aboutsummaryrefslogtreecommitdiff
path: root/changes
Commit message (Collapse)AuthorAge
* Remove the timestamp from AUTHENTICATE cells; replace with random bytesNick Mathewson2013-09-20
| | | | | | | | | | | This isn't actually much of an issue, since only relays send AUTHENTICATE cells, but while we're removing timestamps, we might as well do this too. Part of proposal 222. I didn't take the approach in the proposal of using a time-based HMAC, since that was a bad-prng-mitigation hack from SSL3, and in real life, if you don't have a good RNG, you're hopeless as a Tor server.
* Get ready to stop sending timestamps in INTRODUCE cellsNick Mathewson2013-09-20
| | | | | | | | For now, round down to the nearest 10 minutes. Later, eliminate entirely by setting a consensus parameter. (This rounding is safe because, in 0.2.2, where the timestamp mattered, REND_REPLAY_TIME_INTERVAL was a nice generous 60 minutes.)
* Stop sending the current time in client NETINFO handshakes.Nick Mathewson2013-09-20
| | | | Implements part of proposal 222.
* Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-09-16
|\
| * Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson2013-09-16
| |\
| | * Update to the September 2013 GeoIP database.Karsten Loesing2013-09-10
| | |
* | | collect and log statistics about onionskins received/processedRoger Dingledine2013-09-05
| | | | | | | | | | | | | | | | | | | | | we skip onionskins that came from non-relays, so we're less likely to run into privacy troubles. starts to implement ticket 9658.
* | | add a changes entry for ticket 9574Roger Dingledine2013-09-04
| | |
* | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-09-04
|\| | | | | | | | | | | | | | Conflicts: src/or/circuitbuild.c
| * | use !cbt_disabled in place of LearnCBT to avoid needless circsNick Mathewson2013-09-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This would make us do testing circuits "even when cbt is disabled by consensus, or when we're a directory authority, or when we've failed to write cbt history to our state file lately." (Roger's words.) This is a fix for 9671 and an improvement in our fix for 5049. The original misbehavior was in 0.2.2.14-alpha; the incomplete fix was in 0.2.3.17-beta.
| * | Merge remote-tracking branch 'public/bug9546_023_v2' into maint-0.2.3Nick Mathewson2013-08-25
| |\ \
| | * | Make bridges send AUTH_CHALLENGE cellsNick Mathewson2013-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The spec requires them to do so, and not doing so creates a situation where they can't send-test because relays won't extend to them because of the other part of bug 9546. Fixes bug 9546; bugfix on 0.2.3.6-alpha.
* | | | Merge branch 'bug9400_024_squashed' into maint-0.2.4Nick Mathewson2013-09-03
|\ \ \ \
| * | | | Avoid a double-close on one failing case of the socketpair replacement codeNick Mathewson2013-09-03
| | | | | | | | | | | | | | | | | | | | | | | | | Fix for bug 9400, spotted by coverity. Bug introduced in revision 2cb4f7a4 (subversion revision r389).
* | | | | Merge remote-tracking branch 'public/bug9546_v2' into maint-0.2.4Nick Mathewson2013-08-25
|\ \ \ \ \
| * | | | | Make bridges send AUTH_CHALLENGE cellsNick Mathewson2013-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The spec requires them to do so, and not doing so creates a situation where they can't send-test because relays won't extend to them because of the other part of bug 9546. Fixes bug 9546; bugfix on 0.2.3.6-alpha.
| * | | | | Send NETINFO on receiving a NETINFO if we have not yet sent one.Nick Mathewson2013-08-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Relays previously, when initiating a connection, would only send a NETINFO after sending an AUTHENTICATE. But bridges, when receiving a connection, would never send AUTH_CHALLENGE. So relays wouldn't AUTHENTICATE, and wouldn't NETINFO, and then bridges would be surprised to be receiving CREATE cells on a non-open circuit. Fixes bug 9546.
* | | | | | Merge remote-tracking branch 'public/bug9366' into maint-0.2.4Nick Mathewson2013-08-25
|\ \ \ \ \ \
| * | | | | | Don't allow all ORPort values to be NoAdvertiseNick Mathewson2013-08-05
| | |/ / / / | |/| | | | | | | | | | | | | | | | Fix for bug #9366
* | | | | | Merge remote-tracking branch 'public/bug9543' into maint-0.2.4Nick Mathewson2013-08-25
|\ \ \ \ \ \
| * | | | | | Add a 30-day maximum on user-supplied MaxCircuitDirtinessNick Mathewson2013-08-21
| | |/ / / / | |/| | | | | | | | | | | | | | | | Fix for bug 9543.
* | | | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-08-22
|\ \ \ \ \ \ | |/ / / / / |/| | / / / | | |/ / / | |/| | |
| * | | | Replace return with continue in update_consensus_networkstatus_downloadsNick Mathewson2013-08-22
| | |/ / | |/| | | | | | | | | | Fix for bug 9564; bugfix on 0.2.3.14-alpha.
