aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | | | | sandbox: Disallow options which would make us call exec()Nick Mathewson2014-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | None of the things we might exec() can possibly run under the sanbox, so rather than crash later, we have to refuse to accept the configuration nice and early. The longer-term solution is to have an exec() helper, but wow is that risky. fixes 12043; bugfix on 0.2.5.1-alpha
* | | | | | | | sandbox: Permit access to stats/dirreq-statsNick Mathewson2014-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This prevents a crash when rotating logs with dirreq-stats enabled fixes 12035; bugfix on 0.2.5.1-alpha.
* | | | | | | | Oops; permit rename with the correct filenameNick Mathewson2014-05-20
| | | | | | | |
* | | | | | | | Fix a sentence that I neverNick Mathewson2014-05-20
| | | | | | | |
* | | | | | | | Sandbox: allow access to stats/bridge-statsNick Mathewson2014-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix for 12041; bugfix on 0.2.5.1-alpha.
* | | | | | | | note a comment that nickm didn't finishRoger Dingledine2014-05-17
| | | | | | | |
* | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.4'Nick Mathewson2014-05-16
|\ \ \ \ \ \ \ \ | | |/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | This is an "ours" merge, to avoid taking the commit that bumped maint-0.2.4's version to 0.2.4.22-dev.
| * | | | | | | Bump maint-0.2.4 version to 0.2.4.22-devNick Mathewson2014-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (See discussion on #9553)
* | | | | | | | Document that we're incrementing version numbers in maint.Nick Mathewson2014-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (ticket 9553)
* | | | | | | | Forward-port 0.2.4.22 changelogNick Mathewson2014-05-16
| | | | | | | |
* | | | | | | | Merge remote-tracking branch 'public/bug11469_024'Nick Mathewson2014-05-15
|\ \ \ \ \ \ \ \
| * | | | | | | | Use DirPort for uploading descriptors.Nick Mathewson2014-05-14
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When we converted the horrible set of options that previously controlled "use ORPort or DirPort? Anonymously or Non-anonymouly?" to a single 'indirection' argument, we missed directory_post_to_dirservers. The problematic code was introduced in 5cbeb6080, which went into 0.2.4.3-alpha. This is a fix for bug 11469.
* | | | | | | | whitespace fix, moreNick Mathewson2014-05-14
| | | | | | | |
* | | | | | | | Merge branch 'bug11946'Nick Mathewson2014-05-14
|\ \ \ \ \ \ \ \
| * | | | | | | | Improved comments on bug11946 fixNick Mathewson2014-05-14
| | | | | | | | |
| * | | | | | | | Use tor_getpw{nam,uid} wrappers to fix bug 11946Nick Mathewson2014-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When running with User set, we frequently try to look up our information in the user database (e.g., /etc/passwd). The seccomp2 sandbox setup doesn't let us open /etc/passwd, and probably shouldn't. To fix this, we have a pair of wrappers for getpwnam and getpwuid. When a real call to getpwnam or getpwuid fails, they fall back to a cached value, if the uid/gid matches. (Granting access to /etc/passwd isn't possible with the way we handle opening files through the sandbox. It's not desirable either.)
| * | | | | | | | Add a pair of wrapper functions: tor_getpwnam() and tor_getpwuid()Nick Mathewson2014-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We'll use these to deal with being unable to access the user DB after we install the sandbox, to fix bug 11946.
* | | | | | | | | whitespace fixNick Mathewson2014-05-14
|/ / / / / / / /
* | | | | | | | make the changelog text wrapper respect arma's no-initial-openparen ruleNick Mathewson2014-05-14
| | | | | | | |
* | | | | | | | Merge branch 'bug9781_v2'Nick Mathewson2014-05-12
|\ \ \ \ \ \ \ \
| * | | | | | | | Log an error reply from tor-fw-helper correctly.Nick Mathewson2014-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix for bug 9781; bugfix on cd05f35d2cdf50 in 0.2.4.2-alpha.
| * | | | | | | | Split portfw-error-logging code into a new function.Nick Mathewson2014-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | No code has changed; only moved. Part of a fix for 9781.
