aboutsummaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAge
* Build correctly with Libevent 2.0.4-alpha and laterNick Mathewson2010-02-15
|
* Remove the --enable-iphone option as needless.Nick Mathewson2010-02-12
| | | | | On or-talk, Marco Bonetti reports that recent iPhone SDKs build Tor fine without it.
* Add Windows version detection for Vista and 7Sebastian Hahn2010-02-10
| | | | | | Vista is Windows 6.0, and 7 is Windows 6.1. Fixes bug 1097. Also fix a coding style violation.
* Merge remote branch 'origin/maint-0.2.1'Nick Mathewson2010-02-09
|\
| * Don't use gethostbyname() in resolve_my_address()Sebastian Hahn2010-02-08
| | | | | | | | | | | | | | Tor has tor_lookup_hostname(), which prefers ipv4 addresses automatically. Bug 1244 occured because gethostbyname() returned an ipv6 address, which Tor cannot handle currently. Fixes bug 1244; bugfix on 0.0.2pre25. Reported by Mike Mestnik.
* | Merge remote branch 'sebastian/bug925'Nick Mathewson2010-02-09
|\ \
| * | Don't spam controllers with TOO_MANY_CONNECTIONS eventsSebastian Hahn2010-02-08
| | | | | | | | | | | | | | | | | | We implemented ratelimiting for warnings going into the logfile, but didn't rate-limit controller events. Now both log warnings and controller events are rate-limited.
* | | Merge remote branch 'sebastian/bug1238'Nick Mathewson2010-02-09
|\ \ \
| * | | Fix a whitespace violationSebastian Hahn2010-02-09
| | | |
| * | | Speed up the execution of exit_policy_is_general_exit_helper()Sebastian Hahn2010-02-09
| | | | | | | | | | | | | | | | | | | | It isn't necessary to walk through all possible subnets when the policy we're looking at doesn't touch that subnet.
| * | | Another unit test for exit_policy_is_general_exit()Sebastian Hahn2010-02-09
| | | |
| * | | 0/8 doesn't count as a /8 subnet towards an Exit flagSebastian Hahn2010-02-08
| |/ /
* | | Merge remote branch 'sebastian/exit-notice'Nick Mathewson2010-02-09
|\ \ \
| * | | Fix the path to the exit-notice file in torrc.sampleSebastian Hahn2010-02-08
| |/ / | | | | | | | | | | | | Also reword it slightly to reflect the fact that no packagers ship the file.
* / / Make tor_addr_copy() conform to memcpy requirementsNick Mathewson2010-02-09
|/ / | | | | | | | | | | | | | | The src and dest of a memcpy() call aren't supposed to overlap, but we were sometimes calling tor_addr_copy() as a no-op. Also, tor_addr_assign was a redundant copy of tor_addr_copy(); this patch removes it.
* | Merge commit 'origin/maint-0.2.1'Nick Mathewson2010-02-07
|\|
| * lookup_last_hid_serv_request() could overflow and leak memorySebastian Hahn2010-02-07
| | | | | | | | | | | | The problem was that we didn't allocate enough memory on 32-bit platforms with 64-bit time_t. The memory leak occured every time we fetched a hidden service descriptor we've fetched before.
* | Another unit test for exit_policy_is_general_exit()Sebastian Hahn2010-02-04
| |
* | Call exit_policy_is_general_exit lessSebastian Hahn2010-02-04
| | | | | | | | | | | | | | When calculating the is_exit flag for a routerinfo_t, we don't need to call exit_policy_is_general_exit() if router_exit_policy_rejects_all() tells us it definitely is an exit. This check is much cheaper than running exit_policy_is_general_exit().
* | New unit test, testing for b0red's exit policySebastian Hahn2010-02-04
| |
* | When we've disabled .exit hostnames, actually reject them.Nick Mathewson2010-02-03
| | | | | | | | | | Previously we were treating them as decent hostnames and sending them to the exit, which is completely wrong.
* | Trivial doc fix for exit_policy_is_general_exit_helperNick Mathewson2010-02-03
| | | | | | | | | | The original comment said what it did if there was at least one /8 that allowed access to the port, but not what it did otherwise.
* | Another new test for exit_policy_is_general_exit()Sebastian Hahn2010-02-03
| |
* | New testcase for exit_policy_is_general_exitSebastian Hahn2010-02-03
| |
* | Don't assign Exit flag incorrectlySebastian Hahn2010-02-03
| | | | | | | | | | | | | | | | | | | | exit_policy_is_general_exit() assumed that there are no redundancies in the passed policy, in the sense that we actively combine entries in the policy to really get rid of any redundancy. Since we cannot do that without massively rewriting the policy lines the relay operators set, fix exit_policy_is_general_exit(). Fixes bug 1238, discovered by Martin Kowalczyk.
