aboutsummaryrefslogtreecommitdiff
path: root/changes
Commit message (Collapse)AuthorAge
* Fix documentation of torrc search orderNick Mathewson2014-04-01
| | | | | | | | | | We are searching @CONFDIR@ before $HOME, but the documentation implied otherwise. I screwed this up in f5e86bcd6c06d43ff3af5acd8135bd8b577bc3, when I first documented the $HOME/.torrc possibility. Fix for bug 9213; bugfix on 0.2.3.18-rc.
* Fix unittest compilation with --disable-curve25519Nick Mathewson2014-03-20
| | | | | | | This is a fix for 9700, which we already fixed in 0.2.5.x, but which got left in 0.2.4.x. This is a partial backport of a0a855d586d99540277014ccd3
* Correct the URL in the "a relay on win95???" messageNick Mathewson2014-03-06
| | | | | | This is a fix for 9393; it's not a bugfix on any Tor version per se, but rather on whatever Tor version was current when we reorganized the wiki.
* Merge remote-tracking branch 'public/no_itime_queue' into maint-0.2.4Nick Mathewson2014-02-25
|\
| * Excise the insertion_time_elem_t logicNick Mathewson2014-02-10
| | | | | | | | | | | | It's now redundant with the inserted_time field in packed_cell_t Fixes bug 10870.
* | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2014-02-25
|\ \
| * | Fix geoip by falling back to registered countries.Karsten Loesing2014-02-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See 1d2179bc900f1646a5491b65294e78b175e70056 in master for details. """ Fall back to registered country if necessary. When extracting geoip and geoip6 files from MaxMind's GeoLite2 Country database, we only look at country->iso_code which is the two-character ISO 3166-1 country code of the country where MaxMind believes the end user is located. But if MaxMind thinks a range belongs to anonymous proxies, they don't put anything there. Hence, we omit those ranges and resolve them all to '??'. That's not what we want. What we should do is first try country->iso_code, and if there's no such key, try registered_country->iso_code which is the country in which the ISP has registered the IP address. In short: let's fill all A1 entries with what ARIN et. al think. """
* | | Merge remote-tracking branch 'public/feature9777_024_squashed' into maint-0.2.4Nick Mathewson2014-02-24
|\ \ \
| * | | Discard circuit paths on which nobody supports ntorNick Mathewson2014-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Right now this accounts for about 1% of circuits over all, but if you pick a guard that's running 0.2.3, it will be about 6% of the circuits running through that guard. Making sure that every circuit has at least one ntor link means that we're getting plausibly good forward secrecy on every circuit. This implements ticket 9777,
* | | | add changes file for bug 10929Nick Mathewson2014-02-17
| | | |
* | | | Merge remote-tracking branch 'karsten/geoip6-feb2014' into maint-0.2.4Nick Mathewson2014-02-15
|\ \ \ \
| * | | | Update geoip6 to the February 2014 GeoIP database.Karsten Loesing2014-02-13
| | | | |
* | | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2014-02-15
|\ \ \ \ \ | | |_|/ / | |/| | |
| * | | | Merge remote-tracking branch 'karsten/geoip-feb2014' into maint-0.2.3Nick Mathewson2014-02-15
| |\ \ \ \
| | * | | | Update to the February 2014 GeoIP database.Karsten Loesing2014-02-08
| | | | | |
* | | | | | changes file for bug 10904Nick Mathewson2014-02-14
| |_|/ / / |/| | | |
* | | | | Merge branch 'bug10777_netunreach_024' into maint-0.2.4Nick Mathewson2014-02-11
|\ \ \ \ \
| * | | | | update changes fileNick Mathewson2014-02-11
| | | | | |
| * | | | | Call ENETUNREACH a case of NOROUTE, not a case of INTERNAL.Nick Mathewson2014-02-09
| | |_|_|/ | |/| | | | | | | | | | | | | Found by cypherpunks; fix for a part of bug 10777; bugfix on 0.1.0.1-rc.
* / | | | Don't treat END_STREAM_REASON_INTERNAL as total circuit failureNick Mathewson2014-02-09
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | It can happen because we sent something that got an ENETUNREACH response. Bugfix on 0.2.4.8-alpha; fixes a part of bug 10777.
* | | / Survive fedora's openssl in our benchmarksNick Mathewson2014-02-07
| |_|/ |/| | | | | | | | | | | | | | | | | | | | Apparently fedora currently has ECDH but not P224. This isn't a huge deal, since we no longer use OpenSSL's P224 ever (see #9780 and 72c1e5acfe1c6). But we shouldn't have segfaulting benchmarks really. Fixes bug 10835; bugfix on 0.2.4.8-alpha.
* | | Attribute bug 9602 to a version.Nick Mathewson2014-02-07
| | |
* | | NULL out conns on tlschans when freeing in case channel_run_cleanup() is ↵Andrea Shepard2014-02-06
| | | | | | | | | | | | late; fixes bug 9602
* | | Merge remote-tracking branch 'public/bug9716_024' into maint-0.2.4Nick Mathewson2014-02-06
|\ \ \
| * | | Try using INT_MAX, not SOMAXCONN, to set listen() backlog.Nick Mathewson2013-09-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fall back to SOMAXCONN if INT_MAX doesn't work. We'd like to do this because the actual maximum is overrideable by the kernel, and the value in the header file might not be right at all. All implementations I can find out about claim that this is supported. Fix for 9716; bugfix on every Tor.
* | | | changelog for 10793Nick Mathewson2014-02-06
| | | |
* | | | Deliver circuit handshake counts as part of the heartbeatNick Mathewson2014-02-06
| | | | | | | | | | | | | | | | | | | | | | | | Previously, they went out once an hour, unconditionally. Fixes 10485; bugfix on 0.2.4.17-rc.
