David Goulet 4fe4f8179f dos: Don't set consensus param if we aren't a public relay ...

We had this safeguard around dos_init() but not when the consensus changes
which can modify consensus parameters and possibly enable the DoS mitigation
even if tor wasn't a public relay.

Fixes #25223

Signed-off-by: David Goulet <dgoulet@torproject.org>

2018-02-13 10:35:41 -05:00

..

.dummy

Add a .dummy file in the changes directory to stop git from removing it

2015-05-11 11:41:48 -04:00

19974

Increase tolerances in util/monotonic_time tests

2016-12-07 11:08:54 -05:00

20460

Make new changes files pass lintchanges

2016-11-07 16:19:05 -05:00

20492

Test for .git as readable instead of a dir to support worktrees

2016-12-05 08:21:17 -05:00

21359

Rework 21359 changes file slightly.

2017-02-01 10:39:48 -05:00

bastet_v6

Add bastet's ipv6 address

2017-11-27 09:09:16 -05:00

bug8185_025

Don't package cells onto marked circuits.

2017-09-29 09:33:47 -04:00

bug15582

Avoid sscanf() warnings from openbsd in the unit tests

2017-09-12 16:01:12 -04:00

bug18100

Fix the TRPOXY typo in connection_edge.c

2017-05-15 11:16:50 -04:00

bug18329-minimal

Minimal implementation of bridge-distribution-request

2017-11-13 20:44:51 -05:00

bug19025

Changes file for 19025.

2017-01-18 09:01:26 -05:00

bug19869

Avoid tor_fragile_assert() failure with DNSPort on RESOLVED_TYPE_ERROR

2016-10-26 14:16:40 -04:00

bug19926_029_info

Downgrade a harmless bug warning to info.

2016-12-09 08:43:09 -05:00

bug19960

Netbsd doesn't have ipfw, only the regular pf transport stuff.

2016-12-07 15:22:44 -05:00

bug19968

Actually clamp the number of detected CPUs to 16.

2016-10-31 14:19:39 -04:00

bug19969

Fix warnings from lintChanges.py

2016-11-06 16:39:46 -05:00

bug20059

Avoid a double-mark bug when makring a pending circuit as "too old"

2017-03-15 11:05:37 -04:00

bug20085

In torrc.sample.in, note that bandwidth must be >=75 KB.

2016-11-08 19:23:49 -05:00

bug20235

Try to work around breakage in the OSX 10.12 SDK.

2016-11-22 19:24:13 -05:00

bug20247

Allow setsockopt(IPV6_V6ONLY) in sandbox.

2017-07-05 13:09:21 -04:00

bug20306_029

policy_is_reject_star():

2016-10-31 15:05:56 -04:00

bug20307

clean up grammar on bug20307 changes file

2017-01-22 19:03:12 -05:00

bug20401

Actually free the worker_state_t object when we do an update with it

2016-10-31 15:20:25 -04:00

bug20423

don't attempt a resolve when the cached answer will do

2016-11-16 16:22:11 -05:00

bug20472

Fix warnings from lintChanges.py

2016-11-06 16:39:46 -05:00

bug20484

Create single-onion-service directory before poisoning it, if needed

2016-10-31 14:54:20 -04:00

bug20487

Add a sentence to the manpage about nonanonymous=>Socksport 0.

2016-10-31 15:13:27 -04:00

bug20509

dir auths reject 0.2.9.x for x<5, due to bug 20499

2017-05-22 08:31:39 -04:00

bug20529

Check every hidden service directory's permissions when configuring

2016-11-02 14:32:04 +11:00

bug20533

When downloading certificates, check for related failures

2016-11-08 00:01:20 +11:00

bug20534

Adjust download schedules per teor's #20534 recommendataions

2016-11-07 11:01:20 -05:00

bug20536

Do not apply 'max_failures' to random-exponential schedules.

