| Commit message (Expand) | Author | Age |
... | |
| * | | | | | | | Avoid leaking headers received from SSL proxy•••Fixes part of 7816. Spotted by coverity. Fix on 0.2.2.1-alpha.
| Nick Mathewson | 2012-12-28 |
| * | | | | | | | Fix memory leak in safe-cookie authentication code•••Coverity spotted this. Bug 7816. Fix on 0.2.3.13-alpha.
| Nick Mathewson | 2012-12-28 |
* | | | | | | | | Merge remote-tracking branch 'public/bug7816_024' | Nick Mathewson | 2013-02-07 |
|\ \ \ \ \ \ \ \ |
|
| * | | | | | | | | Fix an impossible-in-normal-operation leaks in dirvote•••Spotted by coverity; partial fix for 7816; bugfix on 0.2.0.5-alpha.
| Nick Mathewson | 2012-12-28 |
| * | | | | | | | | Fix a leak-on-error case in 0.2.4 spotted by coverity•••This one hits if the snprintf() fails when we're writing our IPv6
exit policy. It's new in 0.2.4.7-alpha. Part of bug 7816.
| Nick Mathewson | 2012-12-28 |
| | |_|/ / / / /
| |/| | | | | | |
|
* | | | | | | | | Merge branch 'bug7902' | Nick Mathewson | 2013-02-07 |
|\ \ \ \ \ \ \ \ |
|
| * | | | | | | | | When we get an END cell before CONNECTED, don't report SOCKS success•••Bug 7902; fix on 0.1.0.1-rc.
| Nick Mathewson | 2013-01-16 |
* | | | | | | | | | Merge branch 'ticket8161_squashed' | Nick Mathewson | 2013-02-07 |
|\ \ \ \ \ \ \ \ \ |
|
| * | | | | | | | | | Changes file for path use bias threshold changes. | Mike Perry | 2013-02-07 |
* | | | | | | | | | | Merge branch 'bug8121_squashed' | Nick Mathewson | 2013-02-07 |
|\ \ \ \ \ \ \ \ \ \
| |_|_|_|_|_|_|_|_|/
|/| | | | | | | | | |
|
| * | | | | | | | | | Tolerate curve25519 backends where the high bit of the pk isn't ignored•••Right now, all our curve25519 backends ignore the high bit of the
public key. But possibly, others could treat the high bit of the
public key as encoding out-of-bounds values, or as something to be
preserved. This could be used to distinguish clients with different
backends, at the cost of killing a circuit.
As a workaround, let's just clear the high bit of each public key
indiscriminately before we use it. Fix for bug 8121, reported by
rransom. Bugfix on 0.2.4.8-alpha.
| Nick Mathewson | 2013-02-07 |
* | | | | | | | | | | Merge remote-tracking branch 'public/bug8151' | Nick Mathewson | 2013-02-05 |
|\ \ \ \ \ \ \ \ \ \
| |_|/ / / / / / / /
|/| | | | | | | | | |
|
| * | | | | | | | | | Include a flag-thresholds line in each vote to describe flag cutoffs•••Implements ticket 8151.
| Nick Mathewson | 2013-02-04 |
* | | | | | | | | | | fold in changes for 0.2.4.10-alpha | Roger Dingledine | 2013-02-04 |
|/ / / / / / / / / |
|
* | | | | | | | | | Merge branch 'bug8146_etc' | Nick Mathewson | 2013-02-04 |
|\ \ \ \ \ \ \ \ \
| |/ / / / / / / /
|/| | | | | | | | |
|
| * | | | | | | | | When we mark a node as a sybil, mark it down and reset its uptime to 0•••This prevents bug 8147, where such nodes would accrue points towards
Guard, Fast, HSDir, and so on.
Fixes bug 8147.
| Nick Mathewson | 2013-02-04 |
| * | | | | | | | | Ignore tiny bandwidths entirely when computing thresholds•••Another bug 8145 fix.
| Nick Mathewson | 2013-02-04 |
| * | | | | | | | | Increase the minimum value for the Fast flag to 4096.•••Fix for 8145.
| Nick Mathewson | 2013-02-04 |
| * | | | | | | | | When computing performance thresholds, ignore omitted-as-sybil nodes.•••Fixes bug 8146.
| Nick Mathewson | 2013-02-04 |
| | |_|_|_|_|_|/
| |/| | | | | | |
|
* / | | | | | | | Fix compilation with --disable-curve25519 option•••The fix is to move the two functions to format/parse base64
curve25519 public keys into a new "crypto_format.c" file. I could
have put them in crypto.c, but that's a big file worth splitting
anyway.
