tor/changes at 308f6dad20675c42b29862f4269ad1fbfb00dc9a - tor

abandon-rend-circs-on-newnym

Abandon rendezvous circuits on SIGNAL NEWNYM

2011-06-17 15:22:23 -04:00

bridgepassword

Do not use strcmp() to compare an http authenticator to its expected value

2012-04-01 00:42:04 -04:00

buffer_bug

Add a fix for the buf_pullup bug that Vektor reported

2011-12-15 11:28:24 -05:00

bug1240

Do not even try to keep going on a socket with socklen==0

2011-12-21 11:19:41 -05:00

bug1297a

Use the normal four-hop CBT for client intro circuits

2011-05-30 12:24:51 -04:00

bug1345

Handle transitions in Automap*, VirtualAddrNetwork correctly

2011-05-13 16:59:31 -04:00

bug1352

Rate-limit v2 networkstatus download fail warnings

2011-04-28 21:25:24 -04:00

bug1810

Don't recreate descriptor on sighup

2011-05-21 16:08:21 -04:00

bug2355

Changes file for bug2355.

2011-06-02 15:11:21 -04:00

bug2355_revert

Tweak bug2355_revert at suggestion from Roger

2011-06-19 20:58:46 -04:00

bug2442

Demote HS 'replay detected' log message for DH public keys to info level

2011-09-10 21:56:05 -04:00

bug2442b

Demote 'INTRODUCE2 cell is too {old,new}' message to info level

2011-09-10 21:56:05 -04:00

bug2503

Add changes file for bug2503

2011-05-12 18:49:28 -04:00

bug2574

Fix typo in changes/bug2574. Thanks, rransom

2011-05-28 02:13:04 -04:00

bug2649a

Add a VoteOnHidServDirectoriesV2 configuration option

2011-06-03 12:16:55 -04:00

bug2649b

Increase default required uptime for HSDirs to 25 hours

2011-06-03 12:17:53 -04:00

bug2732-simple

Accept hs descriptors even if we don't see an HSDir for us

2011-05-12 00:53:07 -04:00

bug2748

Log malformed HS descriptor requests at the proper level

2011-03-14 01:15:36 -07:00

bug2752

Add credit to bug2752; correct the issue number in the changes file

2011-05-17 19:50:52 -04:00

bug2792_checkdir

Check permissions on the directory holding a control socket

2011-05-15 20:20:29 -04:00

bug2850

Set SO_REUSEADDR on all sockets, not just listeners

2011-05-03 22:22:20 -04:00

bug2972

Clean up the 2972 implementation a little

2011-05-15 20:20:28 -04:00

bug3019

Preserve bridge download status across SETCONF, HUP

2011-05-15 20:13:44 -04:00

bug3022

Only authorities should automatically download v2 networkstatus documents

2011-04-28 21:06:07 -04:00

bug3026

bug 3026: do not upload our vote to ourself

2011-05-12 00:47:00 -04:00

bug3045

changes file for bug3045

2011-05-15 22:02:24 -04:00

bug3122_memcmp

Add a data-independent variant of memcmp and a d-i memeq function.

2011-05-11 16:12:33 -04:00

bug3135

Fix crash when read_file_to_string() fails in SAVECONF

2011-05-11 22:05:41 -04:00

bug3175

Increase the length of the buffer in smartlist_string_num_isin().

2011-05-15 22:13:53 -04:00

bug3198

refetch bridge descriptors in a timely fashion

2011-05-17 20:48:46 -04:00

bug3200

discard circuits when we change our bridge configuration

2011-05-17 21:13:59 -04:00

bug3207

Check onion keys in microdescriptors, too

2011-05-17 19:39:00 -04:00

bug3208

Remove the -F option from tor-resolve.

2011-10-26 17:13:04 -04:00

bug3213

Handle NULL argument to get_configured_bridge_by_addr_port_digest

2011-05-17 19:46:47 -04:00

bug3216

Don't build descriptors if ORPort auto is set and we have no OR listener

2011-05-24 21:12:23 +02:00

bug3228

Reinit keys at the start of options_act().

2011-10-26 22:09:44 +02:00

bug3252

log the reason for publishing a new relay descriptor

2011-05-19 23:59:52 -04:00

bug3270

Use a 64-bit type to hold sockets on win64.