* | | | | | | | | changes file for gisle vanem's MSVC fixNick Mathewson2014-05-12
| | | | | | | | |
* | | | | | | | | Fix compilation of test_status.c with MSVCGisle Vanem2014-05-12
| | | | | | | | |
* | | | | | | | | fix whitespaceNick Mathewson2014-05-11
| | | | | | | | |
* | | | | | | | | Quench clang's complaints with -Wshorten-64-to-32 when time_t is not long.dana koch2014-05-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On OpenBSD 5.4, time_t is a 32-bit integer. These instances contain implicit treatment of long and time_t as comparable types, so explicitly cast to time_t.
* | | | | | | | | One more 64->32Nick Mathewson2014-05-08
| | | | | | | | |
* | | | | | | | | Fix numerous 64->32 errors in the unit testsNick Mathewson2014-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before the 11825 fix, these were all silently ignored.
* | | | | | | | | Fix unearthed problems in unit testsNick Mathewson2014-05-08
| | | | | | | | |
* | | | | | | | | Fix numerous type errors in the unit testsNick Mathewson2014-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove tinytest casts that were suppressing them. Fix for #11825.
* | | | | | | | | Fix test_util_max_mem on 32-bit CPUsNick Mathewson2014-05-08
| | | | | | | | |
* | | | | | | | | More unit tests for #11648-related stuffNick Mathewson2014-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These are actually tests for #311. It appears to me that we didn't fix #311 properly when we thought we did in 475eb5d6; instead, the real fix was 05eff35ac6d64b, a few minutes earlier.
* | | | | | | | | Move structures into (private) part of buffers.h so we can inspect them ↵Nick Mathewson2014-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | while testing
* | | | | | | | | Merge remote-tracking branch 'public/bug11648'Nick Mathewson2014-05-08
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | changes file for 11648Nick Mathewson2014-05-08
| | | | | | | | | |
| * | | | | | | | | Always finalize a zlib stream of server descriptors.Nick Mathewson2014-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Possible fix for bug 11648.
* | | | | | | | | | Return success when get_total_system_memory() succeeds.Nick Mathewson2014-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes bug 11805; bugfix on 0.2.5.4-alpha.
* | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.4'Nick Mathewson2014-05-07
|\ \ \ \ \ \ \ \ \ \ | | |_|/ / / / / / / | |/| | | | | | | |
| * | | | | | | | | Merge commit 'bb9b4c37f8e7f5cf78918f382e90d8b11ff42551' into maint-0.2.4Nick Mathewson2014-05-07
| |\ \ \ \ \ \ \ \ \
* | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.4'Nick Mathewson2014-05-07
|\| | | | | | | | | |
| * | | | | | | | | | Merge remote-tracking branch 'public/ticket11528_024' into maint-0.2.4Nick Mathewson2014-05-07
| |\ \ \ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ \ \ Merge remote-tracking branch 'public/bug11513_024' into maint-0.2.4Nick Mathewson2014-05-07
| |\ \ \ \ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ \ \ \ Merge remote-tracking branch 'public/update_ciphers_ff28' into maint-0.2.4Nick Mathewson2014-05-07
| |\ \ \ \ \ \ \ \ \ \ \ \
* | \ \ \ \ \ \ \ \ \ \ \ \ Merge remote-tracking branch 'public/bug11737_diagnostic'Nick Mathewson2014-05-07
|\ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | Check HT_REP_IS_BAD_() when giving a bug-7164 warning.Nick Mathewson2014-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This may let us know if we're hitting 7164 because of an hte_hash-corruption situation proposed by "cypherpunks" in bug 11737.
* | | | | | | | | | | | | | | Improve bug11743 message a bit.Nick Mathewson2014-05-07
| | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | Merge remote-tracking branch 'public/bug8387_diagnostic'Nick Mathewson2014-05-07
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ / / / / / / / |/| | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Better log message for 8387 diagnosticNick Mathewson2014-05-07
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Log info on ancient one-hop circuits in heartbeatNick Mathewson2014-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is an attempt to diagnose 8387.
* | | | | | | | | | | | | | | Script to detect unused autoconf outputsNick Mathewson2014-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Should help speed up mingw builds by a percent or two.