torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
31,631 Commits 53 Branches 631 Tags
9c52846fe5ab6f0d2ef99f665844037f910a62cc
Commit Graph

8072 Commits

Author SHA1 Message Date
Alexander Færøy 9c52846fe5 Merge branch 'maint-0.3.5' into release-0.3.5 2021-08-11 12:52:08 +00:00
David Goulet 399518da02 relay: Reduce streaming compression ratio from HIGH to LOW 
Fixes #40301

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2021-08-11 12:51:32 +00:00
Nick Mathewson 31b55c14ca Backport changelog entries 2021-06-10 13:14:29 -04:00
Nick Mathewson e2138627f9 Merge branch 'maint-0.3.5' into release-0.3.5 2021-06-10 12:30:29 -04:00
George Kadianakis f57b5c48e0 Fix TROVE-2021-006: Out-of-bounds read on v3 desc parsing 2021-06-10 12:11:10 -04:00
Nick Mathewson b5eb1ba722 Merge branch 'maint-0.3.5' into release-0.3.5 2021-06-10 08:53:07 -04:00
David Goulet adb248b6d6 TROVE-2021-003: Check layer_hint before half-closed end and resolve cells 
This issue was reported by Jann Horn part of Google's Project Zero.

Jann's one-sentence summary: entry/middle relays can spoof RELAY_END cells on
half-closed streams, which can lead to stream confusion between OP and
exit.

Fixes #40389
 2021-06-10 08:50:05 -04:00
Nick Mathewson 62128193e2 Merge branch 'maint-0.3.5' into release-0.3.5 2021-06-10 08:42:14 -04:00
Nick Mathewson d71bf986b4 Merge branch 'bug40391_035' into maint-0.3.5 2021-06-10 08:41:59 -04:00
Nick Mathewson 7fdfc2ea54 Merge branch 'bug40390_035_squashed' into maint-0.3.5 2021-06-10 08:34:25 -04:00
Nick Mathewson c0aa9e0a1b Assert on _all_ failures from RAND_bytes(). 
Previously, we would detect errors from a missing RNG
implementation, but not failures from the RNG code itself.

Fortunately, it appears those failures do not happen in practice
when Tor is using OpenSSL's default RNG implementation.  Fixes bug
40390; bugfix on 0.2.8.1-alpha. This issue is also tracked as
TROVE-2021-004. Reported by Jann Horn at Google's Project Zero.
 2021-06-10 08:33:57 -04:00
Nick Mathewson c5922244e2 Merge branch 'maint-0.3.5' into release-0.3.5 2021-06-10 08:32:12 -04:00
Nick Mathewson 9ceb2c317b Merge remote-tracking branch 'tor-gitlab/mr/386' into maint-0.3.5 2021-06-10 08:31:54 -04:00
Nick Mathewson d6e2516031 Merge branch 'maint-0.3.5' into release-0.3.5 2021-06-10 08:21:47 -04:00
Nick Mathewson 520d5c108f Update geoip files to match ipfire location db, 2021/06/10. 2021-06-10 08:20:13 -04:00
Nick Mathewson 60070546a7 remove rolled-up changes file. 2021-06-07 15:02:55 -04:00
Alexander Færøy a4e8624db1 Merge branch 'maint-0.3.5' into release-0.3.5 2021-05-25 13:25:23 +00:00
Nick Mathewson 42ba87d964 Remove the function tor_tls_assert_renegotiation_unblocked. 
It was used nowhere outside its own unit tests, and it was causing
compilation issues with recent OpenSSL 3.0.0 alphas.

Closes ticket 40399.
 2021-05-25 07:38:31 -04:00
Nick Mathewson 4c06c619fa Use a more secure hash function for the circuitmux hashtable. 
Fixes bug 40931; bugfix on 0.2.4.4-alpha. Also tracked as
TROVE-2021-005.

This issue was reported by Jann Horn from Google's Project Zero.
 2021-05-18 08:40:09 -04:00
Nick Mathewson ee35291a7c fixup! Assert on _all_ failures from RAND_bytes(). 
Whoops; I forgot to add the changes file. :/
 2021-05-18 08:30:47 -04:00
Nick Mathewson 6dc3423e3e Merge branch 'maint-0.3.5' into release-0.3.5 2021-05-07 10:41:33 -04:00
Nick Mathewson e2c1ac214c Reindent a few lines to fix a GCC warning. 
As of GCC 11.1.1, the compiler warns us about code like this:

     if (a)
         b;
         c;

and that's a good thing: we wouldn't want to "goto fail".  But we
had an instance if this in circuituse.c, which was making our
compilation sad.

