Nick Mathewson 6f7d548bc4 Make write_escaped_data more robust to large inputs. ...

The old implementation would fail with super-long inputs. We never
gave it any, but still, it's nicer to dtrt here.

Reported by Guido Vranken. Fixes bug 19281.

2017-08-09 09:02:12 -04:00

..

13295

Don't use the getaddrinfo sandbox cache from tor-resolve

2014-09-29 12:57:07 -04:00

19271

whoops. changelog file for 19271.

2016-07-05 13:51:21 -04:00

bifroest

Backport the tonga->bifroest move to 0.2.4.

2017-02-07 09:15:21 -05:00

bufferevent_compilation

update changes entry with info for 11578 patch

2014-07-21 14:00:10 -04:00

bug1038-3

Warn and drop the circuit if we receive an inbound 'relay early' cell

2014-07-28 02:44:05 -04:00

bug8093

Downgrade 'unexpected sendme cell from client' to PROTOCOL_WARN

2014-10-16 13:04:11 -04:00

bug8387

Fix a bug where streams would linger forever when we had no dirinfo

2014-07-09 16:15:05 -04:00

bug11200-caching

Build circuits more readily when DisableNetwork goes to 0

2014-08-06 18:30:14 -04:00

bug12160

Correctly update channel local mark when address of incoming connection changes after handshake; fixes bug #12160

2014-09-05 11:12:08 -07:00

bug12602

Fix compilation with no-compression OpenSSL builds and forks

2014-07-17 11:25:56 +02:00

bug12700

Fix relay_command_to_string(); solve 12700.

2014-08-18 13:21:40 -04:00

bug12718

add a changes file for bug 12718

2014-07-27 15:41:30 -04:00

bug12730-systemd-verify-config

Verify configuration file via ExecStartPre in the systemd unit file (#12730).

2014-07-30 16:56:55 +00:00

bug12731-systemd-no-run-as-daemon

Explicitly disable RunAsDaemon in the systemd unit file (#12731).

2014-07-30 16:54:07 +00:00

bug12830

Fix some URLs in the README

2014-08-09 15:57:44 -04:00

bug12848

Don't send DESTROY to circID 0 when circuit_deliver_create_cell fails

2014-08-12 12:12:02 -04:00

bug12864

Restore functionality for CookieAuthFileGroupReadable.

2014-08-15 08:30:44 -04:00

bug12878

Adding changes file.

2014-09-01 16:22:52 -04:00

bug12908

Warn if Tor is a relay and a HS

2014-08-20 12:56:57 -04:00

bug12948

Resume expanding abbreviations for command-line options

2014-08-28 08:33:43 -04:00

bug12996

Downgrade "Unexpected onionskin length after decryption" warning

2014-08-29 16:38:54 -04:00

bug12997

Improve "Tried to establish rendezvous on non-OR or non-edge circuit"

2014-08-29 16:05:58 -04:00

bug13071

Add more escaped() calls in directory.c

2014-09-09 10:22:01 -04:00

bug13081

Clean up the MVSC nmake files so they work again.

2014-09-09 10:27:05 -04:00

bug13085

Expand the event_mask field in controller conns to 64 bits

2014-09-08 15:16:02 -04:00

bug13096

In routerlist_assert_ok(), check r2 before taking &(r2->cache_info)

2014-09-10 23:48:11 -04:00

bug13100

gabelmoo's IPv4 address changed

2014-09-20 16:46:02 -04:00

bug13124

Reduce log severity for unused ClientTransportPlugin lines

2014-09-11 08:02:37 -04:00

bug13151-client

clients now send correct address for rendezvous point

2014-09-16 11:05:36 -04:00

bug13296

Add changes file for #13926

2014-11-12 15:25:52 -05:00

bug13325

Run correctly on OpenBSD systems without SSL_METHOD.get_cipher_by_char

2014-10-03 12:15:09 -04:00

bug13471

Note that our #13426 fix is also a #13471 fix.

2014-10-19 15:38:44 -04:00

bug13988

Increase bandwidth usage report interval to 4 hours.

2014-12-22 12:24:13 -05:00

bug14013

whoops; missing changes file for 14013

2014-12-23 10:55:25 -05:00

bug14125

Enlarge the buffer for a line in a bw file

2015-01-07 12:44:16 +01:00

bug14129

Avoid attempts to double-remove edge connections from the DNS resolver.

