From 86263acf95c19dea5ef0f2b61334cbc8889e8ab6 Mon Sep 17 00:00:00 2001 From: Roger Dingledine Date: Mon, 9 Oct 2006 21:11:50 +0000 Subject: [PATCH] Security bugfixes: When the user sends a NEWNYM signal, clear the client-side DNS cache too. Otherwise we continue to act on previous information. svn:r8679 --- ChangeLog | 4 ++++ src/or/connection_edge.c | 2 +- src/or/main.c | 1 + 3 files changed, 6 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index d7d5ed63b3..add00fa695 100644 --- a/ChangeLog +++ b/ChangeLog @@ -4,6 +4,10 @@ Changes in version 0.1.2.3-alpha - 2006-10-?? field is sent only to controllers that have enabled the extended event format. (Patch from Mike Perry) + o Security bugfixes: + - When the user sends a NEWNYM signal, clear the client-side DNS + cache too. Otherwise we continue to act on previous information. + o Minor bugfixes: - Change NT service functions to be loaded on demand. This lets us build with mingw without breaking Tor for Windows 98 users. diff --git a/src/or/connection_edge.c b/src/or/connection_edge.c index 969afa464a..854e75566e 100644 --- a/src/or/connection_edge.c +++ b/src/or/connection_edge.c @@ -1032,7 +1032,7 @@ address_is_invalid_destination(const char *address) return 0; } -/** Iterate over all address mapings which have expiry times between +/** Iterate over all address mappings which have expiry times between * min_expires and max_expires, inclusive. If sl is provided, add an * "old-addr new-addr" string to sl for each mapping. If sl is NULL, * remove the mappings. diff --git a/src/or/main.c b/src/or/main.c index 4e29746ee0..9b7e4470c0 100644 --- a/src/or/main.c +++ b/src/or/main.c @@ -1331,6 +1331,7 @@ signal_callback(int fd, short events, void *arg) #endif case SIGNEWNYM: circuit_expire_all_dirty_circs(); + addressmap_clear_transient(); break; } }