Fixes bug 40380; bugfix on 0.3.0.1-alpha.
 2021-05-07 10:39:20 -04:00
Nick Mathewson d6816de3e0 Merge branch 'maint-0.3.5' into release-0.3.5 2021-05-07 09:53:57 -04:00
Nick Mathewson 621f8a304a Update geoip files to match ipfire location db, 2021/05/07. 2021-05-07 09:53:46 -04:00
Nick Mathewson b5a6de9e83 Merge branch 'maint-0.3.5' into release-0.3.5 2021-04-13 16:59:15 -04:00
David Goulet ee7c50b8a7 fallbackdir: Renegerate list with 200 relays 
Signed-off-by: David Goulet <dgoulet@torproject.org>
 2021-04-13 15:15:58 -04:00
Nick Mathewson 8376fdb586 Merge branch 'maint-0.3.5' into release-0.3.5 2021-04-13 10:36:00 -04:00
Nick Mathewson 32f5ad7665 Update geoip files to match ipfire location db, 2021/04/13. 2021-04-13 10:35:50 -04:00
Nick Mathewson 0c66af2e69 Changelog for 0.3.5.14. 2021-03-15 09:27:26 -04:00
Nick Mathewson 0d04a9a829 Merge branch 'maint-0.3.5' into release-0.3.5 2021-03-15 09:01:59 -04:00
Nick Mathewson f078aab71e Merge branch 'bug40316_035_v2' into maint-0.3.5 2021-03-15 08:58:54 -04:00
Nick Mathewson 890ae4fb1a Fix detection of point to insert signatures on a pending consensus. 
We were looking for the first instance of "directory-signature "
when instead the correct behavior is to look for the first instance
of "directory-signature " at the start of a line.

Unfortunately, this can be exploited as to crash authorities while
they're voting.

Fixes #40316; bugfix on 0.2.2.4-alpha.  This is TROVE-2021-002,
also tracked as CVE-2021-28090.
 2021-03-15 08:56:58 -04:00
Nick Mathewson 2b1c08567d Merge branch 'maint-0.3.5' into release-0.3.5 2021-03-15 08:54:00 -04:00
Nick Mathewson efca9ce41c Clarify new intended strategy with TROVE-2021-001 
We're going to disable this feature in all versions for now.
 2021-03-15 08:53:36 -04:00
Nick Mathewson 72a0cdb1cd Merge branch 'maint-0.3.5' into release-0.3.5 2021-03-15 08:52:28 -04:00
Nick Mathewson f46f4562cf Merge branch 'bug40286_disable_min_035' into maint-0.3.5 2021-03-15 08:41:03 -04:00
Nick Mathewson c9b4d4aa75 Merge branch 'maint-0.3.5' into release-0.3.5 2021-03-12 11:36:34 -05:00
Nick Mathewson c1ce126c74 Use the right ticket number. 2021-03-12 11:31:36 -05:00
Nick Mathewson 9bcd9523be Merge branch 'maint-0.3.5' into release-0.3.5 2021-03-12 11:30:21 -05:00
Nick Mathewson aa6c7741e8 update geoip-2021-03-12 to mention provider transition. 2021-03-12 11:29:09 -05:00
Nick Mathewson a7b3cb06f5 Update geoip files to match ipfire location db, 2021/03/12. 2021-03-12 11:26:07 -05:00
David Goulet 2bc49d3828 Merge branch 'maint-0.3.5' into release-0.3.5 2021-03-01 08:24:28 -05:00
David Goulet 296a557bfc Remove mallinfo() from codebase 
Now deprecated in libc >= 2.33

Closes #40309

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2021-02-23 11:02:33 -05:00
Nick Mathewson ede88c374c Disable the dump_desc() function. 
It can be called with strings that should have been
length-delimited, but which in fact are not.  This can cause a
CPU-DoS bug or, in a worse case, a crash.

Since this function isn't essential, the best solution for older
Tors is to just turn it off.

Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was
introduced.
 2021-02-19 12:31:19 -05:00
Nick Mathewson fc4d507748 Fold in the entry for 2667 2021-02-03 09:53:41 -05:00
David Goulet a5b4ee2a01 Merge branch 'maint-0.3.5' into release-0.3.5 2021-02-03 08:44:19 -05:00
Nick Mathewson 4d9c7b8d81 start a changelog for 0.3.5.13. 2021-02-02 16:04:15 -05:00
Roger Dingledine 93ac6ec4d3 exit: Deny re-entry into the network 
Exit relays now reject exit attempts to known relay addresses + ORPort and
also to authorities on the ORPort and DirPort.

Closes #2667

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2021-01-29 14:19:17 -05:00
David Goulet 3ec07671c1 Merge branch 'maint-0.3.5' into release-0.3.5 2021-01-28 12:46:30 -05:00
David Goulet 9556276f07 Merge branch 'tor-gitlab/mr/50' into maint-0.3.5 2021-01-28 12:46:24 -05:00