* | | | Document the correct loglevel for the heartbeat messageNick Mathewson2013-08-16
| | | |
* | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-08-12
|\| | |
| * | | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson2013-08-12
| |\ \ \ | | | |/ | | |/|
| | * | Update to the August 2013 GeoIP database.Karsten Loesing2013-08-12
| | | |
* | | | Fix an uninitialized-read when parsing v3 introduction requests.Nick Mathewson2013-08-10
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | Fortunately, later checks mean that uninitialized data can't get sent to the network by this bug. Unfortunately, reading uninitialized heap *can* (in some cases, with some allocators) cause a crash if you get unlucky and go off the end of a page. Found by asn. Bugfix on 0.2.4.1-alpha.
* | | Merge remote-tracking branch 'arma/bug9354' into maint-0.2.4Nick Mathewson2013-07-31
|\ \ \
| * | | NumDirectoryGuards now tracks NumEntryGuards by defaultRoger Dingledine2013-07-30
| | | | | | | | | | | | | | | | | | | | Now a user who changes only NumEntryGuards will get the behavior she expects. Fixes bug 9354; bugfix on 0.2.4.8-alpha.
* | | | Fix invalid-read when a managed proxy configuration fails.George Kadianakis2013-07-31
|/ / /
* | | Avoid assertion failure on unexepcted address family in DNS reply.Nick Mathewson2013-07-26
| | | | | | | | | | | | Fixes bug 9337; bugfix on 0.2.4.7-alpha.
* | | Fix bug9309, and n_noncanonical count/continue codeNick Mathewson2013-07-23
| | | | | | | | | | | | | | | | | | | | | | | | When we moved channel_matches_target_addr_for_extend() into a separate function, its sense was inverted from what one might expect, and we didn't have a ! in one place where we should have. Found by skruffy.
* | | Merge remote-tracking branch 'public/bug9295_023' into maint-0.2.4Nick Mathewson2013-07-18
|\ \ \
| * | | Fix for bug 9295: Don't crash when running --hash-password.Nick Mathewson2013-07-18
| |/ / | | | | | | | | | | | | | | | Fix on 0.2.4.15-rc; I'm doing this branch against 0.2.3, since we're considering #9122 for an 0.2.3 backport, and if we do, we should merge this too.
* | | Re-do a cast in order to make old buggy freebsd gcc happyNick Mathewson2013-07-16
| | | | | | | | | | | | | | | | | | Fix for #9254. Bugfix on 0.2.4.14-alpha. This is not actually a bug in the Tor code.
* | | Merge branch 'bug9200' into maint-0.2.4Nick Mathewson2013-07-08
|\ \ \
| * | | FIx undefined behavior in dirvote.cNick Mathewson2013-07-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a bug in the voting algorithm that could yield incorrect results when a non-naming authority declared too many flags. Fixes bug 9200; bugfix on 0.2.0.3-alpha. Found by coverity scan.
* | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-07-08
|\ \ \ \ | |/ / / |/| / / | |/ /
| * | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson2013-07-08
| |\|
| | * Update to the July 2013 GeoIP database.Karsten Loesing2013-07-08
| | |
* | | Give a warning when bufferevents are enabled.Nick Mathewson2013-06-29
| | | | | | | | | | | | Ticket 9147.
* | | Fix bug 9122: don't allow newdefaultoptions to be NULLNick Mathewson2013-06-24
| | | | | | | | | | | | | | | | | | | | | (This caused a crash that was reported as bug 9122, but the underlying behavior has been wrong for a while.) Fix on 0.2.3.9-alpha.
* | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2013-06-18
|\| | | | | | | | | | | | | | | | | Conflicts: src/or/config.c src/or/relay.c
| * | Merge branch 'bug9063_redux_023_squashed' into maint-0.2.3Nick Mathewson2013-06-18
| |\ \
| | * | Implement a real OOM-killer for too-long circuit queues.Nick Mathewson2013-06-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This implements "algorithm 1" from my discussion of bug #9072: on OOM, find the circuits with the longest queues, and kill them. It's also a fix for #9063 -- without the side-effects of bug #9072. The memory bounds aren't perfect here, and you need to be sure to allow some slack for the rest of Tor's usage. This isn't a perfect fix; the rest of the solutions I describe on codeable.
| * | | Limit hidden service descriptors to at most 10 guard nodes.Nick Mathewson2013-06-16
| |/ / | | | | | | | | | | | | Fixes bug 9002; bugfix on 0.1.1.11-alpha (which introduced guard nodes), or on 0.0.6pre1 (which introduced hidden services).
* | | Merge branch 'bug9072-023' into bug9072-024Andrea Shepard2013-06-15
|\| |
| * | Disable middle relay queue overfill detection code due to possible guard ↵Andrea Shepard2013-06-15
| | | | | | | | | | | | discovery attack
| * | Don't queue more cells as a middle relay than the spec allows to be in flightAndrea Shepard2013-06-13
| | |
generated by cgit v1.2.3 (git 2.45.0) at 2024-11-29 06:57:16 +0000