2011-05-23 00:17:48 -04:00

bug3289

Warn when two hs use the same directory

2011-05-30 15:47:06 -04:00

bug3306

Detect insanely large circuit build state; don't give its length to rand_int

2011-06-06 16:18:06 -04:00

bug3309

Add info-level log messages during HS-client-state purge

2011-06-02 03:07:09 -07:00

bug3318

Reject 128-byte keys that are not 1024-bit

2011-06-03 11:31:19 -04:00

bug3321

fix a bridge edge case similar to 2511

2011-05-31 20:43:55 -04:00

bug3369

changelog entry for bug3369

2011-06-13 13:42:00 -04:00

bug3393

Add changes file for bug3393

2011-06-14 13:45:12 -04:00

bug3465-022

Add BUILDTIMEOUT_SET to the result of GETINFO events/names

2011-06-25 15:02:11 -07:00

bug3536

Correctly send a SUCCEEDED event for rdns requests

2011-07-07 05:38:38 +02:00

bug3577

Change GETINFO fingerprint to look at server_mode, not my_descriptor

2011-07-13 12:45:18 -04:00

bug3607

Untangle first sentence of changes/bug3607

2011-07-19 11:14:01 -04:00

bug3643

Ignore deprecation warnings on OS X

2011-08-10 23:12:09 +02:00

bug3732

Remove extra quotation marks around the result of esc_for_log

2011-08-15 10:54:19 -04:00

bug3747

Don't write ControlPorts to disk till after we setuid and make datadir

2011-08-17 11:22:16 -04:00

bug3894

Add changes file for bsd4 fixes

2011-09-09 10:41:06 -04:00

bug3898a

Correct man page: multiple control auth styles can be set at once

2011-09-02 07:01:55 -04:00

bug3909

Look for correct "ar" to cross-compile

2011-09-07 11:59:16 -04:00

bug3923

Fix assertion in addressmap_clear_excluded_trackexithosts

2011-09-06 20:26:20 -04:00

bug3963

All NT service configuration commands should make the process exit.

2011-09-08 21:54:12 -04:00

bug4012_022

Documentation for GiveGuardFlagTo... option

2012-01-18 14:44:29 -05:00

bug4014

Generate our ssl session certs with a plausible lifetime

2011-09-13 18:24:45 -04:00

bug4059

changes file for bug 4059

2011-09-20 09:56:26 -04:00

bug4115

bug 4115: make bridges use begindir for their dir fetches

2011-09-28 14:50:43 -04:00

bug4124

bridges should use create_fast cells for their own circuits

2011-09-28 15:35:27 -04:00

bug4201

Avoid running DNS self-tests if we're operating as a bridge

2011-10-07 12:18:26 -04:00

bug4212

Don't launch a useless circuit in rend_client_reextend_intro_circuit

2011-10-10 03:05:19 -07:00

bug4230

Correct the handling of overflow behavior in smartlist_ensure_capacity

2011-11-09 14:48:52 -05:00

bug4251

Free rend_data and intro_key when extra intro circs become general-purpose

2011-10-18 07:08:02 -07:00

bug4259

Fix crash when changing node restrictions with DNS lookup in progress

2011-10-19 23:14:05 -04:00

bug4299

Discard all cells on a marked connection

2011-10-28 17:04:15 -04:00

bug4309

unmangle the fingerprint example in the man page

2011-10-25 18:24:37 -04:00

bug4331

Fix typo, spotted by tmpname0901. Thanks!

2011-10-28 09:52:24 -04:00

bug4340

Add a changes file for the 4340 fix

2011-10-29 11:21:37 +02:00

bug4349

Use real_addr in send_netinfo

2011-11-14 22:43:40 -05:00

bug4353

Don't log about stats when running as a client without geoip

2011-11-19 00:50:03 +01:00

bug4383

Fix a memleak when fetching descriptors for bridges in ExcludeNodes.

2011-11-03 13:23:50 -04:00

bug4410

Add a changes file for 4410

2011-11-06 18:00:10 +01:00

bug4424

Robert says that this bug was not in fact one of frosty's

2011-11-07 11:54:54 -05:00

bug4426

Include HiddenServiceDir in some warning messages

2011-11-07 17:02:50 -08:00

bug4437

Don't warn when compiling with --disable-threads

2011-11-09 10:26:35 +01:00

bug4457

Detect failure from event_init() or event_base_new_with_config()

2011-11-14 17:53:45 -05:00

bug4518

Only call cull_wedged_cpuworkers once every 60 seconds.

2011-11-19 18:30:55 -05:00

bug4521

Changes file for bug4521 backports.

