aboutsummaryrefslogtreecommitdiff
path: root/changes
Commit message (Collapse)AuthorAge
* Fix a remotely triggerable assertion failure (CVE-2012-2250)Nick Mathewson2012-10-23
| | | | | | | | | | | | | | If we completed the handshake for the v2 link protocol but wound up negotiating the wong protocol version, we'd become so confused about what part of the handshake we were in that we'd promptly die with an assertion. This is a fix for CVE-2012-2250; it's a bugfix on 0.2.3.6-alpha. All servers running that version or later should really upgrade. Bug and fix from "some guy from France." I tweaked his code slightly to make it log the IP of the offending node, and to forward-port it to 0.2.4.
* Use the same changes file for bug7191 as in 0.2.[23]Nick Mathewson2012-10-23
|
* Merge remote-tracking branch 'andrea/bug7191_v2'Nick Mathewson2012-10-23
|\
| * Rewrite smartlist_bsearch_idx() to not be broken for lists of length zero or ↵Andrea Shepard2012-10-23
| | | | | | | | one (fixes bug 7191)
* | Merge branch 'maint-0.2.3'Roger Dingledine2012-10-23
|\ \
| * | Let 0.2.3 clients exit to internal addresses if they wantRoger Dingledine2012-10-23
| | | | | | | | | | | | | | | | | | | | | Clients now consider the ClientRejectInternalAddresses config option when using a microdescriptor consensus stanza to decide whether an exit relay would allow exiting to an internal address. Fixes bug 7190; bugfix on 0.2.3.1-alpha.
* | | Roll enh6876 into Changelog for 0.2.4.4 alpha, which had the change but not ↵Nick Mathewson2012-10-23
| | | | | | | | | | | | the entry.
* | | Merge remote-tracking branch 'linus/enh6876_changes_file'Nick Mathewson2012-10-23
|\ \ \
| * | | Add changes file for ticket 6876 missing from 0.2.4.4-alpha ChangeLog.Linus Nordberg2012-10-22
| | | |
* | | | Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson2012-10-23
|\ \ \ \ | | |/ / | |/| / | |_|/ |/| |
| * | Fix parse_short_policy (bug 7192.)Nick Mathewson2012-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Our implementation of parse_short_policy was screwed up: it would ignore the last character of every short policy. Obviously, that's broken. This patch fixes the busted behavior, and adds a bunch of unit tests to make sure the rest of that function is okay. Fixes bug 7192; fix on 0.2.3.1-alpha.
| * | Merge branch 'block_renegotiate_023' into maint-0.2.3Nick Mathewson2012-10-19
| |\ \
| | * | Discard extraneous renegotiation attempts in the v3 link protocolNick Mathewson2012-10-17
| | | | | | | | | | | | | | | | | | | | | | | | Failure to do so left us open to a remotely triggerable assertion failure. Fixes CVE-2012-2249; bugfix on 0.2.3.6-alpha. Reported by "some guy from France".
* | | | Merge branch 'split_circuitbuild'Nick Mathewson2012-10-22
|\ \ \ \ | |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/circuitbuild.c There was a huge-looking conflict in circuitbuild.c, but the only change that had been made to circuitbuild.c since I forked off the split_circuitbuild branch was 17442560c44e8093f9a. So I took the split_circuitbuild version of the conflicting part, and manually re-applied the change from 17442560c44e8093f9a..
| * | | Move the circuit build timeout code into its own file.Nick Mathewson2012-10-15
| | | |
| * | | Split code for entry guards and bridges into a new module.Nick Mathewson2012-10-15
| | | |
* | | | fold in changes files for upcoming 0.2.4.4-alphaRoger Dingledine2012-10-20
| | | |
* | | | Merge branch 'block_renegotiate_024'Nick Mathewson2012-10-19
|\ \ \ \
| * | | | Discard extraneous renegotiation attempts in the v3 link protocolNick Mathewson2012-10-17
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Failure to do so left us open to a remotely triggerable assertion failure. Fixes CVE-2012-2249; bugfix on 0.2.3.6-alpha. Reported by "some guy from France". This patch is a forward-port to 0.2.4, to work with the new channel logic.
* | | | Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson2012-10-19
|\ \ \ \ | | |/ / | |/| |
| * | | Don't serve or accept v2 HS descs over a DirPortRobert Ransom2012-10-19
| | | | | | | | | | | | | | | | (changes file tweaked by nickm)
* | | | Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson2012-10-19
|\| | |
| * | | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson2012-10-19
| |\ \ \ | | |_|/ | |/| |
| | * | Disable TLS Session Tickets, which we were apparently getting for freeNick Mathewson2012-10-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenSSL 1.0.0 added an implementation of TLS session tickets, a "feature" that let session resumption occur without server-side state by giving clients an encrypted "ticket" that the client could present later to get the session going again with the same keys as before. OpenSSL was giving the keys to decrypt these tickets the lifetime of the SSL contexts, which would have been terrible for PFS if we had long-lived SSL contexts. Fortunately, we don't. Still, it's pretty bad. We should also drop these, since our use of the extension stands out with our non-use of session cacheing. Found by nextgens. Bugfix on all versions of Tor when built with openssl 1.0.0 or later. Fixes bug 7139.
