David Goulet 91cee3c9e7 Guard: Don't pick ourselves as a possible Guard ...

TROVE-2017-12. Severity: Medium

Thankfully, tor will close any circuits that we try to extend to
ourselves so this is not problematic but annoying.

Part of #21534.

2017-11-28 19:12:56 -05:00

..

.dummy

Add a .dummy file in the changes directory to stop git from removing it

2015-05-11 11:41:48 -04:00

bastet_v6

Add bastet's ipv6 address

2017-11-27 09:09:16 -05:00

bug8185_025

Don't package cells onto marked circuits.

2017-09-29 09:33:47 -04:00

bug15582

Avoid sscanf() warnings from openbsd in the unit tests

2017-09-12 16:01:12 -04:00

bug18100

Fix the TRPOXY typo in connection_edge.c

2017-05-15 11:16:50 -04:00

bug18329-minimal

Minimal implementation of bridge-distribution-request

2017-11-13 20:44:51 -05:00

bug20059

Avoid a double-mark bug when makring a pending circuit as "too old"

2017-03-15 11:05:37 -04:00

bug20247

Allow setsockopt(IPV6_V6ONLY) in sandbox.

2017-07-05 13:09:21 -04:00

bug20270

Report common reasons for rejecting a relay before uncommon ones

2017-05-09 10:28:51 -04:00

bug20509

dir auths reject 0.2.9.x for x<5, due to bug 20499

2017-05-22 08:31:39 -04:00

bug20711

Clarify the message logged when a remote relay is unexpectedly missing a port

2017-01-03 16:56:32 +11:00

bug20894

fixup! Don't atoi off the end of a buffer chunk.

2017-02-14 16:44:58 -05:00

bug21007_case2

Also allow C_MEASURE_TIMEOUT circuits to lack guard state.

2017-02-24 11:12:21 -05:00

bug21027

Change approach to preventing duplicate guards.

2017-02-28 08:16:33 -05:00

bug21116

test: Add missing socket errno in test_util.c

2017-02-08 09:00:48 -05:00

bug21278_extras

changes file for removing compare-by-subtraction pattern

2017-02-14 16:32:59 -05:00

bug21278_prevention

When examining descriptors as a dirserver, reject ones with bad versions

2017-02-15 07:46:34 -05:00

bug21369_check

Try to check for (and prevent) buffer size INT_MAX overflow better.

2017-02-27 10:01:27 -05:00

bug21415

Improve descriptor checks in the new guard algorithm.

2017-03-01 08:46:53 -05:00

bug21420

Revise the logic for picking the start time for link certs

2017-02-27 11:19:54 -05:00

bug21447

Rename make fuzz to make test-fuzz-corpora

2017-02-14 18:04:10 -05:00

bug21450

Limit version numbers to 0...INT32_MAX.

2017-02-15 07:57:34 -05:00

bug21471

hs: Avoid a strlen(NULL) if descriptor is not found in cache

2017-02-15 10:27:41 -05:00

bug21472

Small fixes to fuzzing documentation.

2017-02-24 10:57:58 -05:00

bug21492

Remove a redundant check in ..transition_affects_guards()

2017-02-17 11:47:25 -05:00

bug21507

Reject Tor versions that contain non-numeric prefixes

2017-02-19 22:38:06 +11:00

bug21553

hs: Fix bad use of sizeof() when encoding ESTABLISH_INTRO legacy cell

2017-02-24 11:36:36 -05:00

bug21562

Use bash in src/test/test-network.sh

2017-02-28 02:13:56 +11:00

bug21576

Fix a crash when a connection tries to open just after it has been unlinked

2017-03-02 11:10:30 +11:00

bug21581

Restore support for test-network.sh on BSD and other systems without bash

2017-03-01 11:40:54 +11:00

bug21594

Remove delay in hidden service introduction point checks

2017-03-07 08:04:57 -05:00

bug21596

Make hidden services always check for failed intro point connections

2017-03-02 15:34:45 +11:00

bug21682

Fix a memory leak in config_get_assigned_option()

2017-03-08 10:06:48 -05:00

bug21720

#21720: Update "directory server options" preamble in manpage

2017-03-14 11:25:54 -04:00

bug21771

Fix max sampled size logic when in bridge mode.

2017-03-27 15:39:26 +02:00

bug21799

Use update_approx_time() to run a test 100 days in the past.

2017-03-23 10:44:43 +01:00

bug21825

hs: Expose hs_service.c functions for unit tests

2017-04-04 09:41:14 -04:00

bug21894_029

Never read off the end of a buffer in base32_encode()

2017-04-07 10:47:16 -04:00

bug21943

Add a changes file for 21943.

2017-05-08 13:39:59 -04:00

bug21969

Set guard state on bridge descriptor fetches.

2017-05-22 15:56:32 +03:00

bug22034

control: Wrong check on base16_decode return value

2017-04-24 09:20:13 -04:00

bug22245

Fix a logic error in hibernate.c

2017-05-15 11:43:18 -04:00

bug22246

Initialize the HS cache at startup

2017-05-15 13:49:29 -04:00

bug22252

Fix crash when starting with LearnCircuitBuildTimeout 0.

2017-05-16 11:20:12 -04:00

bug22349

Mark descriptors as undownloadable when dirserv_add_() rejects them

2017-06-27 12:01:46 -04:00

bug22370

Stop leaking keypin-rejected routerinfos on directory authorities

2017-05-25 00:09:40 -04:00

bug22400_01

Don't expand guard sample set unless consensus is "reasonably live"

2017-06-19 15:48:47 -04:00

bug22446

Fix GCC 7 -Wimplicit-fallthrough warnings (32 bit)

2017-09-11 17:45:07 -04:00

bug22447

hs: Correctly validate v3 descriptor encrypted length

2017-05-30 10:27:42 -04:00

bug22460_case1

Fix ed25519 link certificate race on tls context rotation

2017-06-01 09:26:24 -04:00

bug22460_case2

Changes file for the x509 link certificate case of bug22460

2017-06-05 15:27:33 -04:00

bug22466_regenerate

Regenerate RSA->ed25519 identity crosscertificate as needed

2017-06-01 10:04:52 -04:00

bug22490

Fix undefined behavior in geoip_parse_entry().