2011-11-20 20:15:13 -05:00

bug4529

Detect tor_addr_to_str failure in tor_dup_addr.

2011-11-23 23:04:10 -05:00

bug4530

Fix bug 4530; check return val of tor_addr_lookup correctly

2011-12-02 15:37:24 -05:00

bug4531

Don't call tor_tls_set_logged_address till after checking conn->tls

2011-12-02 16:15:52 -05:00

bug4533_part2

Fix SOCKET_OK test on win64.

2012-01-18 10:48:29 -05:00

bug4535

tor_accept_socket() should take tor_addr_t for listener arg

2011-12-02 16:09:16 -05:00

bug4786

Bug 4786 fix: don't convert EARLY to RELAY on v1 connections

2011-12-28 15:54:06 -05:00

bug4788

Authorities reject insecure Tors.

2011-12-27 21:47:04 -05:00

bug4803

Fix spelling in a controlsocket log msg

2011-12-30 23:27:02 +01:00

bug4822

Add a changes file for bug4822

2012-01-05 12:28:55 -05:00

bug4856

Fix a trivial log message error in renservice.c

2012-01-09 12:21:04 -05:00

bug5005

Update "ClientOnly" man page entry

2012-02-02 02:31:28 -05:00

bug5065

Properly protect paths to sed, sha1sum, openssl

2012-02-10 20:12:03 +01:00

bug5067

Downgrade "missing a certificate" from notice to info

2012-02-10 12:01:56 -05:00

bug5090

Use a given name in the bug5090 message, at its holder's request.

2012-03-09 14:50:46 -05:00

bug5259

Clarify MaxCircuitDirtiness behavior with hidden services. Bug 5259.

2012-05-15 11:22:06 -04:00

bug5283

add changes file for bug 5283

2012-05-31 16:57:26 -04:00

bug5340

Fix compile warnings in openbsd malloc

2012-03-08 19:28:59 +01:00

bug5342

Never choose a bridge as an exit. Bug 5342.

2012-03-09 14:27:50 -05:00

bug5343

Require a threshold of exit nodes before building circuits

2012-03-08 15:42:54 -05:00

bug5346

Remove more dubiosity in struct tm handling. related to bug5346

2012-05-16 12:15:08 -04:00

bug5593

Include a Host: header with any HTTP/1.1 proxy request

2012-04-10 12:00:20 -04:00

bug5644

rend_service_introduce(): do protocol violation check before anything else.

2012-04-18 22:26:06 -04:00

bug5647

Fix a log-uninitialized-buffer bug.

2012-04-18 23:02:09 -04:00

bug5760

Add changes/bug5760

2012-05-10 12:55:33 +05:30

bug5786_range

Handle out-of-range values in tor_parse_* integer functions

2012-05-07 12:25:59 -04:00

bug5796

Fix a crash bug on SETCIRCUITPURPOSE.

2012-05-15 10:03:10 -04:00

bug5969_022

Add __attribute__(format)s for our varargs printf/scanf wrappers

2012-05-30 12:14:38 -04:00

bug6007

Kill non-open OR connections with any data on their inbufs.

2012-06-04 11:29:18 -04:00

bug6033

Work around a bug in OpenSSL 1.0.1's TLS 1.1 and TLS 1.2 support

2012-06-02 20:09:05 -04:00

bug6094

Send a CRLF at the end of a STATUS_* event, not in the middle of it

2012-06-07 03:22:06 +00:00

bug6530

Clarify security impact of bug 6530

2012-08-03 11:16:13 -04:00

check-fetched-rend-desc-service-id

Check fetched rendezvous descriptors' service IDs

2011-05-16 14:07:24 -04:00

check-public-key-exponents

Require that certain public keys have public exponent 65537

2011-05-16 14:28:46 -04:00

cid_428

Use strlcpy in create_unix_sockaddr()

2011-07-01 12:54:24 -04:00

cid_450

Fix insanely large stack_allocation in log_credential_status

2011-07-01 12:38:05 -04:00

clang_30_options

Build with warnings and clang 3.0

2011-12-13 07:43:53 +01:00

cov479

Make internal error check for unrecognized digest algorithm more robust

2011-10-06 14:13:09 -04:00

cov484

Check return of init_keys() ip_address_changed: fix Coverity CID 484

2011-10-06 14:13:09 -04:00

coverity_maint

Fix a rare memleak during stats writing

2011-06-08 21:35:26 +02:00

dirreq-stats-default

Note ticket and source version for feature3951 in changes file

2011-10-07 16:47:43 -04:00

dirvote_null_deref

Fix potential null pointer deref during dirvote

2011-05-09 13:19:46 -04:00

exit-policy-default-is-not-a-prefix

Fix trailing asterisk in the output of "GETINFO info/names"

