aboutsummaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAge
* Unit tests for test_routerkeys_write_fingerprintNick Mathewson2014-02-28
|
* Unit tests for pk fingerprint functionsNick Mathewson2014-02-28
|
* Tighten router_write_fingerprint implNick Mathewson2014-02-28
|
* Write hashed bridge fingerprint to logs and to disk.Karsten Loesing2014-02-28
| | | | Implements #10884.
* Merge remote-tracking branch 'public/bug10449'Nick Mathewson2014-02-25
|\
| * bug10449: a dying owning controller makes Tor exit immediatelyNick Mathewson2014-02-03
| | | | | | | | | | | | | | | | | | | | If you want a slow shutdown, send SIGNAL SHUTDOWN. (Why not just have the default be SIGNAL QUIT? Because this case should only happen when an owning controller has crashed, and a crashed controller won't be able to give the user any "tor is shutting down" feedback, and so the user gets confused for a while. See bug 10449 for more info)
* | Trivial comment fix.Nick Mathewson2014-02-25
| |
* | Merge remote-tracking branch 'public/bug11048'Nick Mathewson2014-02-25
|\ \
| * | Threadproof our log_backtrace implementationNick Mathewson2014-02-24
| | | | | | | | | | | | | | | | | | | | | | | | It's possible for two threads to hit assertion failures at the same time. If that happens, let's keep them from stomping on the same cb_buf field. Fixes bug 11048; bugfix on 0.2.5.2-alpha. Reported by "cypherpunks".
* | | Merge remote-tracking branch 'karsten/geoip2regcountry'Nick Mathewson2014-02-25
|\ \ \
| * | | Fall back to registered country if necessary.Karsten Loesing2014-02-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When extracting geoip and geoip6 files from MaxMind's GeoLite2 Country database, we only look at country->iso_code which is the two-character ISO 3166-1 country code of the country where MaxMind believes the end user is located. But if MaxMind thinks a range belongs to anonymous proxies, they don't put anything there. Hence, we omit those ranges and resolve them all to '??'. That's not what we want. What we should do is first try country->iso_code, and if there's no such key, try registered_country->iso_code which is the country in which the ISP has registered the IP address. In short: let's fill all A1 entries with what ARIN et. al think.
* | | | Merge remote-tracking branch 'origin/maint-0.2.4'Nick Mathewson2014-02-25
|\ \ \ \
| * \ \ \ Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson2014-02-25
| |\ \ \ \
| | * | | | Fix geoip by falling back to registered countries.Karsten Loesing2014-02-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See 1d2179bc900f1646a5491b65294e78b175e70056 in master for details. """ Fall back to registered country if necessary. When extracting geoip and geoip6 files from MaxMind's GeoLite2 Country database, we only look at country->iso_code which is the two-character ISO 3166-1 country code of the country where MaxMind believes the end user is located. But if MaxMind thinks a range belongs to anonymous proxies, they don't put anything there. Hence, we omit those ranges and resolve them all to '??'. That's not what we want. What we should do is first try country->iso_code, and if there's no such key, try registered_country->iso_code which is the country in which the ISP has registered the IP address. In short: let's fill all A1 entries with what ARIN et. al think. """
| * | | | | Merge remote-tracking branch 'public/feature9777_024_squashed' into maint-0.2.4Nick Mathewson2014-02-24
| |\ \ \ \ \
* | | | | | | Download MaxMind's geoip file over https.Karsten Loesing2014-02-25
| |_|_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the cert turns out to be invalid or if wget is otherwise unable to verify it, it's going to return an error and not download the file for us. Spotted by nickm.
* | | | | | Include instructions on generating geoip files.Karsten Loesing2014-02-21
| |_|_|/ / |/| | | | | | | | | | | | | | Implements #10924.
* | | | | When not an exit node, don't test for DNS hijacking.Nick Mathewson2014-02-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Back in 5e762e6a5c0e6729bb7dbb586af2690c087d9ba8, non-exit servers stopped launching DNS requests for users. So there's no need for them to see if their DNS answers are hijacked. Patch from Matt Pagan. I think this is a 965 fix.
* | | | | Merge remote-tracking branch 'public/bug10987_024'Nick Mathewson2014-02-21
|\ \ \ \ \
| * | | | | Style tweaks on code, changes file for 10987Nick Mathewson2014-02-21
| | | | | |
| * | | | | Fix: send back correct IPv6 SOCKS5 connect replyDavid Goulet2014-02-21
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For a client using a SocksPort connection and IPv6, the connect reply from tor daemon did not handle AF_INET6 thus sending back the wrong payload to the client. A changes file is provided and this fixes #10987 Signed-off-by: David Goulet <dgoulet@ev0ke.net>
* | | | | fixed long -> int implicit cast warning line 3453Nick Hopper2014-02-20
| | | | |
* | | | | Restitute a successful stat call to this test case.dana koch2014-02-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since the first stat call is made for it to deliberately fail, and we reference st.st_mode without st having valid data, st.st_mode can contain garbage and cause chmod to fail with EINVAL. We rerun stat and ensure it succeeded. Also make use of tt_abort_perror, to properly convey failure reasons to the user.