2017-06-05 10:09:39 -04:00

bug22516

Permit the fchmod system call.

2017-06-16 14:03:02 -04:00

bug22636

Add a changes file for bug22636.

2017-07-17 21:44:59 +00:00

bug22644

Fix crashes on empty +HSPOST and +POSTDESCRIPTOR commands

2017-09-07 09:20:00 -04:00

bug22737

Fix an errant memset() into the middle of a struct in cell_pack().

2017-06-27 10:47:20 -04:00

bug22753

Consider the exit family when applying guard restrictions.

2017-06-29 09:57:00 -04:00

bug22789

Mention TROVE-2017-007 in changes file for 22789

2017-07-07 10:51:25 -04:00

bug22797

Always allow extra file descriptors when setting the connection maximum

2017-07-05 11:15:10 -04:00

bug22801

Fix -Wfloat-conversion C warnings on mingw in clamp_double_to_int64.

2017-07-03 10:59:31 -04:00

bug22803

Fix unit test memory leak in certs_ok_ed25519.

2017-07-05 15:42:25 -04:00

bug22838_028

mingw fix: avoid "unused var" warning.

2017-07-07 10:54:24 -04:00

bug22915

Suppress clang4-specific -Wdouble-promotion warnings

2017-07-26 12:53:00 -04:00

bug22916_027

Fix compiler warnings with openssl-scrypt/libscrypt test on clang

2017-07-13 17:49:48 -04:00

bug23030_029

Fix build warnings from Coverity related to our BUG macro

2017-07-26 12:57:49 -04:00

bug23078

hs: Cleanup logging statement in hs_intropoint.c

2017-08-01 14:15:47 -04:00

bug23081

In ntmain, call set_main_thread() before running the loop.

2017-08-03 09:09:08 -04:00

bug23291

changes file for bug 23291

2017-08-21 15:04:35 -04:00

bug23470

Stop relays calling directory_fetches_from_authorities on dir downloads

2017-09-13 09:46:17 +10:00

bug23610

hs: Avoid possible double circuit close on error

2017-09-22 09:09:13 -04:00

bug23690

Clear outbuf_flushlen when we clear a connection's outbuf

2017-09-29 10:00:14 -04:00

bug23693

Make changes in server_mode() affect workers; fix a crash.

2017-10-02 11:11:30 -04:00

bug23874

Clear the address when node_get_prim_orport() returns early

2017-10-15 16:48:36 -04:00

feature21570

Log tor warnings during 'make test-network-all'

2017-02-28 02:01:37 +11:00

geoip-2017-11-06

Update geoip and geoip6 to the November 6 2017 database.

2017-11-10 10:14:09 +01:00

geoip-april2017

Update geoip and geoip6 to the April 4 2017 database.

2017-04-06 10:52:39 +02:00

geoip-august2017

Update geoip and geoip6 to the August 3 2017 database.

2017-08-03 10:00:54 +02:00

geoip-february2017

Update geoip and geoip6 to the February 8 2017 database.

2017-02-12 15:56:31 +01:00

geoip-july2017

Update geoip and geoip6 to the July 4 2017 database.

2017-07-07 16:27:54 +02:00

geoip-june2017

Update geoip and geoip6 to the June 8 2017 database.

2017-06-09 15:47:49 +02:00

geoip-march2017

Update geoip and geoip6 to the March 7 2017 database.

2017-03-08 09:41:35 +01:00

geoip-may2017

Update geoip and geoip6 to the May 2 2017 database.

2017-05-08 10:09:42 +02:00

geoip-october2017

add missing subcategory in changes file

2017-10-05 11:04:54 -04:00

geoip-september2017

Update geoip and geoip6 to the September 6 2017 database.

2017-09-07 21:06:16 +02:00

longclaw_23592

Update Longclaw's IP address; fixes 23592.

2017-10-17 14:00:30 -04:00

longclaw-ipv6

Remove longclaw's IPv6 address, as it will soon change

2017-09-20 14:48:53 +10:00

prop275-minimal

Stop declining to download microdescs with future published times.

2017-03-06 15:37:01 -05:00

ticket20656

protover: Add new version for prop224 for HSIntro/HSDir

2017-02-14 10:51:18 -05:00

ticket21564

Update fallback directory mirrors in May 2017

2017-05-16 19:02:42 +10:00

ticket21953

Enable some windows hardening features

2017-05-11 16:39:02 -04:00

ticket22895

Remove unused variables in donna's SSE2 code

2017-07-27 11:26:13 -04:00

ticket23910

dirauth: Add bastet to the default authorities

2017-10-23 09:03:36 -04:00

trove-2017-001.2

Avoid integer underflow in tor_version_compare.

2017-02-14 16:10:27 -05:00

trove-2017-004

bump to 0.3.0.8

2017-06-08 09:24:28 -04:00

trove-2017-005

TROVE-2017-005: Fix assertion failure in connection_edge_process_relay_cell

2017-06-08 09:21:10 -04:00

trove-2017-008

Fix log-uninitialized-stack bug in rend_service_intro_established.

2017-09-18 09:32:41 -04:00

trove-2017-012-part2

Guard: Don't pick ourselves as a possible Guard

2017-11-28 19:12:56 -05:00