Roger Dingledine
6ef2e30c72
Merge branch 'maint-0.2.1' into release-0.2.1
2011-10-24 02:25:33 -04:00
Karsten Loesing
ee545cd4cb
Update to the October 2011 GeoIP database.
2011-10-13 10:13:40 -04:00
Karsten Loesing
679f617345
Update to the September 2011 GeoIP database.
2011-09-15 16:33:36 -04:00
Roger Dingledine
62ec584a30
Generate our ssl session certs with a plausible lifetime
...
Nobody but Tor uses certs on the wire with 2 hour lifetimes,
and it makes us stand out. Resolves ticket 4014.
2011-09-13 18:24:45 -04:00
Karsten Loesing
c75ee94ab4
Update to the August 2011 GeoIP database.
2011-08-08 16:57:01 +02:00
Roger Dingledine
51d6e95023
update to the july 2011 geoip db
2011-07-07 13:28:36 -04:00
Nick Mathewson
021cf3f052
Merge branches 'cov217_021' and 'cid_450' into maint-0.2.1
2011-07-01 12:54:51 -04:00
Nick Mathewson
959da6b7f2
Use strlcpy in create_unix_sockaddr()
...
Using strncpy meant that if listenaddress were ever >=
sizeof(sockaddr_un.sun_path), we would fail to nul-terminate
sun_path. This isn't a big deal: we never read sun_path, and the
kernel is smart enough to reject the sockaddr_un if it isn't
nul-terminated. Nonetheless, it's a dumb failure mode. Instead, we
should reject addresses that don't fit in sockaddr_un.sun_path.
Coverity found this; it's CID 428. Bugfix on 0.2.0.3-alpha.
2011-07-01 12:54:24 -04:00
Nick Mathewson
d25feadebb
Fix insanely large stack_allocation in log_credential_status
...
I'm not one to insist on C's miserly stack limits, but allocating a
256K array on the stack is too much even for me.
Bugfix on 0.2.1.7-alpha. Found by coverity. Fixes CID # 450.
2011-07-01 12:38:05 -04:00
Robert Ransom
010b8dd4f6
Abandon rendezvous circuits on SIGNAL NEWNYM
2011-06-17 15:22:23 -04:00
Roger Dingledine
bf4b819aae
move to the june 1 2011 maxmind geoip db
2011-06-05 11:12:28 -04:00
Nick Mathewson
f43aceb0f1
Fix typo in changes/bug2574. Thanks, rransom
2011-05-28 02:13:04 -04:00
Nick Mathewson
ee72557d52
Merge branch 'bug2574' into maint-0.2.1
2011-05-28 02:07:48 -04:00
Nick Mathewson
be76850995
Work correctly if your nameserver is ::1
...
We had all the code in place to handle this right... except that we
were unconditionally opening a PF_INET socket instead of looking at
sa_family. Ow.
Fixes bug 2574; not a bugfix on any particular version, since this
never worked before.
2011-05-23 17:42:38 -04:00
Roger Dingledine
f1c43a1e64
fold in new changes entries
2011-05-16 19:35:28 -04:00
Nick Mathewson
0d94f78705
rm files for changes merged in all of release021, release022, master
2011-05-16 16:17:35 -04:00
Nick Mathewson
4a3ef002e7
Merge branch 'maint-0.2.1' into release-0.2.1
2011-05-16 14:55:14 -04:00
Robert Ransom
987190c2bc
Require that certain public keys have public exponent 65537
2011-05-16 14:28:46 -04:00
Robert Ransom
7571e9f1cb
Check fetched rendezvous descriptors' service IDs
2011-05-16 14:07:24 -04:00
Roger Dingledine
109ba37d54
fold in latest changes entries
2011-05-14 00:21:12 -04:00
Roger Dingledine
acc54d32b6
Merge branch 'maint-0.2.1' into release-0.2.1
2011-05-13 23:37:50 -04:00
Nick Mathewson
1f678277a1
Merge remote-tracking branch 'public/bug3122_memcmp_squashed' into maint-0.2.1
2011-05-12 19:20:40 -04:00
Nick Mathewson
13847b8db6
Fix crash when read_file_to_string() fails in SAVECONF
...
The new behavior is to try to rename the old file if there is one there
that we can't read. In all likelihood, that will fail too, but at least
we tried, and at least it won't crash.
2011-05-11 22:05:41 -04:00
Nick Mathewson
4b19730c82
Add a data-independent variant of memcmp and a d-i memeq function.
...
The tor_memcmp code is by Robert Ransom, and the tor_memeq code is
by me. Both incorporate some ideas from DJB's stuff.