* | | | | Appropriately condition the _le64toh macro definition for OpenBSD.dana koch2014-02-17
| | | | | | | | | | | | | | | | | | | | This corrects a linker error on OpenBSD, where the function is called letoh64. See also http://git.kernel.org/cgit/docs/man-pages/man-pages.git/tree/man3/endian.3#n84.
* | | | | mingw fix: Rename a variable in the unit testsNick Mathewson2014-02-16
| | | | | | | | | | | | | | | | | | | | | | | | | Apparently, MS C is #defining "IN" on us, so we can't name a variable IN. Delightful!
* | | | | Merge remote-tracking branch 'public/bug10722'Nick Mathewson2014-02-16
|\ \ \ \ \
| * | | | | Warning message when bug 10722 would triggerNick Mathewson2014-02-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If somebody's excludenodes settings are keeping their hidden service connections from working, they should probably get notified about it.
* | | | | | Merge branch 'bug4900_siphash_v2'Nick Mathewson2014-02-15
|\ \ \ \ \ \
| * | | | | | Remove string hash in ht.h so we can't accidentally use itNick Mathewson2014-02-15
| | | | | | |
| * | | | | | Randomize the global siphash key at startupNick Mathewson2014-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This completes our conversion to using siphash for our hash functions.
| * | | | | | Split crypto_global_init() into pre/post configNick Mathewson2014-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's increasingly apparent that we want to make sure we initialize our PRNG nice and early, or else OpenSSL will do it for us. (OpenSSL doesn't do _too_ bad a job, but it's nice to do it ourselves.) We'll also need this for making sure we initialize the siphash key before we do any hashes.
| * | | | | | Siphash-2-4 is now our hash in nearly all cases.Nick Mathewson2014-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I've made an exception for cases where I'm sure that users can't influence the inputs. This is likely to cause a slowdown somewhere, but it's safer to siphash everything and *then* look for cases to optimize. This patch doesn't actually get us any _benefit_ from siphash yet, since we don't really randomize the key at any point.
| * | | | | | csiphash: Add functions to take a global key.Nick Mathewson2014-02-12
| | | | | | |
| * | | | | | Tests for siphash, from reference implementation.Nick Mathewson2014-02-12
| | | | | | |
| * | | | | | csiphash: avoid unaligned access on non-x86Nick Mathewson2014-02-12
| | | | | | |
| * | | | | | Get csiphash better integrated with our build systemNick Mathewson2014-02-12
| | | | | | |
| * | | | | | Raw import of Marek Majkowski's cisphash.cNick Mathewson2014-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | siphash is a hash function designed for producing hard-to-predict 64-bit outputs from short inputs and a 128-bit key. It's chosen for security and speed. See https://131002.net/siphash/ for more information on siphash. Source: https://github.com/majek/csiphash/
* | | | | | | Remove a bunch of functions that were never called.Nick Mathewson2014-02-15
| | | | | | |
* | | | | | | Merge remote-tracking branch 'public/bug10841'Nick Mathewson2014-02-15
|\ \ \ \ \ \ \
| * | | | | | | tristate->enum in rendcommon functionsNick Mathewson2014-02-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When we have more than two return values, we should really be using an enum rather than "-2 means this, -1 means that, 0 means this, and 1 or more means a number."
| * | | | | | | Remove another unused v0 hidserv function.Karsten Loesing2014-02-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Noted by Nick on #10841.
| * | | | | | | Remove remaining v0 hidden service descriptor code.Karsten Loesing2014-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the rest of #10841 after #10881 already removed some hidden service authority code.
* | | | | | | | Merge remote-tracking branch 'karsten/mmdb-convert'Nick Mathewson2014-02-15
|\ \ \ \ \ \ \ \
| * | | | | | | | Exclude Teredo IPv6 prefix from geoip6.Karsten Loesing2014-02-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The latest GeoLite2 database includes a pointer from 2001::/32 to the root node of the IPv4 address space in the tree. We need to exclude this whole address space from geoip6, similar to how we exclude IPv4-mapped IPv6 addresses and the 6to4 mapping subnet.
| * | | | | | | | Don't zero-pad day of the month.Karsten Loesing2014-02-08
| | | | | | | | |
| * | | | | | | | Add script to convert GeoLite2 country databases.Karsten Loesing2014-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Copied over from https://github.com/nmathewson/mmdb-convert, commit 52f0d43408ed3a0fe7c3b2fa7099da7f6b7c4502.
| * | | | | | | | Remove script to clean up GeoLite country databases.Karsten Loesing2014-02-08
| | | | | | | | |
* | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.4'Nick Mathewson2014-02-15
|\ \ \ \ \ \ \ \ \ | | |_|_|_|/ / / / | |/| | | | | | |
| * | | | | | | | Merge remote-tracking branch 'karsten/geoip6-feb2014' into maint-0.2.4Nick Mathewson2014-02-15
| |\ \ \ \ \ \ \ \
| | * | | | | | | | Update geoip6 to the February 2014 GeoIP database.Karsten Loesing2014-02-13
| | | | | | | | | |
generated by cgit v1.2.3 (git 2.25.4) at 2024-09-30 17:19:21 +0000