Nick Mathewson d8cfa2ef4e Avoid free()ing from an mmap on corrupted microdesc cache ...

The 'body' field of a microdesc_t holds a strdup()'d value if the
microdesc's saved_location field is SAVED_IN_JOURNAL or
SAVED_NOWHERE, and holds a pointer to the middle of an mmap if the
microdesc is SAVED_IN_CACHE.  But we weren't setting that field
until a while after we parsed the microdescriptor, which left an
interval where microdesc_free() would try to free() the middle of
the mmap().

This patch also includes a regression test.

This is a fix for #10409; bugfix on 0.2.2.6-alpha.

2013-12-16 13:06:00 -05:00

..

bug5650

Avoid busy-looping on WANTREAD within connection_handle_write

2013-04-12 01:11:31 -04:00

bug6024

Clarify that hidden services are TCP only

2012-09-19 08:19:21 -04:00

bug6043

changelog for bug6043

2012-07-31 11:49:20 -04:00

bug6218

Fix port range in parse_port_range().

2012-07-06 08:02:14 -04:00

bug6244_part_c

Fix wildcarded address mappings from the control port

2012-08-15 17:59:30 -04:00

bug6251

Quiet "Set buildtimeout to low val" warnings: make them info

2012-08-27 16:37:09 -04:00

bug6252_again

Have the bug6252 commit message reflect its on-again/off-again status

2012-07-18 10:24:17 -04:00

bug6271

Fix a bug handling SENDME cells on nonexistent streams.

2012-07-06 07:29:54 -04:00

bug6274

Better handling of server managed proxies when Tor is not a relay.

2012-07-18 20:01:02 +02:00

bug6274_2

Better handling of server managed proxies when Tor is not a relay.

2012-07-18 20:01:02 +02:00

bug6296

On windows, ENOBUFS starts with WSA. #6296. Fix on 0.2.18-rc

2012-07-05 05:01:00 -04:00

bug6341

Check ewma_enabled before doing circ-has-become-inactive check

2012-07-18 10:28:55 -04:00

bug6377

Allow TestingTorNetwork when alternate dir and bridge authorities are set.

2012-07-17 09:35:38 -04:00

bug6379

Fix warnings and 64-bit problems in openbsd-malloc code

2012-08-15 19:26:53 -04:00

bug6387

Improve Alternate*Authority docs. Bug 6387.

2012-07-16 11:21:20 -04:00

bug6397

Refer to the correct variable in a loop when parsing entry guard state

2012-07-16 11:49:45 -04:00

bug6404

Update description of what we did to upper limit on md size

2012-08-14 03:10:14 -04:00

bug6423

Consider IPv6 OR ports when deciding whether a routerinfo change is cosmetic.

2012-08-17 15:59:13 -04:00

bug6436

changes file for bug 6436.

2012-07-20 09:50:19 -04:00

bug6472

When iterating over connections pending DNS, skip marked ones

2012-08-17 16:46:11 -04:00

bug6475

Address Nick's comments from code review.

2012-08-16 16:29:19 -07:00

bug6480

Avoid hard (impossible?)-to-trigger double-free in dns_resolve()

2012-07-31 17:19:17 -04:00

bug6490

Warn when accounting is used in a way likely to link hidden services

2012-07-31 10:28:16 -04:00

bug6500

Fix some manpage typos

2012-07-31 10:16:03 -04:00

bug6507

Reject attempts to say FooPort and FooPort 0 in the same cfg domain

2012-08-09 16:13:03 -04:00

bug6514

Defensive programming: clear rs_out between iterations.

2012-08-01 17:25:34 -04:00

bug6530

Clarify security impact of bug 6530

2012-08-03 11:16:13 -04:00

bug6690

Do not assert when comparing a null address/port against a policy

2012-08-27 12:04:55 -04:00

bug6710

Fix changes file for 6710: before 0.0.8pre1, you couldn't extend to

2012-08-27 12:29:04 -04:00

bug6732

Document consensus and microdesc files

2012-08-31 11:35:47 -04:00

bug6743

Make begindir_cutoff the same as general_cutoff

2012-09-01 01:25:17 -04:00

bug6774

Avoid segfault if EntryGuardPathBias precedes EntryGuard

2012-09-05 13:27:54 -04:00

bug6801

Avoid segfault when reading state file from ancient tor

2012-09-10 10:35:18 -04:00

bug6811

Fix assertion failure in tor_timegm.

2012-09-11 13:13:07 -04:00

bug6827

mention the bug number in the 6827 changes file

2012-09-13 10:07:06 -04:00

bug6844

Use file-size-fixup code on cygwin too.

2012-09-14 12:39:18 -04:00

bug6866

Bug 6866: Convert pathbias asserts into log messages.

2012-09-17 18:25:28 -07:00

bug6979

Fix an assert when disabling ORPort with accounting disabled.

2013-09-18 10:26:32 -04:00

bug7014

Don't call fmt_addr() twice in a parameter list.

