aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * Merge branch 'debian-merge' into debian-0.2.1Peter Palfrader2009-11-13
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * debian-merge: (37 commits) New upstream version bump to 0.2.1.20 Move moria1 and Tonga to alternate IP addresses. read the "circwindow" parameter from the consensus Code to parse and access network parameters. Revert "Teach connection_ap_can_use_exit about Exclude*Nodes" Work around a memory leak in openssl 0.9.8g (and maybe others) Teach connection_ap_can_use_exit about Exclude*Nodes make some bug 1090 warnings go away Fix a memory leak when parsing a ns Fix obscure 64-bit big-endian hidserv bug turns out the packaging changes aren't in 0.2.1.20 update changelog with bundle details Use an _actual_ fix for the byte-reverse warning. Use a simpler fix for the byte-reversing warning Fix compile warnings on Snow Leopard Add getinfo accepted-server-descriptor. Clean spec. Reduce log level for bug case that we now know really exists. Only send reachability status events on overall success/failure update the README instructions and OS X makefiles ...
| | * New upstream versionPeter Palfrader2009-11-13
| | |
| | * Merge commit 'tor-0.2.1.20' into debian-mergePeter Palfrader2009-11-13
| |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * commit 'tor-0.2.1.20': (36 commits) bump to 0.2.1.20 Move moria1 and Tonga to alternate IP addresses. read the "circwindow" parameter from the consensus Code to parse and access network parameters. Revert "Teach connection_ap_can_use_exit about Exclude*Nodes" Work around a memory leak in openssl 0.9.8g (and maybe others) Teach connection_ap_can_use_exit about Exclude*Nodes make some bug 1090 warnings go away Fix a memory leak when parsing a ns Fix obscure 64-bit big-endian hidserv bug turns out the packaging changes aren't in 0.2.1.20 update changelog with bundle details Use an _actual_ fix for the byte-reverse warning. Use a simpler fix for the byte-reversing warning Fix compile warnings on Snow Leopard Add getinfo accepted-server-descriptor. Clean spec. Reduce log level for bug case that we now know really exists. Only send reachability status events on overall success/failure update the README instructions and OS X makefiles Avoid segfault when accessing hidden service. ...
* | | Make Tor work with OpenSSL 0.9.8lNick Mathewson2009-11-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To fix a major security problem related to incorrect use of SSL/TLS renegotiation, OpenSSL has turned off renegotiation by default. We are not affected by this security problem, however, since we do renegotiation right. (Specifically, we never treat a renegotiated credential as authenticating previous communication.) Nevertheless, OpenSSL's new behavior requires us to explicitly turn renegotiation back on in order to get our protocol working again. Amusingly, this is not so simple as "set the flag when you create the SSL object" , since calling connect or accept seems to clear the flags. For belt-and-suspenders purposes, we clear the flag once the Tor handshake is done. There's no way to exploit a second handshake either, but we might as well not allow it.
* | | Fix an apparently bogus check; fortunately, it seems to be untriggered.Nick Mathewson2009-10-26
| | |
* | | Add changelog to describe coverity fixes for 0.2.1.21Nick Mathewson2009-10-26
| | |
* | | Fix two memory leaks found by Coverity (CIDs 417-418)Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | The first happens on an error case when a controller wants an impossible directory object. The second happens when we can't write our fingerprint file.
* | | Add missing break statements for Coverity CIDs #406,407.Nick Mathewson2009-10-26
| | | | | | | | | | | | | | | | | | The code for these was super-wrong, but will only break things when we reset an option on a platform where sizeof(time_t) is different from sizeof(int).