2016-11-06 20:08:11 -05:00

bug20551

Fix warnings from lintChanges.py

2016-11-06 16:39:46 -05:00

bug20553

Work around a behavior change in openssl's BUF_MEM code

2016-11-03 10:51:10 -04:00

bug20560

Use va_copy() in pure-windows version of tor_asprintf().

2016-11-08 18:44:06 -05:00

bug20587

Make new changes files pass lintchanges

2016-11-07 16:19:05 -05:00

bug20588

Always Use EVP_aes_*_ctr() with openssl 1.1

2016-12-05 07:54:22 -05:00

bug20591

Ensure relays don't make multiple connections during bootstrap

2016-11-07 23:05:55 +11:00

bug20593

Count HTTP 503 as a download failure.

2016-11-07 11:01:21 -05:00

bug20597

When using exponential backoff in test networks, use a lower exponent

2016-11-08 16:42:26 +11:00

bug20613

Stop logging single onion and Tor2web long-term one-hop circuits

2016-11-09 11:23:51 +11:00

bug20634

Changes file for bug 20634

2016-11-16 13:14:03 +11:00

bug20638

Stop ignoring hidden service key anonymity when first starting tor

2016-12-01 09:44:53 -05:00

bug20710_025

Forgot to add changes file for 20710.

2016-12-07 10:51:39 -05:00

bug20715

router: Fix memory leak in signed_descriptor_move()

2016-12-09 08:30:46 -05:00

bug20716

Fix memory leak in bug 20716

2016-12-01 10:14:42 -05:00

bug20810

protover: Fix old tor hardcoded version check

2016-12-02 12:09:08 -05:00

bug20864

Fix changes file for 20864: 20638 _did_ get into 0.2.9

2016-12-05 08:12:10 -05:00

bug20875

Fix a BUG() warning from next_random_exponential_delay().

2016-12-07 11:13:11 -05:00

bug20935

Spell MAC_OS_X_VERSION_10_12 correctly.

2016-12-11 22:17:14 -05:00

bug21018

Fix parsing bug with unecognized token at EOS

2016-12-18 20:17:24 -05:00

bug21035

changes file for 21035.

2016-12-23 08:08:14 -05:00

bug21051

Use event_base_new(), not event_init(), to detect libevent 2.

2016-12-23 08:18:31 -05:00

bug21108_029

Do not clear is_bad_exit on sybil.

2017-01-31 14:12:14 -05:00

bug21278_extras

changes file for removing compare-by-subtraction pattern

2017-02-14 16:32:59 -05:00

bug21278_prevention

When examining descriptors as a dirserver, reject ones with bad versions

2017-02-15 07:46:34 -05:00

bug21280

changes file for 21280

2017-02-07 09:27:17 -05:00

bug21357

Changes file for 21357: Stop rejecting all IPv6 traffic on some Exits

2017-02-01 09:39:06 -05:00

bug21394

Fix DNS resolution on busy exit relays

2017-11-05 14:36:32 -05:00

bug21450

Limit version numbers to 0...INT32_MAX.

2017-02-15 07:57:34 -05:00

bug21507

Reject Tor versions that contain non-numeric prefixes

2017-02-19 22:38:06 +11:00

bug21576

Fix a crash when a connection tries to open just after it has been unlinked

2017-03-02 11:10:30 +11:00

bug21943

Add a changes file for 21943.

2017-05-08 13:39:59 -04:00

bug22034

control: Wrong check on base16_decode return value

2017-04-24 09:20:13 -04:00

bug22245

Fix a logic error in hibernate.c

2017-05-15 11:43:18 -04:00

bug22349

Mark descriptors as undownloadable when dirserv_add_() rejects them

2017-06-27 12:01:46 -04:00

bug22370

Stop leaking keypin-rejected routerinfos on directory authorities

2017-05-25 00:09:40 -04:00

bug22446

Fix GCC 7 -Wimplicit-fallthrough warnings (32 bit)

2017-09-11 17:45:07 -04:00

bug22460_case2

Changes file for the x509 link certificate case of bug22460

2017-06-05 15:27:33 -04:00

bug22490

Fix undefined behavior in geoip_parse_entry().