* | | | Clarify DirPort multiplicityNick Mathewson2013-12-23
| | | | | | | | | | | | | | | | Fix for #10470 as suggested by arma
* | | | Fix automapping to ipv6Nick Mathewson2013-12-22
| | | | | | | | | | | | | | | | Bugfix on 0.2.4.7-alpha; fixes bug 10465.
* | | | Fix a logic error in circuit_stream_is_being_handled.Nick Mathewson2013-12-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When I introduced the unusable_for_new_circuits flag in 62fb209d837f3f551, I had a spurious ! in the circuit_stream_is_being_handled loop. This made us decide that non-unusable circuits (that is, usable ones) were the ones to avoid, and caused it to launch a bunch of extra circuits. Fixes bug 10456; bugfix on 0.2.4.12-alpha.
* | | | Never allow OpenSSL engines to replace the RAND_SSLeay methodNick Mathewson2013-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes bug 10402, where the rdrand engine would use the rdrand instruction, not as an additional entropy source, but as a replacement for the entire userspace PRNG. That's obviously stupid: even if you don't think that RDRAND is a likely security risk, the right response to an alleged new alleged entropy source is never to throw away all previously used entropy sources. Thanks to coderman and rl1987 for diagnosing and tracking this down.
* | | | Merge branch 'bug10423' into maint-0.2.4Nick Mathewson2013-12-17
|\ \ \ \
| * | | | Avoid double-free on failure to dump_descriptor() a cached mdNick Mathewson2013-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a fix for 10423, which was introducd in caa0d15c in 0.2.4.13-alpha. Spotted by bobnomnom.
* | | | | Merge remote-tracking branch 'public/bug10409_023' into maint-0.2.4Nick Mathewson2013-12-17
|\ \ \ \ \ | |/ / / / |/| | | |
| * | | | Avoid free()ing from an mmap on corrupted microdesc cacheNick Mathewson2013-12-16
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 'body' field of a microdesc_t holds a strdup()'d value if the microdesc's saved_location field is SAVED_IN_JOURNAL or SAVED_NOWHERE, and holds a pointer to the middle of an mmap if the microdesc is SAVED_IN_CACHE. But we weren't setting that field until a while after we parsed the microdescriptor, which left an interval where microdesc_free() would try to free() the middle of the mmap(). This patch also includes a regression test. This is a fix for #10409; bugfix on 0.2.2.6-alpha.
* | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-11-15
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/or.h src/or/relay.c Conflicts were simple to resolve. More fixes were needed for compilation, including: reinstating the tv_to_msec function, and renaming *_conn_cells to *_chan_cells.
| * | | Improved circuit queue out-of-memory handlerNick Mathewson2013-11-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously, when we ran low on memory, we'd close whichever circuits had the most queued cells. Now, we close those that have the *oldest* queued cells, on the theory that those are most responsible for us running low on memory, and that those are the least likely to actually drain on their own if we wait a little longer. Based on analysis from a forthcoming paper by Jansen, Tschorsch, Johnson, and Scheuermann. Fixes bug 9093.
* | | | missing changes file for #10124Nick Mathewson2013-11-11
| | | |
* | | | Merge remote-tracking branch 'public/bug9645' into maint-0.2.4Nick Mathewson2013-10-31
|\ \ \ \
| * | | | Fix bug 9645: don't forget an md just because we can't save it.Nick Mathewson2013-09-03
| | | | |
* | | | | Merge remote-tracking branch 'public/bug9731b' into maint-0.2.4Nick Mathewson2013-10-31
|\ \ \ \ \
| * | | | | Don't apply read/write buckets to cpuworker connectionsNick Mathewson2013-09-13
| | | | | | | | | | | | | | | | | | | | | | | | Fixes bug 9731
* | | | | | Merge remote-tracking branch 'public/bug9780_024_v2' into maint-0.2.4Nick Mathewson2013-10-31
|\ \ \ \ \ \
| * | | | | | Switch ECDHE group default logic for bridge/relay TLSNick Mathewson2013-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to the manpage, bridges use P256 for conformity and relays use P224 for speed. But skruffy points out that we've gotten it backwards in the code. In this patch, we make the default P256 for everybody. Fixes bug 9780; bugfix on 0.2.4.8-alpha.
* | | | | | | Merge remote-tracking branch 'public/bug6055_v2_024' into maint-0.2.4Nick Mathewson2013-10-31
|\ \ \ \ \ \ \
| * | | | | | | Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1eNick Mathewson2013-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To fix #6033, we disabled TLS 1.1 and 1.2. Eventually, OpenSSL fixed the bug behind #6033. I've considered alternate implementations that do more testing to see if there's secretly an OpenSSL 1.0.1c or something that secretly has a backport of the OpenSSL 1.0.1e fix, and decided against it on the grounds of complexity.
* | | | | | | | be willing to bootstrap from all three of our directory guardsRoger Dingledine2013-10-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also fix a bug where if the guard we choose first doesn't answer, we would try the second guard, but once we connected to the second guard we would abandon it and retry the first one, slowing down bootstrapping. The fix in both cases is to treat all our initially chosen guards as acceptable to use. Fixes bug 9946.
* | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-10-11
|\ \ \ \ \ \ \ \ | | |_|_|_|/ / / | |/| | | | | |
| * | | | | | | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson2013-10-11
| |\ \ \ \ \ \ \ | | | |_|_|_|_|/ | | |/| | | | |
| | * | | | | | Update to the October 2013 GeoIP database.Karsten Loesing2013-10-11
| | | | | | | |
generated by cgit v1.2.3 (git 2.25.4) at 2024-06-20 06:33:19 +0000