aboutsummaryrefslogtreecommitdiff
path: root/changes
Commit message (Collapse)AuthorAge
* Merge remote-tracking branch 'public/feature4994-rebased'Nick Mathewson2013-02-15
|\
| * use microdescriptors if *any* of our bridges can handle themRoger Dingledine2013-02-02
| | | | | | | | | | | | Now as we move into a future where most bridges can handle microdescs we will generally find ourselves using them, rather than holding back just because one of our bridges doesn't use them.
* | Merge remote-tracking branch 'public/integers_donna'Nick Mathewson2013-02-15
|\ \
| * | Use torint.h in curve25519-donna*.cNick Mathewson2013-02-14
| | | | | | | | | | | | This will get it building on systems that lack stdint.h
* | | Authorities were adding downtime for every relay every restartRoger Dingledine2013-02-14
|/ / | | | | | | | | | | | | | | Stop marking every relay as having been down for one hour every time we restart a directory authority. These artificial downtimes were messing with our Stable and Guard flag calculations. Fixes bug 8218 (introduced by the fix for 1035). Bugfix on 0.2.2.23-alpha.
* | Check for IP address change every minute, not 15 minutesRoger Dingledine2013-02-11
| | | | | | | | | | | | | | | | | | | | | | | | Relays used to check every 10 to 60 seconds, as an accidental side effect of calling directory_fetches_from_authorities() when considering doing a directory fetch. The fix for bug 1992 removes that side effect. At the same time, bridge relays never had the side effect, leading to confused bridge operators who tried crazy tricks to get their bridges to notice IP address changes (see ticket 1913). The new behavior is to reinstate an every-60-seconds check for both public relays and bridge relays, now that the side effect is gone.
* | Stop trying to resolve our hostname so oftenRoger Dingledine2013-02-11
| | | | | | | | | | | | | | | | For example, we were doing a resolve every time we think about doing a directory fetch. Now we reuse the cached answer in some cases. Fixes bugs 1992 (bugfix on 0.2.0.20-rc) and 2410 (bugfix on 0.1.2.2-alpha).
* | Fix a nigh-impossible overflow in cpuworker.cNick Mathewson2013-02-11
| | | | | | | | | | | | | | | | | | | | When we compute the estimated microseconds we need to handle our pending onionskins, we could (in principle) overflow a uint32_t if we ever had 4 million pending onionskins before we had any data about how onionskins take. Nevertheless, let's compute it properly. Fixes bug 8210; bugfix on 0.2.4.10. Found by coverity; this is CID 980651.
* | Merge remote-tracking branch 'public/bug8208'Nick Mathewson2013-02-11
|\ \
| * | Check whether ei is non-NULL before altering it.Nick Mathewson2013-02-11
| | | | | | | | | | | | | | | | | | | | | This fixes a crash bug if we fail to generate an extrainfo descriptor. Fixes bug 8208; bugfix on 0.2.3.16-alpha.
* | | Fix a copy-and-paste issue found by coverityNick Mathewson2013-02-11
| | | | | | | | | | | | Fixes CID 980650; bugfix on 0.2.4.10-alpha.
* | | Merge remote-tracking branch 'public/bug8158'Nick Mathewson2013-02-11
|\ \ \
| * | | Coalesce identical adjacent microdescriptor vote lines.Nick Mathewson2013-02-08
| | | |
* | | | Refactor resolve_my_address() so logs are more accurate / helpfulRoger Dingledine2013-02-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It returns the method by which we decided our public IP address (explicitly configured, resolved from explicit hostname, guessed from interfaces, learned by gethostname). Now we can provide more helpful log messages when a relay guesses its IP address incorrectly (e.g. due to unexpected lines in /etc/hosts). Resolves ticket 2267. While we're at it, stop sending a stray "(null)" in some cases for the server status "EXTERNAL_ADDRESS" controller event. Resolves bug 8200.
* | | | Merge remote-tracking branch 'public/bug7801_v2'Nick Mathewson2013-02-11
|\ \ \ \
| * | | | changes file for bug7801Nick Mathewson2013-02-08
| |/ / /
* | | | Merge remote-tracking branch 'public/signof_enum'Nick Mathewson2013-02-08
|\ \ \ \ | |/ / / |/| | |
| * | | Have autoconf check whether enums are signed.Nick Mathewson2013-02-07
| | | | | | | | | | | | | | | | Fixes bug 7727; fix on 0.2.4.10-alpha.
| * | | Use a nicely written autoconf macro to determine the sign of a typeNick Mathewson2013-02-07
| | | | | | | | | | | | | | | | This beats our old implementation, which wouldn't work when cross-compiling
* | | | Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson2013-02-08
|\ \ \ \ | | |/ / | |/| |
| * | | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson2013-02-08
| |\ \ \
| | * | | Update to the February 2013 GeoIP database.Karsten Loesing2013-02-08
| | | | |
* | | | | Merge remote-tracking branch 'public/easy_ratelim'Nick Mathewson2013-02-07
|\ \ \ \ \ | |_|_|/ / |/| | | | | | | | | | | | | | Conflicts: src/or/connection.c
| * | | | Wrapper function for the common rate-limited-log pattern.Nick Mathewson2012-12-26
| | | | |
* | | | | Merge remote-tracking branch 'arma/bug7054'Nick Mathewson2013-02-07
|\ \ \ \ \
| * | | | | Say "KBytes" rather than "KB" in the man pageRoger Dingledine2012-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (for various values of K), to further reduce confusion about whether Tor counts in units of memory or fractions of units of memory. Fixes bug 7054.