2017-06-05 10:09:39 -04:00

bug22516

Permit the fchmod system call.

2017-06-16 14:03:02 -04:00

bug22636

Add a changes file for bug22636.

2017-07-17 21:44:59 +00:00

bug22644

Fix crashes on empty +HSPOST and +POSTDESCRIPTOR commands

2017-09-07 09:20:00 -04:00

bug22737

Fix an errant memset() into the middle of a struct in cell_pack().

2017-06-27 10:47:20 -04:00

bug22789

Mention TROVE-2017-007 in changes file for 22789

2017-07-07 10:51:25 -04:00

bug22797

Always allow extra file descriptors when setting the connection maximum

2017-07-05 11:15:10 -04:00

bug22801

Fix -Wfloat-conversion C warnings on mingw in clamp_double_to_int64.

2017-07-03 10:59:31 -04:00

bug22838_028

mingw fix: avoid "unused var" warning.

2017-07-07 10:54:24 -04:00

bug22915

Suppress clang4-specific -Wdouble-promotion warnings

2017-07-26 12:53:00 -04:00

bug22916_027

Fix compiler warnings with openssl-scrypt/libscrypt test on clang

2017-07-13 17:49:48 -04:00

bug23030_029

Fix build warnings from Coverity related to our BUG macro

2017-07-26 12:57:49 -04:00

bug23081

In ntmain, call set_main_thread() before running the loop.

2017-08-03 09:09:08 -04:00

bug23291

changes file for bug 23291

2017-08-21 15:04:35 -04:00

bug23470

Stop relays calling directory_fetches_from_authorities on dir downloads

2017-09-13 09:46:17 +10:00

bug23690

Clear outbuf_flushlen when we clear a connection's outbuf

2017-09-29 10:00:14 -04:00

bug23693

Make changes in server_mode() affect workers; fix a crash.

2017-10-02 11:11:30 -04:00

bug23874

Clear the address when node_get_prim_orport() returns early

2017-10-15 16:48:36 -04:00

bug23985

Don't delay descriptor fetches when missing info needed for circuits

2017-11-08 13:22:16 -05:00

bug24167

Fix a traceback when closing a blocked connection "immediately".

2017-11-16 12:05:56 -05:00

bug24313

hs-v2: Remove any expiring intro from the retry list

2017-11-28 18:41:29 -05:00

bug24480

Fix a clang compilation warning in rendservice.c

2017-12-01 12:13:15 -05:00

bug24633

Fix the clz32 and clz64 settings on MSVC.

2017-12-20 09:37:18 -05:00

bug24666

Move destroy cells into a separate queue type of their own, to save RAM

2017-12-21 10:29:01 -05:00

bug24736

Clear the address when we can't choose a reachable address

2017-12-25 01:55:28 +11:00

bug24895

hs: Use hs_service_max_rdv_failures consensus param, defaulting to 2

2018-01-19 16:13:54 -05:00

bug24952

channel_tls_get_remote_addr_method now returns real_addr.

2018-01-31 16:12:13 -05:00

bug25223

dos: Don't set consensus param if we aren't a public relay

2018-02-13 10:35:41 -05:00

geoip-2017-11-06

Update geoip and geoip6 to the November 6 2017 database.

2017-11-10 10:14:09 +01:00

geoip-2017-12-06

Update geoip and geoip6 to the December 6 2017 database.

2017-12-20 17:36:29 +01:00

geoip-2018-01-05

Update geoip and geoip6 to the January 5 2018 database.

2018-01-08 11:36:38 +01:00

geoip-april2017

Update geoip and geoip6 to the April 4 2017 database.