* | | Only send the if_modified_since header for a v3 consensus.Nick Mathewson2009-10-26
| |/ |/| | | | | | | Spotted by xmux; bugfix on 0.2.0.10-alpha. (Bug introduced by 20b10859)
* | bump to 0.2.1.20Roger Dingledine2009-10-15
| |
* | Move moria1 and Tonga to alternate IP addresses.Roger Dingledine2009-10-15
| |
* | Merge commit 'phobos/polipo-updates-maint-0.2.1' into maint-0.2.1Nick Mathewson2009-10-14
|\ \
| * | update the README instructions and OS X makefilesphobos2009-08-30
| | |
* | | read the "circwindow" parameter from the consensusRoger Dingledine2009-10-14
| | | | | | | | | | | | | | | backport of c43859c5c12361fad505 backport of 0d13e0ed145f4c1b5bd1
* | | Code to parse and access network parameters.Nick Mathewson2009-10-14
| | | | | | | | | | | | | | | Partial backport of 381766ce4b1145460. Partial backport of 56c6d78520a98fb64.
* | | Revert "Teach connection_ap_can_use_exit about Exclude*Nodes"Roger Dingledine2009-09-20
| | | | | | | | | | | | | | | | | | | | | This reverts commit dc3229313b6d2aaff437c6fc7fa55ead4409e93d. We're going to do this more thoroughly in 0.2.2.x, and not in maint-0.2.1.
* | | Work around a memory leak in openssl 0.9.8g (and maybe others)Nick Mathewson2009-09-17
| | |
* | | Merge commit 'karsten/fix-1073' into maint-0.2.1Nick Mathewson2009-09-16
|\ \ \
| * | | Reduce log level for bug case that we now know really exists.Karsten Loesing2009-09-01
| | | |
| * | | Avoid segfault when accessing hidden service.Karsten Loesing2009-08-29
| |/ /
* | | Teach connection_ap_can_use_exit about Exclude*NodesSebastian Hahn2009-09-16
| | | | | | | | | | | | | | | | | | To further attempt to fix bug 1090, make sure connection_ap_can_use_exit always returns 0 when the chosen exit router is excluded. This should fix bug1090.
* | | Merge commit 'sebastian/memleak' into maint-0.2.1Nick Mathewson2009-09-15
|\ \ \
| * | | Fix a memory leak when parsing a nsSebastian Hahn2009-09-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adding the same vote to a networkstatus consensus leads to a memory leak on the client side. Fix that by only using the first vote from any given voter, and ignoring the others. Problem found by Rotor, who also helped writing the patch. Thanks!
* | | | make some bug 1090 warnings go awaySebastian Hahn2009-09-16
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | When we excluded some Exits, we were sometimes warning the user that we were going to use the node regardless. Many of those warnings were in fact bogus, because the relay in question was not used to connect to the outside world. Based on patch by Rotor, thanks!
* | | Fix obscure 64-bit big-endian hidserv bugRoger Dingledine2009-09-02
| | | | | | | | | | | | | | | | | | | | | Fix an obscure bug where hidden services on 64-bit big-endian systems might mis-read the timestamp in v3 introduce cells, and refuse to connect back to the client. Discovered by "rotor". Bugfix on 0.2.1.6-alpha.
* | | turns out the packaging changes aren't in 0.2.1.20Roger Dingledine2009-09-01
| | |
* | | update changelog with bundle detailsAndrew Lewman2009-09-01
| | |
* | | Use an _actual_ fix for the byte-reverse warning.Nick Mathewson2009-09-01
| | | | | | | | | | | | | | | | | | (Given that we're pretty much assuming that int is 32 bits, and given that hex values are always unsigned, taking out the "ul" from 0xff000000 should be fine.)
* | | Use a simpler fix for the byte-reversing warningNick Mathewson2009-09-01
| | |
* | | Fix compile warnings on Snow LeopardSebastian Hahn2009-09-01
| | | | | | | | | | | | Big thanks to nickm and arma for helping me with this!
* | | Add getinfo accepted-server-descriptor. Clean spec.Roger Dingledine2009-08-31
| | | | | | | | | | | | | | | | | | | | | | | | Add a "getinfo status/accepted-server-descriptor" controller command, which is the recommended way for controllers to learn whether our server descriptor has been successfully received by at least on directory authority. Un-recommend good-server-descriptor getinfo and status events until we have a better design for them.
