Nick Mathewson f357ef9dcc Discard extraneous renegotiation attempts in the v3 link protocol ...

Failure to do so left us open to a remotely triggerable assertion
failure. Fixes CVE-2012-2249; bugfix on 0.2.3.6-alpha. Reported by
"some guy from France".

2012-10-17 19:18:16 -04:00

..

bug6024

Clarify that hidden services are TCP only

2012-09-19 08:19:21 -04:00

bug6043

changelog for bug6043

2012-07-31 11:49:20 -04:00

bug6218

Fix port range in parse_port_range().

2012-07-06 08:02:14 -04:00

bug6244_part_c

Fix wildcarded address mappings from the control port

2012-08-15 17:59:30 -04:00

bug6251

Quiet "Set buildtimeout to low val" warnings: make them info

2012-08-27 16:37:09 -04:00

bug6252_again

Have the bug6252 commit message reflect its on-again/off-again status

2012-07-18 10:24:17 -04:00

bug6271

Fix a bug handling SENDME cells on nonexistent streams.

2012-07-06 07:29:54 -04:00

bug6274

Better handling of server managed proxies when Tor is not a relay.

2012-07-18 20:01:02 +02:00

bug6274_2

Better handling of server managed proxies when Tor is not a relay.

2012-07-18 20:01:02 +02:00

bug6296

On windows, ENOBUFS starts with WSA. #6296. Fix on 0.2.18-rc

2012-07-05 05:01:00 -04:00

bug6341

Check ewma_enabled before doing circ-has-become-inactive check

2012-07-18 10:28:55 -04:00

bug6377

Allow TestingTorNetwork when alternate dir and bridge authorities are set.

2012-07-17 09:35:38 -04:00

bug6379

Fix warnings and 64-bit problems in openbsd-malloc code

2012-08-15 19:26:53 -04:00

bug6387

Improve Alternate*Authority docs. Bug 6387.

2012-07-16 11:21:20 -04:00

bug6397

Refer to the correct variable in a loop when parsing entry guard state

2012-07-16 11:49:45 -04:00

bug6404

Update description of what we did to upper limit on md size

2012-08-14 03:10:14 -04:00

bug6423

Consider IPv6 OR ports when deciding whether a routerinfo change is cosmetic.

2012-08-17 15:59:13 -04:00

bug6436

changes file for bug 6436.

2012-07-20 09:50:19 -04:00

bug6472

When iterating over connections pending DNS, skip marked ones

2012-08-17 16:46:11 -04:00

bug6475

Address Nick's comments from code review.

2012-08-16 16:29:19 -07:00

bug6480

Avoid hard (impossible?)-to-trigger double-free in dns_resolve()

2012-07-31 17:19:17 -04:00

bug6490

Warn when accounting is used in a way likely to link hidden services

2012-07-31 10:28:16 -04:00

bug6500

Fix some manpage typos

2012-07-31 10:16:03 -04:00

bug6507

Reject attempts to say FooPort and FooPort 0 in the same cfg domain

2012-08-09 16:13:03 -04:00

bug6514

Defensive programming: clear rs_out between iterations.

2012-08-01 17:25:34 -04:00

bug6530

Clarify security impact of bug 6530

2012-08-03 11:16:13 -04:00

bug6690

Do not assert when comparing a null address/port against a policy

2012-08-27 12:04:55 -04:00

bug6710

Fix changes file for 6710: before 0.0.8pre1, you couldn't extend to

2012-08-27 12:29:04 -04:00

bug6732

Document consensus and microdesc files

2012-08-31 11:35:47 -04:00

bug6743

Make begindir_cutoff the same as general_cutoff

2012-09-01 01:25:17 -04:00

bug6774

Avoid segfault if EntryGuardPathBias precedes EntryGuard

2012-09-05 13:27:54 -04:00

bug6801

Avoid segfault when reading state file from ancient tor

2012-09-10 10:35:18 -04:00

bug6811

Fix assertion failure in tor_timegm.

2012-09-11 13:13:07 -04:00

bug6827

mention the bug number in the 6827 changes file

2012-09-13 10:07:06 -04:00

bug6844

Use file-size-fixup code on cygwin too.

2012-09-14 12:39:18 -04:00

bug6866

Bug 6866: Convert pathbias asserts into log messages.

2012-09-17 18:25:28 -07:00

bug7014

Don't call fmt_addr() twice in a parameter list.

2012-10-09 23:46:04 -04:00

bug7022

properly free the return values of rate_limit_log()

2012-10-03 13:15:27 -04:00

bug7037

Refuse extra create cells with reason "resource limit"

2012-10-03 20:17:37 -04:00

cov709056

Coverity 709056: Check return value on fputs in tor-gencert

2012-07-16 11:38:39 -04:00

cve-2012-2249

Discard extraneous renegotiation attempts in the v3 link protocol

2012-10-17 19:18:16 -04:00

disable_pathbias_messages

Downgrade path-bias warning messages to INFO for now.

2012-08-27 16:18:35 -04:00

pathsel-BUGGY-a

Try to clarify impact of bug 6537

2012-08-03 11:54:11 -04:00

port_doc

Improve message on spurious SOCKSListenAddress

2012-07-17 12:02:55 -04:00

revert-geoip-may2012

Revert to the May 2012 geoip db

2012-07-06 16:29:51 -04:00

smartlist_foreach

Tweaks to 6400 changes file and docs as suggested by arma

2012-07-18 10:12:19 -04:00

ticket5749

add faravahar as our ninth v3 dir auth

2012-09-22 09:10:37 -04:00