2012-10-09 23:46:04 -04:00

bug7022

properly free the return values of rate_limit_log()

2012-10-03 13:15:27 -04:00

bug7037

Refuse extra create cells with reason "resource limit"

2012-10-03 20:17:37 -04:00

bug7139

Disable TLS Session Tickets, which we were apparently getting for free

2012-10-19 00:54:51 -04:00

bug7190

Let 0.2.3 clients exit to internal addresses if they want

2012-10-23 17:18:01 -04:00

bug7191

Add a changes file for bug 7191.

2012-10-23 21:35:30 -04:00

bug7192

Fix parse_short_policy (bug 7192.)

2012-10-23 13:49:48 -04:00

bug7352

Add and use and unlikely-to-be-eliminated memwipe()

2012-11-08 16:44:50 -05:00

bug7464

use a more logical operator

2012-11-12 23:47:21 -05:00

bug7889

Reject create/begin/etc cells with {circ,stream}ID 0.

2013-01-14 14:02:13 -05:00

bug8208

Check whether ei is non-NULL before altering it.

2013-02-11 16:05:03 -05:00

bug8377

Make sure that [::1] is recognized as a private address

2013-03-01 12:22:57 -05:00

bug8844

Don't run off the end of the array-of-freelists

2013-05-09 13:10:48 -04:00

bug9002

Limit hidden service descriptors to at most 10 guard nodes.

2013-06-16 20:24:48 -04:00

bug9017

Fix (Open?)BSD fast-connect bug with optimistic data.

2013-06-10 12:14:49 -04:00

bug9063

Don't queue more cells as a middle relay than the spec allows to be in flight

2013-06-13 21:39:04 -07:00

bug9063_redux

Implement a real OOM-killer for too-long circuit queues.

2013-06-18 10:15:16 -04:00

bug9072

Disable middle relay queue overfill detection code due to possible guard discovery attack

2013-06-15 02:16:00 -07:00

bug9093

Improved circuit queue out-of-memory handler

2013-11-07 12:15:30 -05:00

bug9546

Make bridges send AUTH_CHALLENGE cells

2013-08-21 11:28:58 -04:00

bug9564

Replace return with continue in update_consensus_networkstatus_downloads

2013-08-22 10:00:37 -04:00

bug9671_023

use !cbt_disabled in place of LearnCBT to avoid needless circs

2013-09-04 15:54:05 -04:00

bug9928

Give credit to bug reporter for 9928

2013-10-08 12:06:06 -04:00

bug10409

Avoid free()ing from an mmap on corrupted microdesc cache

2013-12-16 13:06:00 -05:00

cov709056

Coverity 709056: Check return value on fputs in tor-gencert

2012-07-16 11:38:39 -04:00

cve-2012-2249

Discard extraneous renegotiation attempts in the v3 link protocol

2012-10-17 19:18:16 -04:00

dirserv-BUGGY-a

Don't serve or accept v2 HS descs over a DirPort

2012-10-19 02:56:25 -04:00

disable_pathbias_messages

Downgrade path-bias warning messages to INFO for now.

2012-08-27 16:18:35 -04:00

geoip-apr2013

Update to the April 2013 GeoIP database.

2013-04-08 12:18:40 +02:00

geoip-august2013

Update to the August 2013 GeoIP database.

2013-08-12 15:26:36 +02:00

geoip-dec2012

Update to the December 2012 GeoIP database.

2012-12-13 08:44:30 +01:00

geoip-feb2013

Update to the February 2013 GeoIP database.

2013-02-08 14:39:25 +01:00

geoip-jan2013

Update to the January 2013 GeoIP database.

2013-01-05 08:18:26 +01:00

geoip-july2013

Update to the July 2013 GeoIP database.

2013-07-08 10:21:28 +02:00

geoip-june2013

Update to the June 2013 GeoIP database.

2013-06-05 08:43:03 +02:00

geoip-mar2013

Update to the March 2013 GeoIP database.

2013-03-07 20:58:31 +01:00

geoip-may2013

Update to the May 2013 GeoIP database.

2013-05-13 15:37:43 +02:00

geoip-nov2012

Update to the November 2012 GeoIP database.

2012-12-13 08:44:20 +01:00

geoip-october2013

Update to the October 2013 GeoIP database.

2013-10-11 13:36:30 +02:00

geoip-september2013

Update to the September 2013 GeoIP database.

2013-09-10 15:00:06 +02:00

link_negotiation_assert

Fix a remotely triggerable assertion failure (CVE-2012-2250)

2012-10-23 22:58:38 -04:00

pathsel-BUGGY-a

Try to clarify impact of bug 6537

2012-08-03 11:54:11 -04:00

port_doc

Improve message on spurious SOCKSListenAddress

2012-07-17 12:02:55 -04:00

revert-geoip-may2012

Revert to the May 2012 geoip db

2012-07-06 16:29:51 -04:00

smartlist_foreach

Tweaks to 6400 changes file and docs as suggested by arma

2012-07-18 10:12:19 -04:00

ticket5749

add faravahar as our ninth v3 dir auth

2012-09-22 09:10:37 -04:00