| Commit message (Expand) | Author | Age |
|---|
| * | Fix bridge statistics.•••Fix statistics on client numbers by country as seen by bridges that were
broken in 0.2.2.1-alpha. Also switch to reporting full 24-hour intervals
instead of variable 12-to-48-hour intervals.
| Karsten Loesing | 2009-12-17 |
| * | Merge branch 'safelogging2'•••Conflicts:
ChangeLog
| Nick Mathewson | 2009-12-15 |
| |\ |
|
| | * | Refactor the safe_str_*() API to make more sense.•••The new rule is: safe_str_X() means "this string is a piece of X
information; make it safe to log." safe_str() on its own means
"this string is a piece of who-knows-what; make it safe to log".
| Nick Mathewson | 2009-12-15 |
| | * | Cache the parsed value of SafeLogging as an enum. | Nick Mathewson | 2009-12-12 |
| | * | Allow SafeLogging to exclude client related information | Sebastian Hahn | 2009-12-12 |
| * | | Stop using lround in or.h, and check for bad values of RECENT_CIRCUITS | Nick Mathewson | 2009-12-15 |
| * | | Merge branch 'mathlog' | Nick Mathewson | 2009-12-15 |
| |\ \ |
|
| | * | | Refactor a bit so that it is safe to include math.h, and mostly not needed. | Nick Mathewson | 2009-12-15 |
| | |/ |
|
| * / | New controller command "getinfo config-text"•••It returns the contents that Tor would write if you send it a SAVECONF
command, so the controller can write the file to disk itself.
| Roger Dingledine | 2009-12-13 |
| |/ |
|
| * | New config option "CircuitStreamTimeout"•••New config option "CircuitStreamTimeout" to override our internal
timeout schedule for how many seconds until we detach a stream from
a circuit and try a new circuit. If your network is particularly
slow, you might want to set this to a number like 60.
| Roger Dingledine | 2009-11-21 |
| * | Implement DisableAllSwap to avoid putting secret info in page files.•••This commit implements a new config option: 'DisableAllSwap'
This option probably only works properly when Tor is started as root.
We added two new functions: tor_mlockall() and tor_set_max_memlock().
tor_mlockall() attempts to mlock() all current and all future memory pages.
For tor_mlockall() to work properly we set the process rlimits for memory to
RLIM_INFINITY (and beyond) inside of tor_set_max_memlock().
We behave differently from mlockall() by only allowing tor_mlockall() to be
called one single time. All other calls will result in a return code of 1.
It is not possible to change DisableAllSwap while running.
A sample configuration item was added to the torrc.complete.in config file.
A new item in the man page for DisableAllSwap was added.
Thanks to Moxie Marlinspike and Chris Palmer for their feedback on this patch.
Please note that we make no guarantees about the quality of your OS and its
mlock/mlockall implementation. It is possible that this will do nothing at all.
It is also possible that you can ulimit the mlock properties of a given user
such that root is not required. This has not been extensively tested and is
unsupported. I have included some comments for possible ways we can handle
this on win32.
| Jacob Appelbaum | 2009-10-27 |
| * | Fix bug 1113.•••Bridges do not use the default exit policy, but reject *:* by default.
| Karsten Loesing | 2009-10-27 |
| * | Fix compile with warnings problems on Snow Leopard | Sebastian Hahn | 2009-10-19 |
| * | Add functions to serve microdescs and flavored consensuses. | Nick Mathewson | 2009-10-18 |
| * | Document the microdescriptor code better. | Nick Mathewson | 2009-10-18 |
| * | Fix various bugs in microdescriptor caching. | Nick Mathewson | 2009-10-18 |
| * | Actually remember all the consensus types when we are done generating them. | Nick Mathewson | 2009-10-15 |
| * | Parse detached signatures and microdesc networkstatuses correctly. | Nick Mathewson | 2009-10-15 |
| * | Implement signatures for microdesc consensuses right.•••This means we need to handle the existence of multiple flavors of signature
in a detached signatures document, generate them correctly, and so on.
| Nick Mathewson | 2009-10-15 |
| * | Generate all the flavors of consensuses when building consensuses. | Nick Mathewson | 2009-10-15 |
| * | Refactor consensus signature storage for multiple digests and flavors.•••This patch introduces a new type called document_signature_t to represent the
signature of a consensus document. Now, each consensus document can have up
to one document signature per voter per digest algorithm. Also, each
detached-signatures document can have up to one signature per <voter,
algorithm, flavor>.
| Nick Mathewson | 2009-10-15 |
| * | Code to generate, store, and parse microdescriptors and consensuses.•••The consensus documents are not signed properly, not served, and not
exchanged yet.