Fixes bug 8153; bugfix on 0.2.4.8-alpha where I did the fix for 7869.
| Nick Mathewson | 2013-02-04 |
|/ / / / / / / |
|
* | | | | | | | Merge remote-tracking branch 'public/feature7706' | Nick Mathewson | 2013-02-01 |
|\ \ \ \ \ \ \ |
|
| * | | | | | | | When excluding nodes by country, exclude {??} and {A1} too•••This is ticket 7706, reported by "bugcatcher." The rationale here
is that if somebody says 'ExcludeNodes {tv}', then they probably
don't just want to block definitely Tuvaluan nodes: they also want
to block nodes that have unknown country, since for all they know
such nodes are also in Tuvalu.
This behavior is controlled by a new GeoIPExcludeUnknown autobool
option. With the default (auto) setting, we exclude ?? and A1 if
any country is excluded. If the option is 1, we add ?? and A1
unconditionally; if the option is 0, we never add them.
(Right now our geoip file doesn't actually seem to include A1: I'm
including it here in case it comes back.)
This feature only takes effect if you have a GeoIP file. Otherwise
you'd be excluding every node.
| Nick Mathewson | 2013-01-17 |
* | | | | | | | | Merge remote-tracking branch 'public/bug7708_023_v3_squashed' | Nick Mathewson | 2013-02-01 |
|\ \ \ \ \ \ \ \ |
|
| * | | | | | | | | Fix serious breakage in connection_handle_write_impl•••When we first implemented TLS, we assumed in conneciton_handle_write
that a TOR_TLS_WANT_WRITE from flush_buf_tls meant that nothing had
been written. But when we moved our buffers to a ring buffer
implementation back in 0.1.0.5-rc (!), we broke that invariant: it's
possible that some bytes have been written but nothing.
That's bad. It means that if we do a sequence of TLS writes that ends
with a WANTWRITE, we don't notice that we flushed any bytes, and we
don't (I think) decrement buckets.
Fixes bug 7708; bugfix on 0.1.0.5-rc
| Nick Mathewson | 2013-02-01 |
| | |_|_|_|_|/ /
| |/| | | | | | |
|
* | | | | | | | | Merge branch 'rename_log_7599' | Nick Mathewson | 2013-02-01 |
|\ \ \ \ \ \ \ \ |
|
| * | | | | | | | | Remove old wrapper code and defines for keeping log() and log(3) apart•••This is the non-automated portion of bug 7599.
| Nick Mathewson | 2013-02-01 |
* | | | | | | | | | Help us track bug 8093:•••Improve the log message when "Bug/attack: unexpected sendme cell
from client" occurs.
| Roger Dingledine | 2013-02-01 |
|/ / / / / / / / |
|
* | | | | | | | | Merge branch 'double-0-check' | Nick Mathewson | 2013-01-31 |
|\ \ \ \ \ \ \ \ |
|
| * | | | | | | | | Detect platforms where memset(0) doesn't set doubles to 0.0.•••This is allowed by the C statndard, which permits you to represent
doubles any way you like, but in practice we have some code that
assumes that memset() clears doubles in structs. Noticed as part of
7802 review; see 8081 for more info.
| Nick Mathewson | 2013-01-29 |
* | | | | | | | | | Rename all of the macros in tor_queue.h to start with TOR_ | Nick Mathewson | 2013-01-30 |
* | | | | | | | | | Merge branch 'bug5956_squashed' | Nick Mathewson | 2013-01-30 |
|\ \ \ \ \ \ \ \ \
| |/ / / / / / / /
|/| | | | | | | | |
|
| * | | | | | | | | Parameterize FRAC_USABLE_NEEDED for fraction of circuits•••Instead of hardcoding the minimum fraction of possible paths to 0.6, we
take it from the user, and failing that from the consensus, and
failing that we fall back to 0.6.
| Nick Mathewson | 2013-01-30 |
| * | | | | | | | | Compute whether we're ready to build circuits based on fraction of paths•••Previously we did this based on the fraction of descriptors we
had. But really, we should be going based on what fraction of paths
we're able to build based on weighted bandwidth, since otherwise a
directory guard or two could make us behave quite oddly.
