aboutsummaryrefslogtreecommitdiff
path: root/changes
Commit message (Collapse)AuthorAge
* Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson2011-11-07
|\
| * Add a changes file for 4410Sebastian Hahn2011-11-06
| |
* | Fix a memleak when fetching descriptors for bridges in ExcludeNodes.George Kadianakis2011-11-03
| |
* | remove absolute path from contrib/package_nsis-mingw.sh in order to make it ↵Erinn Clark2011-10-31
| | | | | | | | easier to automatically build tor expert bundle
* | Add a changes file for the 4340 fixSebastian Hahn2011-10-29
| |
* | Discard all cells on a marked connectionNick Mathewson2011-10-28
| | | | | | | | Fix for bug 4299
* | Fix typo, spotted by tmpname0901. Thanks!Sebastian Hahn2011-10-28
| |
* | Don't give the Guard flag to relays without the CVE-2011-2768 fixRobert Ransom2011-10-26
| |
* | Merge branch 'maint-0.2.1_secfix' into maint-0.2.2_secfixSebastian Hahn2011-10-26
|\| | | | | | | | | Conflicts: src/or/connection_or.c
| * Reject create cells on outgoing OR connections from bridgesRobert Ransom2011-10-26
| |
| * Don't use any OR connection which sent us a CREATE_FAST cell for an EXTENDRobert Ransom2011-10-26
| | | | | | | | Fix suggested by Nick Mathewson.
| * Don't send a certificate chain on outgoing TLS connections from non-relaysNick Mathewson2011-10-26
| |
| * Remove the -F option from tor-resolve.Nick Mathewson2011-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | It used to mean "Force": it would tell tor-resolve to ask tor to resolve an address even if it ended with .onion. But when AutomapHostsOnResolve was added, automatically refusing to resolve .onion hosts stopped making sense. So in 0.2.1.16-rc (commit 298dc95dfd8), we made tor-resolve happy to resolve anything. The -F option stayed in, though, even though it didn't do anything. Oddly, it never got documented. Found while fixing GCC 4.6 "set, unused variable" warnings.
| * manually backport a5232e0c4cRoger Dingledine2011-10-26
| |
| * Reinit keys at the start of options_act().Nick Mathewson2011-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | Previously we did this nearer to the end (in the old_options && transition_affects_workers() block). But other stuff cares about keys being consistent with options... particularly anything which tries to access a key, which can die in assert_identity_keys_ok(). Fixes bug 3228; bugfix on 0.2.2.18-alpha. Conflicts: src/or/config.c
| * Don't crash a bridge authority on SIGHUP if it's not in the consensusRobert Ransom2011-10-26
| | | | | | | | Fixes bug 2572.
| * Fix assert for relay/bridge state changeSebastian Hahn2011-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | When we added support for separate client tls certs on bridges in a2bb0bfdd5 we forgot to correctly initialize this when changing from relay to bridge or vice versa while Tor is running. Fix that by always initializing keys when the state changes. Fixes bug 2433. Conflicts: src/or/config.c
| * Don't crash when accountingmax is set in non-server TorsNick Mathewson2011-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | We use a hash of the identity key to seed a prng to tell when an accounting period should end. But thanks to the bug998 changes, clients no longer have server-identity keys to use as a long-term seed in accounting calculations. In any case, their identity keys (as used in TLS) were never never fixed. So we can just set the wakeup time from a random seed instead there. Still open is whether everybody should be random. This patch fixes bug 2235, which was introduced in 0.2.2.18-alpha. Diagnosed with help from boboper on irc.
| * Fix zlib macro brokenness on osx with zlib 1.2.4 and higher.Nick Mathewson2011-10-26
| | | | | | | | | | | | | | | | | | | | | | | | From the code: zlib 1.2.4 and 1.2.5 do some "clever" things with macros. Instead of saying "(defined(FOO) ? FOO : 0)" they like to say "FOO-0", on the theory that nobody will care if the compile outputs a no-such-identifier warning. Sorry, but we like -Werror over here, so I guess we need to define these. I hope that zlib 1.2.6 doesn't break these too. Possible fix for bug 1526.
* | Merge remote-tracking branch 'public/cov_run224_022' into maint-0.2.2Nick Mathewson2011-10-26
|\ \
| * | Make internal error check for unrecognized digest algorithm more robustNick Mathewson2011-10-06
| | | | | | | | | | | | Fixes Coverity CID 479.
| * | Check return of init_keys() ip_address_changed: fix Coverity CID 484Nick Mathewson2011-10-06
| | |
* | | unmangle the fingerprint example in the man pageRoger Dingledine2011-10-25
| | | | | | | | | | | | | | | Remove a confusing dollar sign from the example fingerprint in the man page, and also make example fingerprint a valid one.