| Nick Mathewson | 2009-10-15 |
| * | Add ability to parse one or more m line from a vote. | Nick Mathewson | 2009-10-15 |
| * | Functions to encode microdescriptors and their lines. | Nick Mathewson | 2009-10-15 |
| * | Make signature-generation code handle different key and digest lengths. | Nick Mathewson | 2009-10-15 |
| * | Merge commit 'public/android' | Nick Mathewson | 2009-10-11 |
| |\ |
|
| | * | Include util.h and log.h as relative paths.•••This shouldn't be necessary, but apparently the Android cross-compiler
doesn't respect -I as well as it should. (-I is supposed to add to the
*front* of the search path. Android's gcc wrapper apparently likes to add to
the end. This is broken, but we need to work around it.)
| Nathan Freitas | 2009-09-29 |
| * | | Tweak values for when to discard all of our history.•••This seems to be happening to me a lot on a garbage DSL line.
We may need to come up with 2 threshholds: a high short onehop
count and a lower longer count.
| Mike Perry | 2009-10-07 |
| |/ |
|
| * | Fix a couple of smaller issues with gathering statistics.•••- Avoid memmoving 0 bytes which might lead to compiler warnings.
- Don't require relays to be entry node AND bridge at the same to time to
record clients.
- Fix a memory leak when writing dirreq-stats.
- Don't say in the stats files that measurement intervals are twice as long
as they really are.
- Reduce minimum observation time for requests to 12 hours, or we might
never record usage.
- Clear exit stats correctly after writing them, or we accumulate old stats
over time.
- Reset interval start for buffer stats, too.
| Karsten Loesing | 2009-09-24 |
| * | Fix typos and comments, plus two bugs•••A) We were considering a circuit had timed out in the special cases
where we close rendezvous circuits because the final rendezvous
circuit couldn't be built in time.
B) We were looking at the wrong timestamp_created when considering
a timeout.
| Roger Dingledine | 2009-09-20 |
| * | Implement and document new network liveness algorithm.•••Based on irc discussion with arma.
| Mike Perry | 2009-09-20 |
| * | Fix some precision-related asserts in unit tests.•••Mostly by storing the timeout as milliseconds and not seconds
internally.
| Mike Perry | 2009-09-20 |
| * | give proposal 151 a changelog and other touchups | Roger Dingledine | 2009-09-17 |
| * | Clarify use of magic number 0.98 with #define. | Mike Perry | 2009-09-16 |
| * | Change liveness value to be a function of the timeout.•••And also the number of recent circuits used to decide
when the network changes.
| Mike Perry | 2009-09-16 |
| * | Add log message so we have accurate build time values. | Mike Perry | 2009-09-16 |
| * | Address nickm's issues from his review #1. | Mike Perry | 2009-09-16 |
| * | Move circuitbuildtimeout config check.•••We want it to be under our control so it doesn't mess
up initialization. This is likely the cause for
the bug the previous assert-adding commit (09a75ad) was
trying to address.
| Mike Perry | 2009-09-16 |
| * | Document functions and constants. | Mike Perry | 2009-09-16 |
| * | space/indent cleanups, plus point out three bugs | Roger Dingledine | 2009-09-16 |
| * | Use our variable directly for timeout.•••Using CircuitBuildTimeout is prone to issues with SIGHUP, etc.
Also, shuffle the circuit build times array after loading it
in so that newer measurements don't replace chunks of
similarly timed measurements.
| Mike Perry | 2009-09-16 |
| * | Fix a couple of assert bugs. | Mike Perry | 2009-09-16 |
| * | Fix timeout edge case when we get enough samples.•••Also switch Xm calculation to mode, not min.
| Mike Perry | 2009-09-16 |
| * | Fix the math.h log() conflict.•••It was compiling, but causing segfaults.
Also, adjust when the timer starts for new test circs
and save state every 25 circuits.
| Mike Perry | 2009-09-16 |
| * | Recover from changing network connections.•••Also add code to keep creating circuits every minute until we
hit our minimum threshhold.
| Mike Perry | 2009-09-16 |
| * | Write unit tests and fix issues they uncovered. | Mike Perry | 2009-09-16 |
| * | Implement the pareto fitting and timeout calculating bits. | Mike Perry | 2009-09-16 |
| * | Clean up Fallon's partially complete GSoC project.•••The code actually isn't that bad. It's a shame she didn't finish.
Using it as the base for this feature.
| Mike Perry | 2009-09-16 |
| * | Read "circwindow=x" from the consensus and use it•••Tor now reads the "circwindow" parameter out of the consensus,
and uses that value for its circuit package window rather than the
default of 1000 cells. Begins the implementation of proposal 168.
| Roger Dingledine | 2009-09-15 |
| * | ConsensusParams config option lists key=value params•••finishes the authority-operator interface side of proposal 167.
| Roger Dingledine | 2009-09-15 |