* | Merge remote branch 'origin/maint-0.2.1'Nick Mathewson2010-01-31
|\|
| * Revise OpenSSL fix to work with OpenSSL 1.0.0beta*Nick Mathewson2010-01-31
| | | | | | | | | | | | | | | | | | In brief: you mustn't use the SSL3_FLAG solution with anything but 0.9.8l, and you mustn't use the SSL_OP solution with anything before 0.9.8m, and you get in _real_ trouble if you try to set the flag in 1.0.0beta, since they use it for something different. For the ugly version, see my long comment in tortls.c
| * Decide whether to use SSL flags based on runtime OpenSSL version.Nick Mathewson2010-01-29
| | | | | | | | | | | | | | | | | | | | | | We need to do this because Apple doesn't update its dev-tools headers when it updates its libraries in a security patch. On the bright side, this might get us out of shipping a statically linked OpenSSL on OSX. May fix bug 1225. [backported]
* | Detect the correct versions of openssl for tls negotiation fixNick Mathewson2010-01-29
| | | | | | | | | | Since it doesn't seem to hurt, we should use _both_ fixes whenever we see OpenSSL 0.9.7L .. 0.9.8, or OpenSSL 0.9.8L..
* | Decide whether to use SSL flags based on runtime OpenSSL version.Nick Mathewson2010-01-29
| | | | | | | | | | | | | | | | | | We need to do this because Apple doesn't update its dev-tools headers when it updates its libraries in a security patch. On the bright side, this might get us out of shipping a statically linked OpenSSL on OSX. May fix bug 1225.
* | Fix comments for getinfo_helper_tSebastian Hahn2010-01-27
| | | | | | | | rieo pointed out something isn't right here
* | Bump version to 0.2.2.8-alpha-devNick Mathewson2010-01-27
| |
* | 0.2.2.8-alpha is coming out today sometimeRoger Dingledine2010-01-26
| |
* | Fix a memory corruption bug while collecting bridge statsKarsten Loesing2010-01-26
| | | | | | | | | | | | | | | | | | | | We accidentally freed the internal buffer for bridge stats when we were writing the bridge stats file or honoring a control port request for said data. Change the interfaces for geoip_get_bridge_stats* to prevent these problems, and remove the offending free/add a tor_strdup. Fixes bug 1208.
* | Merge commit 'sebastian/quiet'Nick Mathewson2010-01-25
|\ \
| * | Be quieter about failing to decode authority digestsSebastian Hahn2010-01-25
| | | | | | | | | | | | | | | | | | | | | This was freaking out some relay operators without good reason, as it is nothing the relay operator can do anything about anyways. Quieting this warning suggested by rieo.
* | | Rearrange _thread_test_func to please Coverity ScanNick Mathewson2010-01-25
| | | | | | | | | | | | | | | | | | | | | | | | I believe that since we were allocating *cp while holding a mutex, coverity deduced that *cp must be protected by that mutex, and later flipped out when we didn't use it that way. If this is so, we can solve our problems by moving the *cp = tor_strdup(buf) part outside of the mutex-protected code.
* | | Try to untangle the logic in server_port_flushNick Mathewson2010-01-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's a bit confusing to have a loop where another function, confusingly named "*_free", is responsible for advancing the loop variable (or rather, for altering a structure so that the next time the loop variable's initializer is evaluated it evaluates to something different.) Not only has this confused people: it's also confused coverity scan. Let's fix that.
* | | Don't unlock a new log until done logging the tor version.Nick Mathewson2010-01-25
|/ / | | | | | | This might please coverity scan.
* | Since dump_microdescriptor() can return -1; make its type ssize_tNick Mathewson2010-01-24
| |
* | Handle errors reported by fwrite() in dump_microdescriptor()Peter Palfrader2010-01-24
| | | | | | | | Does not deal with error handling in dump_microdescriptor's callers.
* | Merge commit 'origin/maint-0.2.1'Nick Mathewson2010-01-24
|\| | | | | | | | | | | | | Resolved conflicts in: configure.in src/or/Makefile.am src/tools/Makefile.am
| * Add --enable-static-(openssl|libevent) optionsNick Mathewson2010-01-24
| | | | | | | | | | These options only work when using --with-(openssl|libevent)-dir to explicitly pick a libevent or openssl location.
* | Merge remote branch 'origin/maint-0.2.1'Nick Mathewson2010-01-23
|\|
| * Fix two rare leaks spotted by rieo.Nick Mathewson2010-01-23
| |
| * Avoid a possible crash in tls_log_errors.Nick Mathewson2010-01-22
| | | | | | | | | | | | | | | | We were checking for msg==NULL, but not lib or proc. This case can only occur if we have an error whose string we somehow haven't loaded, but it's worth coding defensively here. Spotted by rieo on IRC.
* | Don't use OutboundBindAddress to connect to localhostNick Mathewson2010-01-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The OutboundBindAddress option is useful for making sure that all of your outbond connections use a given interface. But when connecting to 127.0.0.1 (or ::1 even) it's important to actually have the connection come _from_ localhost, since lots of programs running on localhost use the source address to authenticate that the connection is really coming from the same host. Our old code always bound to OutboundBindAddress, whether connecting to localhost or not. This would potentially break DNS servers on localhost, and socks proxies on localhost. This patch changes the behavior so that we only look at OutboundBindAddress when connecting to a non-loopback address.
* | bump to 0.2.2.7-alphaRoger Dingledine2010-01-19
| |
* | Merge branch 'maint-0.2.1'Roger Dingledine2010-01-19
|\| | | | | | | | | | | Conflicts: ChangeLog
| * spread guard rotation out throughout the monthRoger Dingledine2010-01-19
| |
generated by cgit v1.2.3 (git 2.45.0) at 2024-11-16 04:49:47 +0000