2015-01-08 11:00:21 -05:00

bug14142-parse-virtual-addr

Don't crash on torrc Vi[rtualAddrNetworkIPv[4|6]] with no option value

2015-01-11 11:05:00 -05:00

bug14195

Remove needless strdup in addressmap_register_virtual_address()

2015-01-13 12:24:42 -05:00

bug14220

Ignore warning for redundant decl in openssl/srtp.h

2015-01-15 12:38:08 -05:00

bug14261

Increase limit for status vote download size by a factor of 5.

2015-01-18 15:25:29 -05:00

bug15083

Adjust changes header

2015-03-09 11:07:50 -04:00

bug15088

Add wait4 to the seccomp2 sandbox allowable syscall list

2015-03-04 12:18:10 +01:00

bug15205

Don't use checked strl{cat,cpy} on OSX.

2015-03-09 15:09:49 -04:00

bug15515

Block multiple introductions on the same intro circuit.

2015-04-03 09:35:47 -04:00

bug15600

Validate the RSA key size received when parsing INTRODUCE2 cells.

2015-04-06 09:18:17 -04:00

bug15601

Changes file for bug15601

2015-04-06 09:24:16 -04:00

bug15823

Fix out-of-bounds read in INTRODUCE2 client auth

2017-02-07 08:31:37 -05:00

bug16248

Change behavior on missing/present event to warn instead of asserting.

2017-02-07 09:48:19 -05:00

bug16360-failed-crypto-early-init

Correctly handle failed crypto_early_init

2015-06-17 09:18:32 -04:00

bug17404

Check for len < 4 in dn_indicates_v3_cert

2015-10-21 11:44:43 -04:00

bug17772

Ensure node is a guard candidate when picking a directory guard

2015-12-08 09:49:01 -05:00

bug17781

Fix a compilation warning introduced by clang 3.6

2015-12-08 09:37:05 -05:00

bug17906

Update dannenberg's V3 authority identity fingerprint

2016-01-07 09:39:04 -08:00

bug18089

Make memwipe() do nothing when passed a NULL pointer or zero size

2017-02-07 08:33:39 -05:00

bug18162

avoid integer overflow in and around smartlist_ensure_capacity.

2016-01-27 12:32:41 -05:00

bug18710

Fix dnsserv.c assertion when no supported questions are requested.

2016-05-04 14:45:09 -04:00

bug19281

Make write_escaped_data more robust to large inputs.

2017-08-09 09:02:12 -04:00

bug20384

be sure to remember the changes file for #20384

2017-02-13 15:22:36 -05:00

bug21018

Fix parsing bug with unecognized token at EOS

2016-12-18 20:17:24 -05:00

bug22490

Fix undefined behavior in geoip_parse_entry().

2017-06-05 10:09:39 -04:00

bug22636

Add a changes file for bug22636.

2017-07-17 21:44:59 +00:00

bug22737

Fix an errant memset() into the middle of a struct in cell_pack().

2017-06-27 10:47:20 -04:00

bug22789

Mention TROVE-2017-007 in changes file for 22789

2017-07-07 10:51:25 -04:00

curve25519-donna32-bug

Put the bug number and correct credits in the changes file for the new curve25519-donna32

2014-07-23 21:25:53 -04:00

disable_sslv3

Disable SSLv3 unconditionally. Closes ticket 13426.

2014-10-15 11:50:05 -04:00

further-12184-diagnostic

diagnostic for 12184: Add a call to channel_dump_statistics

2014-07-16 10:34:39 +02:00

geoip6-april2015

Update geoip6 to the April 8 2015 database.

2015-04-24 17:51:36 +02:00

geoip6-august2014

Update geoip6 to the August 7 2014 database.

2014-08-13 16:16:11 +02:00

geoip6-january2015

Update geoip6 to the January 7 2015 database.

2015-01-22 09:58:29 +01:00

geoip6-july2014

Update geoip6 to the July 10 2014 database.

2014-07-18 16:31:25 +02:00

geoip6-june2015

Update geoip6 to the June 3 2015 database.

2015-06-09 16:28:48 +02:00

geoip6-march2015

Update geoip6 to the March 3 2015 database.

2015-03-09 21:11:52 +01:00

geoip6-november2014

Update geoip6 to the November 15 2014 database.

2014-11-24 14:23:18 +01:00

geoip-april2015

Update geoip to the April 8 2015 database.

2015-04-24 17:49:45 +02:00

geoip-april2016

Update geoip and geoip6 to the April 5 2016 database.

2016-04-07 11:10:09 +02:00

geoip-april2017

Update geoip and geoip6 to the April 4 2017 database.