* | | Merge remote-tracking branch 'rransom-tor/bug4251-022' into maint-0.2.2Nick Mathewson2011-10-20
|\ \ \
| * | | Free rend_data and intro_key when extra intro circs become general-purposeRobert Ransom2011-10-18
| | | |
* | | | Fix crash when changing node restrictions with DNS lookup in progressNick Mathewson2011-10-19
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes bug 4259, bugfix on 0.2.2.25-alpha. Bugfix by "Tey'". Original message by submitter: Changing nodes restrictions using a controller while Tor is doing DNS resolution could makes Tor crashes (on WinXP at least). The problem can be repeated by trying to reach a non-existent domain using Tor: curl --socks4a 127.0.0.1:9050 inexistantdomain.ext .. and changing the ExitNodes parameter through the control port before Tor returns a DNS resolution error (of course, the following command won't work directly if the control port is password protected): echo SETCONF ExitNodes=TinyTurtle | nc -v 127.0.0.1 9051 Using a non-existent domain is needed to repeat the issue so that Tor takes a few seconds for resolving the domain (which allows us to change the configuration). Tor will crash while processing the configuration change. The bug is located in the addressmap_clear_excluded_trackexithosts method which iterates over the entries of the addresses map in order to check whether the changes made to the configuration will impact those entries. When a DNS resolving is in progress, the new_adress field of the associated entry will be set to NULL. The method doesn't expect this field to be NULL, hence the crash.
* | | Merge branch 'maint-0.2.1' into maint-0.2.2Roger Dingledine2011-10-13
|\ \ \ | | |/ | |/|
| * | Update to the October 2011 GeoIP database.Karsten Loesing2011-10-13
| | |
| * | Update to the September 2011 GeoIP database.Karsten Loesing2011-09-15
| | |
* | | Don't launch a useless circuit in rend_client_reextend_intro_circuitRobert Ransom2011-10-10
| | | | | | | | | | | | Fixes bug 4212. Bug reported by katmagic and found by Sebastian.
* | | Note ticket and source version for feature3951 in changes fileNick Mathewson2011-10-07
| | |
* | | Merge remote-tracking branch 'karsten/feature3951' into maint-0.2.2Nick Mathewson2011-10-07
|\ \ \
| * | | Turn on directory request statistics by default.Karsten Loesing2011-10-05
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | Change the default values for collecting directory request statistics and inlcuding them in extra-info descriptors to 1. Don't break if we are configured to collect directory request or entry statistics and don't have a GeoIP database. Instead, print out a notice and skip initializing the affected statistics code. This is the cherry-picked 499661524b0a572303087af721325608dd91f7ce.
* / | Avoid running DNS self-tests if we're operating as a bridgewarms0x2011-10-07
|/ /
* | Looks like Windows version 6.2 will be Windows 8Sebastian Hahn2011-10-01
| | | | | | | | Thanks to funkstar for the report
* | bridges should use create_fast cells for their own circuitsRoger Dingledine2011-09-28
| | | | | | | | fixes bug 4124, as noticed in bug 4115
* | bug 4115: make bridges use begindir for their dir fetchesRoger Dingledine2011-09-28
| | | | | | | | removes another avenue for enumerating bridges.
* | Add a changes file for Tom Lowenthal's patch for #4063Nick Mathewson2011-09-24
| |
* | changes file for bug 4059Nick Mathewson2011-09-20
| |
* | Merge branch 'maint-0.2.1' into maint-0.2.2Roger Dingledine2011-09-13
|\| | | | | | | | | | | Conflicts: src/or/main.c src/or/router.c
| * Generate our ssl session certs with a plausible lifetimeRoger Dingledine2011-09-13
| | | | | | | | | | Nobody but Tor uses certs on the wire with 2 hour lifetimes, and it makes us stand out. Resolves ticket 4014.
* | Update to the September 2011 GeoIP database.Karsten Loesing2011-09-12
| |
* | Demote 'INTRODUCE2 cell is too {old,new}' message to info levelRobert Ransom2011-09-10
| |
* | Demote HS 'replay detected' log message for DH public keys to info levelRobert Ransom2011-09-10
| |
* | Fix log message typo.Robert Ransom2011-09-10
| |
* | Merge remote-tracking branch 'public/gcc-295-fix' into maint-0.2.2Nick Mathewson2011-09-09
|\ \
| * | Add changes file for bsd4 fixesNick Mathewson2011-09-09
| | |
* | | Merge remote-tracking branch 'public/enhance_replay_detection' into maint-0.2.2Nick Mathewson2011-09-09
|\ \ \
| * | | Check for replays in PK-encrypted part of intro cell, not just in the g^x valueNick Mathewson2011-09-09
| | |/ | |/|
* | | Merge remote-tracking branch 'public/bug2649_squashed' into maint-0.2.2Nick Mathewson2011-09-07
|\ \ \