aboutsummaryrefslogtreecommitdiff
path: root/changes
Commit message (Collapse)AuthorAge
* Switch ECDHE group default logic for bridge/relay TLSNick Mathewson2013-10-08
| | | | | | | | | | According to the manpage, bridges use P256 for conformity and relays use P224 for speed. But skruffy points out that we've gotten it backwards in the code. In this patch, we make the default P256 for everybody. Fixes bug 9780; bugfix on 0.2.4.8-alpha.
* Changes file for 9866Nick Mathewson2013-10-08
|
* Merge remote-tracking branch 'public/bug9927' into maint-0.2.4Nick Mathewson2013-10-08
|\
| * Generate bootstrapping status messages for microdescs tooNick Mathewson2013-10-08
| | | | | | | | Fix for 9927.
* | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-10-08
|\ \
| * | Fix an assert when disabling ORPort with accounting disabled.Nick Mathewson2013-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The problem was that the server_identity_key_is_set() function could return true under conditions where we don't really have an identity key -- specifically, where we used to have one, but we stopped being a server. This is a fix for 6979; bugfix on 0.2.2.18-alpha where we added that assertion to get_server_identity_key().
* | | Merge remote-tracking branch 'public/bug9596' into maint-0.2.4Nick Mathewson2013-10-08
|\ \ \ | |_|/ |/| |
| * | Increase POLICY_BUF_LEN to 72 to accomodate IPv6 exit policy items.Nick Mathewson2013-08-26
| | | | | | | | | | | | Fixes bug 9596; bugfix on 0.2.4.7-alpha.
* | | Fix a bug in our bug 9776 fix.Nick Mathewson2013-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | By calling circuit_n_chan_done() unconditionally on close, we were closing pending connections that might not have been pending quite for the connection we were closing. Fix for bug 9880. Thanks to skruffy for finding this and explaining it patiently until we understood.
* | | Always call circuit_n_chan_done(chan, 0) from channel_closed()Andrea Shepard2013-09-24
| | |
* | | Avoid error by not saying which intro cell type I meanNick Mathewson2013-09-20
| | |
* | | Round down hidden service descriptor publication times to nearest hourNick Mathewson2013-09-20
| | | | | | | | | | | | | | | Implements part of proposal 222. We can do this safely, since REND_CACHE_MAX_SKEW is 24 hours.
* | | Remove the timestamp from AUTHENTICATE cells; replace with random bytesNick Mathewson2013-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This isn't actually much of an issue, since only relays send AUTHENTICATE cells, but while we're removing timestamps, we might as well do this too. Part of proposal 222. I didn't take the approach in the proposal of using a time-based HMAC, since that was a bad-prng-mitigation hack from SSL3, and in real life, if you don't have a good RNG, you're hopeless as a Tor server.
* | | Get ready to stop sending timestamps in INTRODUCE cellsNick Mathewson2013-09-20
| | | | | | | | | | | | | | | | | | | | | | | | For now, round down to the nearest 10 minutes. Later, eliminate entirely by setting a consensus parameter. (This rounding is safe because, in 0.2.2, where the timestamp mattered, REND_REPLAY_TIME_INTERVAL was a nice generous 60 minutes.)
* | | Stop sending the current time in client NETINFO handshakes.Nick Mathewson2013-09-20
| | | | | | | | | | | | Implements part of proposal 222.
* | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-09-16
|\ \ \ | | |/ | |/|
| * | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson2013-09-16
| |\ \
| | * | Update to the September 2013 GeoIP database.Karsten Loesing2013-09-10
| | | |
* | | | collect and log statistics about onionskins received/processedRoger Dingledine2013-09-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | we skip onionskins that came from non-relays, so we're less likely to run into privacy troubles. starts to implement ticket 9658.
* | | | add a changes entry for ticket 9574Roger Dingledine2013-09-04
| | | |
* | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-09-04
|\| | | | | | | | | | | | | | | | | | | Conflicts: src/or/circuitbuild.c
| * | | use !cbt_disabled in place of LearnCBT to avoid needless circsNick Mathewson2013-09-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This would make us do testing circuits "even when cbt is disabled by consensus, or when we're a directory authority, or when we've failed to write cbt history to our state file lately." (Roger's words.) This is a fix for 9671 and an improvement in our fix for 5049. The original misbehavior was in 0.2.2.14-alpha; the incomplete fix was in 0.2.3.17-beta.
| * | | Merge remote-tracking branch 'public/bug9546_023_v2' into maint-0.2.3Nick Mathewson2013-08-25
| |\ \ \
| | * | | Make bridges send AUTH_CHALLENGE cellsNick Mathewson2013-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The spec requires them to do so, and not doing so creates a situation where they can't send-test because relays won't extend to them because of the other part of bug 9546. Fixes bug 9546; bugfix on 0.2.3.6-alpha.
* | | | | Merge branch 'bug9400_024_squashed' into maint-0.2.4Nick Mathewson2013-09-03
|\ \ \ \ \ | |_|_|_|/ |/| | | |
| * | | | Avoid a double-close on one failing case of the socketpair replacement codeNick Mathewson2013-09-03
| | | | | | | | | | | | | | | | | | | | | | | | | Fix for bug 9400, spotted by coverity. Bug introduced in revision 2cb4f7a4 (subversion revision r389).