2017-04-06 10:52:39 +02:00

geoip-august2014

Update geoip to the August 7 2014 database.

2014-08-13 16:08:33 +02:00

geoip-august2016

Update geoip and geoip6 to the August 2 2016 database.

2016-08-12 11:53:38 +02:00

geoip-august2017

Update geoip and geoip6 to the August 3 2017 database.

2017-08-03 10:00:54 +02:00

geoip-december2015

Update geoip and geoip6 to the December 1 2015 database.

2015-12-05 17:02:59 +01:00

geoip-december2016

Update geoip and geoip6 to the December 7 2016 database.

2016-12-09 10:23:36 +01:00

geoip-february2016

Update geoip and geoip6 to the February 2 2016 database.

2016-02-04 08:53:24 +01:00

geoip-february2017

Update geoip and geoip6 to the February 8 2017 database.

2017-02-12 15:56:31 +01:00

geoip-january2015

Update geoip to the January 7 2015 database.

2015-01-22 09:56:54 +01:00

geoip-january2016

Update geoip and geoip6 to the January 5 2016 database.

2016-01-07 11:10:37 +01:00

geoip-january2017

Update geoip and geoip6 to the January 4 2017 database.

2017-01-04 10:19:52 +01:00

geoip-july2014

Update geoip to the July 10 2014 database.

2014-07-18 16:28:50 +02:00

geoip-july2015

Update geoip and geoip6 to the July 8 2015 database.

2015-07-29 15:49:04 +02:00

geoip-july2016

Update geoip and geoip6 to the July 6 2016 database.

2016-07-18 08:40:22 +02:00

geoip-july2017

Update geoip and geoip6 to the July 4 2017 database.

2017-07-07 16:27:54 +02:00

geoip-jun2016

Update geoip and geoip6 to the June 7 2016 database.

2016-06-12 11:35:50 +02:00

geoip-june2015

Update geoip to the June 3 2015 database.

2015-06-09 16:26:10 +02:00

geoip-june2017

Update geoip and geoip6 to the June 8 2017 database.

2017-06-09 15:47:49 +02:00

geoip-march2015

Update geoip to the March 3 2015 database.

2015-03-09 21:09:44 +01:00

geoip-march2016

Update geoip and geoip6 to the March 3 2016 database.

2016-03-04 10:56:51 +01:00

geoip-march2017

Update geoip and geoip6 to the March 7 2017 database.

2017-03-08 09:41:35 +01:00

geoip-may2016

Update geoip and geoip6 to the May 4 2016 database.

2016-05-09 17:51:15 +02:00

geoip-may2017

Update geoip and geoip6 to the May 2 2017 database.

2017-05-08 10:09:42 +02:00

geoip-november2014

Update geoip to the November 15 2014 database.

2014-11-24 14:21:31 +01:00

geoip-november2016

Update geoip and geoip6 to the November 3 2016 database.

2016-11-07 15:05:19 +01:00

geoip-october2015

Update geoip and geoip6 to the October 9 2015 database.

2015-10-09 15:27:55 +02:00

geoip-october2016

Update geoip and geoip6 to the October 6 2016 database.

2016-10-05 16:35:14 +02:00

geoip-september2015

Update geoip and geoip6 to the September 3 2015 database.

2015-09-24 15:08:15 +02:00

geoip-september2016

Update geoip and geoip6 to the September 6 2016 database.

2016-09-07 11:08:04 +02:00

rsa_init_bug

Fix a dangling pointer issue in our RSA keygen code

2016-05-25 09:23:57 -04:00

test.h_msvc

Apply an MSVC compilation fix from Gisle Vanem

2014-08-13 15:11:00 -04:00

ticket12688

add a NumDirectoryGuards consensus param too

2014-07-24 16:19:47 -04:00

ticket12690

Raise guard threshold to top 25% or 2000 kilounits

2014-07-24 16:24:17 -04:00

ticket13036

Fix a number of clang analyzer false-positives

2014-09-02 11:56:56 -04:00

ticket14128

GETINFO bw-event-cache to get information on recent BW events

2015-03-09 13:13:56 -04:00

ticket14487

Faravahar's New IP Address as of 2/20/2015

2015-02-16 11:51:36 -05:00

trove-2017-001.2

Avoid integer underflow in tor_version_compare.

2017-02-14 16:10:27 -05:00

trove-2017-005

TROVE-2017-005: Fix assertion failure in connection_edge_process_relay_cell

2017-06-08 09:21:10 -04:00