* | | Only send reachability status events on overall success/failureRoger Dingledine2009-08-31
|/ / | | | | | | | | | | | | | | | | We were telling the controller about CHECKING_REACHABILITY and REACHABILITY_FAILED status events whenever we launch a testing circuit or notice that one has failed. Instead, only tell the controller when we want to inform the user of overall success or overall failure. Bugfix on 0.1.2.6-alpha. Fixes bug 1075. Reported by SwissTorExit.
* | Only send netinfo clock_skew to controller if an authority told us soRoger Dingledine2009-08-28
| | | | | | | | | | | | | | | | We were triggering a CLOCK_SKEW controller status event whenever we connect via the v2 connection protocol to any relay that has a wrong clock. Instead, we should only inform the controller when it's a trusted authority that claims our clock is wrong. Bugfix on 0.2.0.20-rc; starts to fix bug 1074. Reported by SwissTorExit.
* | extremely infinite? who talks like that?Roger Dingledine2009-08-27
| |
* | nobody forward-ported the 0.2.0.35 changelogRoger Dingledine2009-08-26
| |
* | Merge commit 'phobos/vidalia-bundle-updates-maint-0.2.1' into maint-0.2.1Nick Mathewson2009-08-25
|\ \
| * | update osx-dmg creation directions for the new methodsphobos2009-08-25
| | |
* | | Fix a rare infinite-recursion bug when shutting down.Nick Mathewson2009-08-20
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Once we had called log_free_all(), anything that tried to log a message (like a failed tor_assert()) would fail like this: 1. The logging call eventually invokes the _log() function. 2. _log() calls tor_mutex_lock(log_mutex). 3. tor_mutex_lock(m) calls tor_assert(m). 4. Since we freed the log_mutex, tor_assert() fails, and tries to log its failure. 5. GOTO 1. Now we allocate the mutex statically, and never destroy it on shutdown. Bugfix on 0.2.0.16-alpha, which introduced the log mutex. This bug was found by Matt Edman.
* | update fetch-all with dir authAndrew Lewman2009-08-13
| |
* | Fix possible segmentation fault on directory authorities.Karsten Loesing2009-08-11
| | | | | | | | | | | | The more verbose logs that were added in ee58153 also include a string that might not have been initialized. This can lead to segfaults, e.g., when setting up private Tor networks. Initialize this string with NULL.
* | Send sendmes when we're down 100 cells, not 101.Roger Dingledine2009-08-10
| | | | | | | | | | | | | | | | | | Send circuit or stream sendme cells when our window has decreased by 100 cells, not when it has decreased by 101 cells. Bug uncovered by Karsten when testing the "reduce circuit window" performance patch. Bugfix on the 54th commit on Tor -- from July 2002, before the release of Tor 0.0.0. This is the new winner of the oldest-bug prize.
* | directory-archive scripts now fetch from urras tooRoger Dingledine2009-08-10
| |
* | Set up urras as the seventh v3 directory authority.Roger Dingledine2009-08-10
| |
* | Merge commit 'karsten/hsauth-manpage-maint-0.2.1' into maint-0.2.1Nick Mathewson2009-08-09
|\ \
| * | Make configuration of hidden services with authorization somewhat clearer.Karsten Loesing2009-08-01
| | |
* | | add geoip file to uninstallAndrew Lewman2009-08-03
| | |
* | | add receipts to be wiped.Andrew Lewman2009-08-01
| | |
* | | Cleaner fix for get_effective_bw(rate|burst), with comment on why it is ok.Nick Mathewson2009-07-30
| | |
* | | Merge commit 'debian-tor-0.2.1.19-1' into maint-0.2.1Nick Mathewson2009-07-29
|\ \ \ | |/ / |/| / | |/
| * Mention that this closes #538960 in the changelogPeter Palfrader2009-07-29
| |