Implementation for feature 5956
| Nick Mathewson | 2013-01-30 |
* | | | | | | | | | Merge branch 'bug7802' of ssh://git-rw.torproject.org/mikeperry/tor | Andrea Shepard | 2013-01-28 |
|\ \ \ \ \ \ \ \ \ |
|
| * | | | | | | | | | Bug 8024: Check for null/closed channel before probing. | Mike Perry | 2013-01-22 |
| * | | | | | | | | | Bug 7802 changes file. | Mike Perry | 2013-01-18 |
* | | | | | | | | | | Merge branch 'time_based_onionqueue_v2' of ssh://git-rw.torproject.org/nickm/tor | Andrea Shepard | 2013-01-24 |
|\ \ \ \ \ \ \ \ \ \ |
|
| * | | | | | | | | | | Record and report the overhead of how we handle onionskins. | Nick Mathewson | 2013-01-03 |
| * | | | | | | | | | | Eliminate MaxOnionsPending; replace it with MaxOnionQueueDelay•••The right way to set "MaxOnionsPending" was to adjust it until the
processing delay was appropriate. So instead, let's measure how long
it takes to process onionskins (sampling them once we have a big
number), and then limit the queue based on its expected time to
finish.
This change is extra-necessary for ntor, since there is no longer a
reasonable way to set MaxOnionsPending without knowing what mix of
onionskins you'll get.
This patch also reserves 1/3 of the onionskin spots for ntor
handshakes, on the theory that TAP handshakes shouldn't be allowed to
starve their speedier cousins. We can change this later if need be.
Resolves 7291.
| Nick Mathewson | 2013-01-03 |
* | | | | | | | | | | | Merge remote-tracking branch 'karsten/bug5823' | Nick Mathewson | 2013-01-19 |
|\ \ \ \ \ \ \ \ \ \ \
| |_|/ / / / / / / / /
|/| | | | | | | | | | |
|
| * | | | | | | | | | | Remove dirreq-v2-* lines from extra-info descriptors.•••Implements the rest of #5823.
| Karsten Loesing | 2013-01-17 |
| * | | | | | | | | | | Removee dirrec-v*-sharestatistics•••These were unused and sometimes inaccurate. Resolves 5823.
| Nick Mathewson | 2013-01-16 |
| | |_|_|_|/ / / / /
| |/| | | | | | | | |
|
* | | | | | | | | | | Remove -v flag from autoreconf by default•••You can get it back by saying ./autogen.sh -v
Patch from onizuka; for bug 4664.
This isn't a complete fix, since starting from a clean checkout still
reports that it's installing stuff
| Nick Mathewson | 2013-01-18 |
| |_|_|_|/ / / / /
|/| | | | | | | | |
|
* | | | | | | | | | Another msvc changes entry | Nick Mathewson | 2013-01-17 |
| |_|/ / / / / /
|/| | | | | | | |
|
* | | | | | | | | Merge branch 'bug6826_squashed' | Nick Mathewson | 2013-01-17 |
|\ \ \ \ \ \ \ \ |
|
| * | | | | | | | | Drop detection logic for pre-1.3 busted libevents•••This won't actually break them any worse than they were broken before:
it just removes a set of warnings that nobody was actually seeing, I
hope.
Closes 6826
| Nick Mathewson | 2013-01-17 |
* | | | | | | | | | Implement proposal 204: ignore subdomains in hidden service addresses•••The implementation is pretty straightforward: parse_extended_hostname() is
modified to drop any leading components from an address like
'foo.aaaaaaaaaaaaaaaa.onion'.
| Jérémy Bobbio | 2013-01-16 |
* | | | | | | | | | Merge branch '024_msvc_squashed'•••Conflicts:
src/or/or.h
srcwin32/orconfig.h
| Nick Mathewson | 2013-01-16 |
|\ \ \ \ \ \ \ \ \ |
|
| * | | | | | | | | | Fix an instance of snprintf; don't use _snprintf directly | Nick Mathewson | 2013-01-16 |
| * | | | | | | | | | Changes files for 024_msvc branch | Nick Mathewson | 2013-01-16 |