aboutsummaryrefslogtreecommitdiff
path: root/src/common
Commit message (Collapse)AuthorAge
...
* | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-01-18
|\ \ \ | |/ / |/| / | |/
| * Fix SOCKET_OK test on win64.Nick Mathewson2012-01-18
| | | | | | | | Bugfix on 0.2.2.29-beta; partial fix for 4533; found by wanoskarnet
* | Convert instances of tor_malloc+tor_snprintf into tor_asprintfNick Mathewson2012-01-16
| | | | | | | | | | | | | | | | | | | | These were found by looking for tor_snprintf() instances that were preceeded closely by tor_malloc(), though I probably converted some more snprintfs as well. (In every case, make sure that the length variable (if any) is removed, renamed, or lowered, so that anything else that might have assumed a longer buffer doesn't exist.)
* | Rename smartlist_{v,}asprintf_add to smartlist_add_{v,}asprintfNick Mathewson2012-01-16
| |
* | Make openssl 0.9.8l log message accurateNick Mathewson2012-01-11
| | | | | | | | fixes 4837
* | Merge branch 'feature3457-v4-nm-squashed'Nick Mathewson2012-01-11
|\ \ | | | | | | | | | | | | Conflicts: src/or/rendclient.c
| * | Use spaceless ISO8601 time format, not sec,usec.Nick Mathewson2012-01-11
| | |
* | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-01-11
|\ \ \ | | |/ | |/|
| * | Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson2012-01-11
| |\ \
| | * | Fix a compilation warning for our bug4822 fix on 64-bit linuxNick Mathewson2012-01-11
| | | |
* | | | Merge remote-tracking branch 'public/bug4650_nm_squashed'Nick Mathewson2012-01-10
|\ \ \ \
| * | | | Disallow disabling DisableDebuggerAttachment on runnning TorSebastian Hahn2012-01-04
| | | | | | | | | | | | | | | | | | | | | | | | | Also, have tor_disable_debugger_attach() return a tristate of success/failure/don't-know-how , and only log appropriately.
* | | | | whitespace and warning fixes for bug4746Nick Mathewson2012-01-10
| | | | |
* | | | | Merge remote-tracking branch 'asn-mytor/bug4746'Nick Mathewson2012-01-10
|\ \ \ \ \
| * | | | | Add an informative header on the 'keys/dynamic_dh_params' file.George Kadianakis2011-12-19
| | | | | |
* | | | | | Add missing documentation for counter-mode checksNick Mathewson2012-01-10
| | | | | |
* | | | | | Clean up indentation in aes.cNick Mathewson2012-01-10
| | | | | |
* | | | | | Test for broken counter-mode at runtimeNick Mathewson2012-01-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To solve bug 4779, we want to avoid OpenSSL 1.0.0's counter mode. But Fedora (and maybe others) lie about the actual OpenSSL version, so we can't trust the header to tell us if it's safe. Instead, let's do a run-time test to see whether it's safe, and if not, use our built-in version. fermenthor contributed a pretty essential fixup to this patch. Thanks!
* | | | | | We no longer need to detect openssl without RAND_poll()Nick Mathewson2012-01-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We require openssl 0.9.7 or later, and RAND_poll() was first added in openssl 0.9.6.
* | | | | | Add macros to construct openssl version numbersNick Mathewson2012-01-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's a pain to convert 0x0090813f to and from 0.9.8s-release on the fly, so these macros should help.
* | | | | | Make sure MAX_DNS_LABEL_SIZE is definedSebastian Hahn2012-01-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MAX_DNS_LABEL_SIZE was only defined for old versions of openssl, which broke the build. Spotted by xiando. Fixes bug 4413; not in any released version.
* | | | | | Tweaks for bug4413 fixNick Mathewson2012-01-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The thing that's limited to 63 bytes is a "label", not a hostname. Docment input constraints and behavior on bogus inputs. Generally it's better to check for overflow-like conditions before than after. In this case, it's not a true overflow, so we're okay, but let's be consistent. pedantic less->fewer in the documentation
* | | | | | Remove (untriggerable) overflow in crypto_random_hostname()Stephen Palmateer2012-01-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes bug 4413; bugfix on xxxx. Hostname components cannot be larger than 63 characters. This simple check makes certain randlen cannot overflow rand_bytes_len.
* | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-01-09
|\ \ \ \ \ \ | | |_|/ / / | |/| | | |
| * | | | | Fix comment about TLSv1_method() per comments by wanoskarnetNick Mathewson2012-01-09
| | | | | |
* | | | | | Merge branch 'maint-0.2.2'Roger Dingledine2012-01-08
|\| | | | |
| * | | | | add a note from wanoskarnetRoger Dingledine2012-01-08
| | | | | | | | | | | | | | | | | | | | | | | | he disagrees about what the code that we decided not to use would do
* | | | | | Change to use SSL_state_string_long() instead of homebrew ↵Emile Snyder2012-01-06
| | | | | | | | | | | | | | | | | | | | | | | | ssl_state_to_string() function.
* | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-01-05
|\| | | | |
| * | | | | Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson2012-01-05
| |\ \ \ \ \ | | | |_|/ / | | |/| | |
| | * | | | Log at info level when disabling SSLv3Robert Ransom2012-01-05
| | | | | |
| | * | | | Disable SSLv3 when using a not-up-to-date opensslNick Mathewson2012-01-05
| | | | | | | | | | | | | | | | | | | | | | | | This is to address bug 4822, and CVE-2011-4576.
* | | | | | note some dead code. if i'm right, should this be removed?Roger Dingledine2012-01-05
| |_|_|/ / |/| | | |
* | | | | Fix a check-spaces violation in compat.cSebastian Hahn2011-12-30
| | | | | | | | | | | | | | | | | | | | Also fix a comment typo
* | | | | Add interface enumeration based on SIOCGIFCONF for older unixesNick Mathewson2011-12-28
| | | | |
* | | | | Multicast addresses, if any were configured, would not be good if addrsNick Mathewson2011-12-28
| | | | |
* | | | | Use getifaddrs, not connect+getsockname, to find our addressNick Mathewson2011-12-28
| | | | | | | | | | | | | | | | | | | | | | | | | This resolves bug1827, and lets us avoid freaking people out. Later, we can use it to get a complete list of our interfaces.
* | | | | Require openssl 1.0.0a for using openssl's ctr-mode implementationNick Mathewson2011-12-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously we required 1.0.0, but there was a bug in the 1.0.0 counter mode. Found by Pascal. Fixes bug 4779. A more elegant solution would be good here if somebody has time to code one.
* | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2011-12-26
|\| | | |
| * | | | Provide correct timeradd/timersup replacementsSebastian Hahn2011-12-25
| | | | | | | | | | | | | | | | | | | | Bug caught and patch provided by Vektor. Fixes bug 4778.t
* | | | | Prepend cwd for relative config file paths.Kamran Riaz Khan2011-12-22
| |_|/ / |/| | | | | | | | | | | | | | | Modifies filenames which do not start with '/' or '.' on non-Windows platforms; uses _fullpath on Windows.
* | | | Don't crash on startup of a dormant relayRobert Ransom2011-12-12
| | | | | | | | | | | | | | | | | | | | | | | | If a relay is dormant at startup, it will call init_keys before crypto_set_tls_dh_prime. This is bad. Let's make it not so bad, because someday it *will* happen again.
* | | | Some more check-spaces stuffSebastian Hahn2011-12-08
| | | | | | | | | | | | | | | | | | | | | | | | This re-applies a check-spaces fix that was part of 7920ea55b8d994268d2b07f27316b0f34d8f27e5 and got reverted along with the rest of that commit in df1f72329acf5f555618a5309f2621e584c0d763.
* | | | indent; add commentNick Mathewson2011-12-08
| | | | | | | | | | | | | | | | | | | | | | | | This re-applies 40a87c4c08be0cdd87a3df283f285b3c2a0c8445 which got accidentally reverted in 75134c6c86e54c10fd9e11c4345aadcdabc0f8fb. Thanks asn for spotting this.
* | | | appease check-spacesSebastian Hahn2011-12-08
| | | | | | | | | | | | | | | | | | | | | | | | This re-applies f77f9bddb8bf0dd6e9c3e0d94269aa23f459a272 which got accidentally reverted in 53f535aeb863204470379b2da4631770fa10b13f. Thanks asn for spotting this.
* | | | Revert "Refactor the SSL_set_info_callback() callbacks."Nick Mathewson2011-12-06
| | | | | | | | | | | | | | | | This reverts commit 69a821ea1c9357acdd5aa1c9e23fd030b01cb5a9.
* | | | Revert "Detect renegotiation when it actually happens."Nick Mathewson2011-12-06
| | | | | | | | | | | | | | | | This reverts commit 4fd79f9def28996552b5739792f428c2514de1f6.
* | | | Revert "Detect and deny excess renegotiations attempts."Nick Mathewson2011-12-06
| | | | | | | | | | | | | | | | This reverts commit ecd239e3b577705e0669d47293a2e755cf93cec0.
* | | | Revert "Get rid of tor_tls_block_renegotiation()."Nick Mathewson2011-12-06
| | | | | | | | | | | | | | | | This reverts commit 340809dd224b244675496e301d3ba154a6fe68d0.
* | | | Revert "Also handle needless renegotiations in SSL_write()."Nick Mathewson2011-12-06
| | | | | | | | | | | | | | | | This reverts commit e2b3527106e0747f652e2f28fa087d9874e0e2ce.
generated by cgit v1.2.3 (git 2.45.0) at 2025-02-20 19:49:15 +0000