| * | | Don't call fmt_addr() twice in a parameter list.George Kadianakis2012-10-09
| | | |
* | | | Remove changes/bug7129Nick Mathewson2012-10-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Our convention is that we use the changelog to note release-to-release changes; we don't need to add changelog entries for bugs that didn't appear in any released version of Tor. (By convention, we sometimes say "this bug does not appear in any released version of Tor" or words to that effect in the commit message so that when Roger goes to make sure the changelog is right, he knows not to expect a changelog entry for that part.)
* | | | Add changes file for bug 7129Andrea Shepard2012-10-17
| |_|/ |/| |
* | | Merge remote-tracking branch 'public/bug1031'Nick Mathewson2012-10-15
|\ \ \
| * | | Changes file for bug 1031 (reserved C identifiers)Nick Mathewson2012-10-12
| | | |
* | | | Merge remote-tracking branch 'arma/bug7029'Nick Mathewson2012-10-14
|\ \ \ \ | |/ / / |/| | |
| * | | Free some more still-in-use memory at exitRoger Dingledine2012-10-03
| | | |
* | | | Make tor_addr_is_internal log the calling function on errorNick Mathewson2012-10-12
| | | | | | | | | | | | | | | | This might make it a little easier to track down bug 7086.
* | | | Move all externally maintained source files into src/extNick Mathewson2012-10-11
| | | | | | | | | | | | | | | | | | | | | | | | The rationale for treating these files differently is that we should be checking upstream for changes as applicable, and merging changes upstream as warranted.
* | | | Merge branch 'bug7011'Nick Mathewson2012-10-10
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/circuitbuild.c The conflict was trivial, since no line of code actually changed in both branches: There was a fmt_addr() that turned into fmt_addrport() in bug7011, and a "if (!n_conn)" that turned into "if (!n_chan)" in master.
| * | | | Fix changes/bug7011 slightlyNick Mathewson2012-10-10
| | | | |
| * | | | Add changes file for bug7011.David Fifield2012-10-10
| | | | |
* | | | | Merge branch 'bug6816_squashed_nowarn' of git://git.torproject.org/nickm/torAndrea Shepard2012-10-10
|\ \ \ \ \ | |/ / / / |/| | | |
| * | | | Add changes file for bug6816Andrea Shepard2012-10-10
| | | | |
| * | | | Add changes file for channels (ticket 6465)Andrea Shepard2012-10-08
| | | | |
* | | | | Don't call fmt_addr() twice in a parameter list.George Kadianakis2012-10-09
| | | | |
* | | | | Downgrade "Failed to hand off onionskin" messagesRoger Dingledine2012-10-05
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | They're typically redundant with the "Your computer is too slow" messages. Fixes bug 7038; bugfix on 0.2.2.16-alpha. (In retrospect, we should have fixed this bug back in ticket 1042.)
* | | | Merge remote-tracking branch 'public/openssl_1_is_best'Nick Mathewson2012-10-04
|\ \ \ \
| * | | | Drop support for openssl 0.9.7Nick Mathewson2012-09-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 097 hasn't seen a new version since 2007; we can drop support too. This lets us remove our built-in sha256 implementation, and some checks for old bugs.
* | | | | Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson2012-10-04
|\ \ \ \ \ | | |_|/ / | |/| | |
| * | | | Merge remote-tracking branch 'arma/bug7037' into maint-0.2.3Nick Mathewson2012-10-04
| |\ \ \ \
| | * | | | Refuse extra create cells with reason "resource limit"Roger Dingledine2012-10-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the past we had used reason "internal", which is more vague than it needs to be. Resolves bug 7037.
* | | | | | Add autoconf magic to support BitrigNick Mathewson2012-10-04
| | | | | | | | | | | | | | | | | | | | | | | | Bitrig is an openbsd fork. Patch from dhill. Ticket 6982.
* | | | | | Merge remote-tracking branch 'linus/bug6757'Nick Mathewson2012-10-04
|\ \ \ \ \ \
| * | | | | | Have node_get_pref_orport() return an IPv6 OR port when UseBridges is set.Linus Nordberg2012-09-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We used to never return an IPv6 address unless ClientUseIPv6 was set. We should allow clients running with bridges use IPv6 OR ports even without setting ClientUseIPv6. Configuring an IPv6 address in a Bridge line should imply that. Fixes th second part of #6757.
* | | | | | | Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson2012-10-04
|\ \ \ \ \ \ \ | | |/ / / / / | |/| | | | |
generated by cgit v1.2.3 (git 2.45.0) at 2024-11-16 08:05:08 +0000