2011-05-20 08:25:42 -07:00

feature3049

Add changes file for #3049

2011-05-20 08:25:43 -07:00

feature3076

Add a ControlPortFileGroupWritable option

2011-05-13 10:41:29 -04:00

feature4484

parameterize bw cutoffs to guarantee Fast and Guard flags

2011-11-21 18:22:10 -05:00

fix-connection_printf_to_buf

Make send_control_event_impl's behaviour sane

2011-06-17 13:57:25 -04:00

fmt_addr

Check return value in fmt_addr

2011-07-20 13:17:48 -04:00

geoip-april2012

Update to the April 2012 GeoIP database.

2012-04-11 14:15:49 +02:00

geoip-august2011

Update to the August 2011 GeoIP database.

2011-08-08 16:57:01 +02:00

geoip-december2011

Update to the December 2011 GeoIP database.

2011-12-08 09:55:44 +01:00

geoip-february2012

Update to the February 2012 GeoIP database.

2012-02-09 09:16:24 +01:00

geoip-january2012

add a changes file for ticket 4825

2012-01-05 06:42:26 -05:00

geoip-july2011

update to the july 2011 geoip db

2011-07-07 13:28:36 -04:00

geoip-june2011

move to the june 1 2011 maxmind geoip db

2011-06-05 11:12:28 -04:00

geoip-june2012

Update to the June 2012 GeoIP database.

2012-06-13 09:21:00 +02:00

geoip-march2012

Update to the March 2012 GeoIP database.

2012-03-08 09:35:15 +01:00

geoip-may2011

Update to the May 1 2011 Maxmind GeoLite Country database

2011-05-10 23:04:11 -04:00

geoip-may2012

Update to the May 2012 GeoIP database.

2012-05-07 12:50:47 +02:00

geoip-november2011

Update to the November 2011 GeoIP database.

2011-11-07 14:23:48 +01:00

geoip-october2011

Update to the October 2011 GeoIP database.

2011-10-13 10:13:40 -04:00

geoip-september2011

Update to the September 2011 GeoIP database.

2011-09-15 16:33:36 -04:00

ides-becomes-turtles

ides has become turtles, and gotten a new IP address

2012-04-05 01:53:04 +02:00

issue-2011-10-19L

Don't give the Guard flag to relays without the CVE-2011-2768 fix

2011-10-26 23:42:39 +02:00

issue-2011-10-23G

Reject create cells on outgoing OR connections from bridges

2011-10-26 23:21:14 +02:00

maatuska-ip

new ip address for maatuska

2012-02-29 13:22:41 -05:00

md_cache_replace

Unmap microdesc cache before replacing it.

2011-05-12 11:19:52 -04:00

mdesc_null_deref

Fix a potential null deref when rebuilding md cache

2011-05-09 13:19:45 -04:00

memleak_rendcache

Add a changelog entry for cid30 fix.

2011-07-01 12:46:26 -04:00

msvc_lround

lround() missing in MSVC

2011-08-24 13:52:44 -04:00

pathsel-BUGGY-a

Mitigate a side-channel leak of which relays Tor chooses for a circuit

2012-08-03 11:49:51 -04:00

replay-firstpart

Check for replays in PK-encrypted part of intro cell, not just in the g^x value

2011-09-09 12:49:47 -04:00

revert-geoip-may2012

Revert to the May 2012 geoip db

2012-07-06 16:29:51 -04:00

routerlist_ins_replace

Correct the bulletproofing of routerlist_insert()

2012-05-16 10:51:02 -04:00

safecookie

Safe cookie authentication gets a changes file

2012-03-26 14:06:27 -04:00

ticket-4063

Add a changes file for Tom Lowenthal's patch for #4063

2011-09-24 22:15:13 -04:00

timersub_bug

Provide correct timeradd/timersup replacements

2011-12-25 23:19:08 +01:00

typo-fix-ohkah8Ah

Fix log message typo.

2011-09-10 16:15:52 -04:00

win-bundle-path

remove absolute path from contrib/package_nsis-mingw.sh in order to make it easier to automatically build tor expert bundle

2011-10-31 00:52:52 +00:00

windows_8

Looks like Windows version 6.2 will be Windows 8

2011-10-01 14:50:44 +02:00