* | | | | Add changes file for bug3393Nick Mathewson2011-06-14
| | | | |
* | | | | Make ControlSocketsGroupWritable work with User.Jérémy Bobbio2011-06-14
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Original message from bug3393: check_private_dir() to ensure that ControlSocketsGroupWritable is safe to use. Unfortunately, check_private_dir() only checks against the currently running user… which can be root until privileges are dropped to the user and group configured by the User config option. The attached patch fixes the issue by adding a new effective_user argument to check_private_dir() and updating the callers. It might not be the best way to fix the issue, but it did in my tests. (Code by lunar; changelog by nickm)
* | | | Fix a rare memleak during stats writingSebastian Hahn2011-06-08
| | | | | | | | | | | | | | | | | | | | If rep_hist_buffer_stats_write() was called unitinitalized, we'd leak memory.
* | | | Don't use signed 1-bit bitfieldsSebastian Hahn2011-06-08
| | | | | | | | | | | | | | | | | | | | This was harmless, we never compared it to anything but itself or 0. But Coverity complained, and it had a point.
* | | | Comment out some obviously dead code.Sebastian Hahn2011-06-08
| | | | | | | | | | | | | | | | Coverity warned about it, it's harmless to comment out.
* | | | Remove a few dead assignments during router parsingSebastian Hahn2011-06-08
| | | |
* | | | Check some more return values in unit testsSebastian Hahn2011-06-08
| | | |
* | | | remove some dead code, found by coveritySebastian Hahn2011-06-08
| | | |
* | | | Merge branch 'bug3306_nm_squashed' into maint-0.2.2Nick Mathewson2011-06-06
|\ \ \ \
| * | | | Detect insanely large circuit build state; don't give its length to rand_intNick Mathewson2011-06-06
| | | | |
| * | | | Check maximum properly in crypto_rand_int()Nick Mathewson2011-06-06
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | George Kadianakis notes that if you give crypto_rand_int() a value above INT_MAX, it can return a negative number, which is not what the documentation would imply. The simple solution is to assert that the input is in [1,INT_MAX+1]. If in the future we need a random-value function that can return values up to UINT_MAX, we can add one. Fixes bug 3306; bugfix on 0.2.2pre14.
* | | | Merge branch 'maint-0.2.1' into maint-0.2.2Roger Dingledine2011-06-05
|\ \ \ \ | |/ / / |/| | / | | |/ | |/|
| * | move to the june 1 2011 maxmind geoip dbRoger Dingledine2011-06-05
| | |
* | | Merge branch 'bug3318c' into maint-0.2.2Nick Mathewson2011-06-03
|\ \ \
| * | | Reject 128-byte keys that are not 1024-bitNick Mathewson2011-06-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When we added the check for key size, we required that the keys be 128 bytes. But RSA_size (which defers to BN_num_bytes) will return 128 for keys of length 1017..1024. This patch adds a new crypto_pk_num_bits() that returns the actual number of significant bits in the modulus, and uses that to enforce key sizes. Also, credit the original bug3318 in the changes file.