* | | | | Merge remote-tracking branch 'public/bug9546_v2' into maint-0.2.4Nick Mathewson2013-08-25
|\ \ \ \ \
| * | | | | Make bridges send AUTH_CHALLENGE cellsNick Mathewson2013-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The spec requires them to do so, and not doing so creates a situation where they can't send-test because relays won't extend to them because of the other part of bug 9546. Fixes bug 9546; bugfix on 0.2.3.6-alpha.
| * | | | | Send NETINFO on receiving a NETINFO if we have not yet sent one.Nick Mathewson2013-08-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Relays previously, when initiating a connection, would only send a NETINFO after sending an AUTHENTICATE. But bridges, when receiving a connection, would never send AUTH_CHALLENGE. So relays wouldn't AUTHENTICATE, and wouldn't NETINFO, and then bridges would be surprised to be receiving CREATE cells on a non-open circuit. Fixes bug 9546.
* | | | | | Merge remote-tracking branch 'public/bug9366' into maint-0.2.4Nick Mathewson2013-08-25
|\ \ \ \ \ \
| * | | | | | Don't allow all ORPort values to be NoAdvertiseNick Mathewson2013-08-05
| | |/ / / / | |/| | | | | | | | | | | | | | | | Fix for bug #9366
* | | | | | Merge remote-tracking branch 'public/bug9543' into maint-0.2.4Nick Mathewson2013-08-25
|\ \ \ \ \ \
| * | | | | | Add a 30-day maximum on user-supplied MaxCircuitDirtinessNick Mathewson2013-08-21
| | |/ / / / | |/| | | | | | | | | | | | | | | | Fix for bug 9543.
* | | | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-08-22
|\ \ \ \ \ \ | |/ / / / / |/| | / / / | | |/ / / | |/| | |
| * | | | Replace return with continue in update_consensus_networkstatus_downloadsNick Mathewson2013-08-22
| | |/ / | |/| | | | | | | | | | Fix for bug 9564; bugfix on 0.2.3.14-alpha.
* | | | Document the correct loglevel for the heartbeat messageNick Mathewson2013-08-16
| | | |
* | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-08-12
|\| | |
| * | | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson2013-08-12
| |\ \ \ | | | |/ | | |/|
| | * | Update to the August 2013 GeoIP database.Karsten Loesing2013-08-12
| | | |
* | | | Fix an uninitialized-read when parsing v3 introduction requests.Nick Mathewson2013-08-10
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | Fortunately, later checks mean that uninitialized data can't get sent to the network by this bug. Unfortunately, reading uninitialized heap *can* (in some cases, with some allocators) cause a crash if you get unlucky and go off the end of a page. Found by asn. Bugfix on 0.2.4.1-alpha.
* | | Merge remote-tracking branch 'arma/bug9354' into maint-0.2.4Nick Mathewson2013-07-31
|\ \ \
| * | | NumDirectoryGuards now tracks NumEntryGuards by defaultRoger Dingledine2013-07-30
| | | | | | | | | | | | | | | | | | | | Now a user who changes only NumEntryGuards will get the behavior she expects. Fixes bug 9354; bugfix on 0.2.4.8-alpha.
* | | | Fix invalid-read when a managed proxy configuration fails.George Kadianakis2013-07-31
|/ / /
* | | Avoid assertion failure on unexepcted address family in DNS reply.Nick Mathewson2013-07-26
| | | | | | | | | | | | Fixes bug 9337; bugfix on 0.2.4.7-alpha.
* | | Fix bug9309, and n_noncanonical count/continue codeNick Mathewson2013-07-23
| | | | | | | | | | | | | | | | | | | | | | | | When we moved channel_matches_target_addr_for_extend() into a separate function, its sense was inverted from what one might expect, and we didn't have a ! in one place where we should have. Found by skruffy.
* | | Merge remote-tracking branch 'public/bug9295_023' into maint-0.2.4Nick Mathewson2013-07-18
|\ \ \
| * | | Fix for bug 9295: Don't crash when running --hash-password.Nick Mathewson2013-07-18
| |/ / | | | | | | | | | | | | | | | Fix on 0.2.4.15-rc; I'm doing this branch against 0.2.3, since we're considering #9122 for an 0.2.3 backport, and if we do, we should merge this too.
* | | Re-do a cast in order to make old buggy freebsd gcc happyNick Mathewson2013-07-16
| | | | | | | | | | | | | | | | | | Fix for #9254. Bugfix on 0.2.4.14-alpha. This is not actually a bug in the Tor code.
* | | Merge branch 'bug9200' into maint-0.2.4Nick Mathewson2013-07-08
|\ \ \
| * | | FIx undefined behavior in dirvote.cNick Mathewson2013-07-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a bug in the voting algorithm that could yield incorrect results when a non-naming authority declared too many flags. Fixes bug 9200; bugfix on 0.2.0.3-alpha. Found by coverity scan.
generated by cgit v1.2.3 (git 2.45.0) at 2025-02-28 16:49:19 +0000