2017-04-06 10:52:39 +02:00

geoip-august2017

Update geoip and geoip6 to the August 3 2017 database.

2017-08-03 10:00:54 +02:00

geoip-december2016

Update geoip and geoip6 to the December 7 2016 database.

2016-12-09 10:23:36 +01:00

geoip-february2017

Update geoip and geoip6 to the February 8 2017 database.

2017-02-12 15:56:31 +01:00

geoip-january2017

fix a lintchanges warning

2017-01-22 18:48:22 -05:00

geoip-july2017

Update geoip and geoip6 to the July 4 2017 database.

2017-07-07 16:27:54 +02:00

geoip-june2017

Update geoip and geoip6 to the June 8 2017 database.

2017-06-09 15:47:49 +02:00

geoip-march2017

Update geoip and geoip6 to the March 7 2017 database.

2017-03-08 09:41:35 +01:00

geoip-may2017

Update geoip and geoip6 to the May 2 2017 database.

2017-05-08 10:09:42 +02:00

geoip-november2016

Make new changes files pass lintchanges

2016-11-07 16:19:05 -05:00

geoip-october2017

add missing subcategory in changes file

2017-10-05 11:04:54 -04:00

geoip-september2017

Update geoip and geoip6 to the September 6 2017 database.

2017-09-07 21:06:16 +02:00

longclaw_23592

Update Longclaw's IP address; fixes 23592.

2017-10-17 14:00:30 -04:00

longclaw-ipv6

Remove longclaw's IPv6 address, as it will soon change

2017-09-20 14:48:53 +10:00

more_module_docs

changes file for module docs

2016-10-18 19:35:10 -04:00

prop275-minimal

Stop declining to download microdescs with future published times.

2017-03-06 15:37:01 -05:00

ticket19769

DefecTor countermeasure: change server- and client-side DNS TTL clipping

2017-01-18 08:55:57 -05:00

ticket20170-v3

Update the fallback directory mirror list in December 2016

2016-12-19 15:44:20 +11:00

ticket21564

Update fallback directory mirrors in May 2017

2017-05-16 19:02:42 +10:00

ticket21953

Enable some windows hardening features

2017-05-11 16:39:02 -04:00

ticket22895

Remove unused variables in donna's SSE2 code

2017-07-27 11:26:13 -04:00

ticket23856

relay: Change bandwidth stats interval to 24 hours

2017-11-27 10:00:40 -05:00

ticket23910

dirauth: Add bastet to the default authorities

2017-10-23 09:03:36 -04:00

ticket24681

Make the default DirAuthorityFallbackRate 0.1

2017-12-23 00:01:31 +11:00

ticket24902

dos: Add changes file for ticket 24902

2018-01-30 09:18:16 -05:00

ticket25122

geoip: Hook the client history cache into the OOM handler

2018-02-02 14:48:41 -05:00

ticket_24801

Add changes file for new fallback directory list.

2018-01-08 11:09:08 -05:00

trove-2017-001

TROVE-2017-001 : move -ftrapv back into --expensive-hardening.

2017-01-23 08:47:10 -05:00

trove-2017-001.2

Avoid integer underflow in tor_version_compare.

2017-02-14 16:10:27 -05:00

trove-2017-005

TROVE-2017-005: Fix assertion failure in connection_edge_process_relay_cell

2017-06-08 09:21:10 -04:00

trove-2017-008

Fix log-uninitialized-stack bug in rend_service_intro_established.

2017-09-18 09:27:07 -04:00

trove-2017-009

Fix changes file

2017-11-30 11:52:40 -05:00

trove-2017-010

Handle NULL input to protover_compute_for_old_tor()

2017-11-27 15:16:30 -05:00

trove-2017-011

Avoid asking for passphrase on junky PEM input

2017-11-27 15:25:03 -05:00

trove-2017-012-part1

Use local descriptor object to exclude self in path selection

2017-11-28 19:14:10 -05:00