* | | | | | Merge remote-tracking branch 'public/bug7816_023'Nick Mathewson2013-02-07
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/common/util.c
| * | | | | | Fix various small leaks on error casesNick Mathewson2012-12-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Spotted by coverity, bug 7816, bugfix on various versions.
| * | | | | | Avoid leaking headers received from SSL proxyNick Mathewson2012-12-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes part of 7816. Spotted by coverity. Fix on 0.2.2.1-alpha.
| * | | | | | Fix memory leak in safe-cookie authentication codeNick Mathewson2012-12-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Coverity spotted this. Bug 7816. Fix on 0.2.3.13-alpha.
* | | | | | | Merge remote-tracking branch 'public/bug7816_024'Nick Mathewson2013-02-07
|\ \ \ \ \ \ \
| * | | | | | | Fix an impossible-in-normal-operation leaks in dirvoteNick Mathewson2012-12-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Spotted by coverity; partial fix for 7816; bugfix on 0.2.0.5-alpha.
| * | | | | | | Fix a leak-on-error case in 0.2.4 spotted by coverityNick Mathewson2012-12-28
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | This one hits if the snprintf() fails when we're writing our IPv6 exit policy. It's new in 0.2.4.7-alpha. Part of bug 7816.
* | | | | | | Merge branch 'bug7902'Nick Mathewson2013-02-07
|\ \ \ \ \ \ \
| * | | | | | | When we get an END cell before CONNECTED, don't report SOCKS successNick Mathewson2013-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug 7902; fix on 0.1.0.1-rc.
* | | | | | | | Merge branch 'ticket8161_squashed'Nick Mathewson2013-02-07
|\ \ \ \ \ \ \ \
| * | | | | | | | Changes file for path use bias threshold changes.Mike Perry2013-02-07
| | | | | | | | |
* | | | | | | | | Merge branch 'bug8121_squashed'Nick Mathewson2013-02-07
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Tolerate curve25519 backends where the high bit of the pk isn't ignoredNick Mathewson2013-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Right now, all our curve25519 backends ignore the high bit of the public key. But possibly, others could treat the high bit of the public key as encoding out-of-bounds values, or as something to be preserved. This could be used to distinguish clients with different backends, at the cost of killing a circuit. As a workaround, let's just clear the high bit of each public key indiscriminately before we use it. Fix for bug 8121, reported by rransom. Bugfix on 0.2.4.8-alpha.
* | | | | | | | | | Merge remote-tracking branch 'public/bug8151'Nick Mathewson2013-02-05
|\ \ \ \ \ \ \ \ \ \ | |_|/ / / / / / / / |/| | | | | | | | |
| * | | | | | | | | Include a flag-thresholds line in each vote to describe flag cutoffsNick Mathewson2013-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Implements ticket 8151.
* | | | | | | | | | fold in changes for 0.2.4.10-alphaRoger Dingledine2013-02-04
|/ / / / / / / / /
* | | | | | | | | Merge branch 'bug8146_etc'Nick Mathewson2013-02-04
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / / |/| | | | | | | |
| * | | | | | | | When we mark a node as a sybil, mark it down and reset its uptime to 0Nick Mathewson2013-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This prevents bug 8147, where such nodes would accrue points towards Guard, Fast, HSDir, and so on. Fixes bug 8147.
| * | | | | | | | Ignore tiny bandwidths entirely when computing thresholdsNick Mathewson2013-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Another bug 8145 fix.
| * | | | | | | | Increase the minimum value for the Fast flag to 4096.Nick Mathewson2013-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix for 8145.
| * | | | | | | | When computing performance thresholds, ignore omitted-as-sybil nodes.Nick Mathewson2013-02-04
| | |_|_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | Fixes bug 8146.
* / | | | | | | Fix compilation with --disable-curve25519 optionNick Mathewson2013-02-04
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The fix is to move the two functions to format/parse base64 curve25519 public keys into a new "crypto_format.c" file. I could have put them in crypto.c, but that's a big file worth splitting anyway. Fixes bug 8153; bugfix on 0.2.4.8-alpha where I did the fix for 7869.
* | | | | | | Merge remote-tracking branch 'public/feature7706'Nick Mathewson2013-02-01
|\ \ \ \ \ \ \
| * | | | | | | When excluding nodes by country, exclude {??} and {A1} tooNick Mathewson2013-01-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is ticket 7706, reported by "bugcatcher." The rationale here is that if somebody says 'ExcludeNodes {tv}', then they probably don't just want to block definitely Tuvaluan nodes: they also want to block nodes that have unknown country, since for all they know such nodes are also in Tuvalu. This behavior is controlled by a new GeoIPExcludeUnknown autobool option. With the default (auto) setting, we exclude ?? and A1 if any country is excluded. If the option is 1, we add ?? and A1 unconditionally; if the option is 0, we never add them. (Right now our geoip file doesn't actually seem to include A1: I'm including it here in case it comes back.) This feature only takes effect if you have a GeoIP file. Otherwise you'd be excluding every node.