2011-05-11 16:12:33 -04:00
Roger Dingledine
2bd2c10fcb
fold in changes file
2011-05-10 23:05:37 -04:00
Roger Dingledine
c783b828ca
Merge branch 'maint-0.2.1' into release-0.2.1
2011-05-10 23:05:03 -04:00
Roger Dingledine
e7b10e5ecf
Update to the May 1 2011 Maxmind GeoLite Country database
2011-05-10 23:04:11 -04:00
Roger Dingledine
b36a837f08
fold in changes files for 0.2.1.31
2011-05-10 22:36:29 -04:00
Roger Dingledine
75953f9b60
Merge branch 'maint-0.2.1' into release-0.2.1
2011-05-10 21:26:01 -04:00
Robert Ransom
2ad18ae736
Allow rend_client_send_introduction to fail transiently
...
i.e. without closing the AP connection.
2011-04-28 18:14:50 +02:00
Robert Ransom
440e48ddf2
Forget all rendezvous client state on SIGNAL NEWNYM
2011-04-28 18:14:50 +02:00
Nick Mathewson
43ffd023e9
Make SIZE_T_CEILING unsigned; add a signed SSIZE_T_CEILING
...
None of the comparisons were _broken_ previously, but avoiding
signed/unsigned comparisons makes everybody happier.
Fixes bug2475.
2011-04-26 13:03:58 -04:00
Nick Mathewson
e98583594d
Fix a bug in removing DNSPort requests from their circular list
...
Under heavy load, this could result in an assertion failure. Fix for
bug 2933; bugfix on 0.2.0.10-alpha.
2011-04-21 13:39:00 -04:00
Robert Ransom
bfebc942ea
Correct the warning emitted when rejecting an oversized HS desc
2011-04-18 13:17:40 -07:00
Nick Mathewson
32341ac467
Merge remote-tracking branch 'public/bug2402_again' into maint-0.2.1
2011-04-06 16:13:22 -04:00
Roger Dingledine
0cdd262941
switch to the apr 2011 geoip db
2011-04-04 03:52:58 -04:00
Erinn Clark
3a7cee9d29
Fix configure.in zlib package names.
2011-03-28 17:48:22 -04:00
Roger Dingledine
1a9d19e972
we're not reachable if we don't have a routerinfo yet
2011-03-13 15:47:59 -04:00
Nick Mathewson
02d93caa09
Backport: Generate version tags using Git, not (broken) svn revisions.
...
Partial backport of daa0326aaa .
Resolves bug 2402. Bugfix on 0.2.1.15 (for the part where we switched to
git) and on 0.2.1.30 (for the part where we dumped micro-revisions.)
2011-03-11 11:01:17 -05:00
Nick Mathewson
671318c3a8
Revert "Simplest fix to bug2402: do not include SVN versions"
...
This reverts commit a1073ee956 .
Apparently, we totally misunderstood how the debian packages were using
microrevisions. Better fix that!
2011-03-11 10:47:25 -05:00
Roger Dingledine
d080fe8db1
move to march 2011 geoip file
2011-03-08 18:15:17 -05:00
Nick Mathewson
9a6df21539
Avoid crash in any_pending_bridge_descriptor_fetches
...
This is based on shitlei's fix for bug2629, with extra parens removed.
Fixes bug 2629, bugfix on 0.2.1.2-alpha.
2011-03-08 15:17:41 -05:00
Nick Mathewson
4fa70e11ed
Merge branch 'real_ipv6_fix' into maint-0.2.1
2011-03-06 13:42:05 -05:00
Nick Mathewson
2ce132e335
Oops, here's the *REAL* fix for the ipv6 issue
...
We need to _REJECT_ descriptors with accept6/reject6 lines. If we
let them onto the network , other un-upgraded tors will crash.
2011-03-06 13:41:55 -05:00
Nick Mathewson
0f637492e3
Merge branch 'careful_with_all_descs' into maint-0.2.1
2011-03-06 13:35:42 -05:00
Nick Mathewson
b231026c42
changes file for careful_with_all_descs
2011-03-06 13:35:24 -05:00
Nick Mathewson
fb421c0005
Changes file for ipv6 parsing issue
2011-03-06 13:15:32 -05:00
Roger Dingledine
feabf2eb6c
fold in last two changes files
2011-02-22 22:56:57 -05:00
Roger Dingledine
f10ec55b25
Merge branch 'maint-0.2.1' into release-0.2.1
2011-02-22 22:54:33 -05:00
Nick Mathewson
491abbc65e
Merge remote branch 'public/bug1859_021' into maint-0.2.1
2011-02-22 17:19:41 -05:00