Nick Mathewson 971e83ef9c Fix two more SIZE_T_CEILING issues ...

This patch imposes (very long) limits on the length of a line in a
directory document, and on the length of a certificate.  I don't
think it should actually be possible to overrun these remotely,
since we already impose a maximum size on any directory object we're
downloading, but a little defensive programming never hurt anybody.

Roger emailed me that doorss reported these on IRC, but nobody seems
to have put them on the bugtracker.

2011-01-19 13:22:50 -05:00

..

annotations_fix

Enforce multiplicity rules when parsing annotations.

2010-11-10 16:02:02 -05:00

bug1125

Add changes file for bug1125

2010-11-12 12:59:42 -05:00

bug1141

Scale CONSENSUS_MIN_SECONDS_BEFORE_CACHING by voting interval

2010-08-17 11:55:39 -04:00

bug1840

Close a non-open OR connection *only* after KeepalivePeriod.

2010-09-03 11:32:35 -04:00

bug1981

actually retry bridges when your network goes away

2010-09-28 18:36:15 -04:00

bug2050

let unpublished bridges learn their ip address too

2010-11-11 11:26:42 -05:00

bug2190

Do not send Libevent log messages to a controller (0.2.1 backport)

2010-11-19 22:27:40 -05:00

bug2305

Note that Tor requires Automake 1.7. Fixes bug 2305

2011-01-03 17:24:16 -05:00

bug2313

Never include pthread.h when building for Windows.

2011-01-03 12:45:13 -05:00

bug2324

Check size against SIZE_T_CEILING in realloc too.

2011-01-03 15:15:27 -05:00

bug2324_uncompress

Detect and disallow compression bombs

2011-01-03 15:54:23 -05:00

bug2326

Avoid assertion on read_file_to_str() with size==SIZE_T_CEILING-1

2011-01-03 15:30:11 -05:00

bug2328

Correctly detect and exclude addresses outside of our virtual address range

2011-01-07 12:24:36 -05:00

bug2332

Always nul-terminate the result passed to evdns_server_add_ptr_reply

2011-01-15 11:49:25 -05:00

bug2352

Impose maximum sizes on parsed objects

2011-01-10 12:12:11 -05:00

bug2384

Fix a couple of non-cleared key issues in hidden services

2011-01-15 14:10:54 -05:00

fix2204

Do not set the hostname TLS extension server-side; only client-side

2010-11-20 22:21:50 -05:00

gabelmoo-newip

Change gabelmoo's IP address and ports.

2010-12-16 13:28:30 +01:00

geoip-dec2010

Update to the December 1 2010 Maxmind GeoLite Country database.

2010-12-08 17:59:40 +01:00

geoip-jan2011

Update to the January 1 2011 Maxmind GeoLite Country database.

2011-01-10 10:37:54 +01:00

geoip-oct2010

Update to the October 1 2010 Maxmind GeoLite Country database.

2010-10-04 11:45:53 +02:00

geoip-sep2010

Update to the September 1 2010 Maxmind GeoLite Country database.

2010-09-08 11:03:26 +02:00

geoip-update-august2010

Update to the August 1 2010 Maxmind GeoLite Country database.

2010-08-03 13:04:09 +02:00

geoip-update-june2010

add changes file for geoip db update

2010-06-07 15:09:48 -04:00

maatuska-new-v3auth

Add maatuska as eighth v3 directory authority.

2010-06-11 19:10:55 +02:00

mingw-openssl098m

Fix compilation with mingw and OpenSSL 0.9.8m+

2010-11-23 12:47:38 -05:00

misc-reason

Backport END_STREAM_REASON_NOROUTE for client use.

2010-08-18 11:12:32 -04:00

new-geoip-db

move to maxmind geoip db

2010-05-06 07:15:22 -04:00

openbsd-sysheaders

Use -Wno-system-headers on openbsd to resolve 2nd case of bug1848

2010-08-26 19:03:51 +02:00

remove-debian

Remove the debian directory from the main git repository

2010-08-04 12:21:48 -04:00

remove-website

stop shipping doc/img and doc/website in the tarball

2010-11-23 00:03:50 -05:00

routerparse_maxima

Fix two more SIZE_T_CEILING issues

2011-01-19 13:22:50 -05:00

security_bug

Add a changelog entry

2010-12-15 22:35:07 -05:00

tolen_asserts

make the description of tolen_asserts more dire

2011-01-15 11:49:26 -05:00