 Nick Mathewson
|
758428dd32
Fix a remotely triggerable assertion failure (CVE-2012-2250)
|
13 years ago |
|
Nick Mathewson
|
f357ef9dcc
Discard extraneous renegotiation attempts in the v3 link protocol
|
13 years ago |
 Roger Dingledine
|
e50fa0d6cb
Refuse extra create cells with reason "resource limit"
|
13 years ago |
|
Nick Mathewson
|
0fa107a6aa
Update copyright dates to 2012; add a few missing copyright statements
|
13 years ago |
|
Nick Mathewson
|
711e4b4237
Merge remote-tracking branch 'linus/bug4369'
|
13 years ago |
 Linus Nordberg
|
2f0c0f92f8
Fix minor typo in warning printout.
|
13 years ago |
 George Kadianakis
|
153b9892f0
Extract data from DESTROY cell _after_ protocol violation checks.
|
13 years ago |
|
Nick Mathewson
|
9df89aacbd
Close OR connections that send junk before AUTHORIZE/VERSIONS
|
13 years ago |
|
Nick Mathewson
|
3fc3ed50a1
Merge remote-tracking branch 'public/bug4361'
|
13 years ago |
|
Nick Mathewson
|
26e789fbfd
Rename nonconformant identifiers.
|
13 years ago |
|
Nick Mathewson
|
b8675e5fe3
Do not pretend to allow PADDING as the first cell of a v3 handshake
|
13 years ago |
|
Nick Mathewson
|
3826e058ac
Implement proposal 187: reserve a cell type for client authorization
|
14 years ago |
|
Nick Mathewson
|
0539c34c35
Merge branch 'bug4360'
|
14 years ago |
|
Nick Mathewson
|
7992eb43c5
Log more loudly on a bad cert from an authority.
|
14 years ago |
|
Nick Mathewson
|
69dd993a92
Make certificate skew into a protocol warning
|
14 years ago |
|
Nick Mathewson
|
325a659cb1
Even when we can't answer an AUTH_CHALLENGE, send NETINFO.
|
14 years ago |
|
Nick Mathewson
|
248b967ce6
Add comments and changes file for 4361; tweak control flow a bit
|
14 years ago |
 frosty
|
3dd2f990a3
Do not send a NETINFO cell as a client until after we have got a CERT cell
|
14 years ago |
|
Nick Mathewson
|
88c4b425bd
Fix bug 4367: correctly detect auth_challenge cells we can't use
|
14 years ago |
|
Roger Dingledine
|
be1f3a5eb5
normalize the name of the CERTS cell
|
14 years ago |
|
Nick Mathewson
|
4dd8d811d6
Merge branch 'bug4343'
|
14 years ago |
|
Nick Mathewson
|
212c3acd42
Merge remote-tracking branch 'origin/maint-0.2.2'
|
14 years ago |
|
Nick Mathewson
|
cf8bffa359
Discard all cells on a marked connection
|
14 years ago |
|
Nick Mathewson
|
2018f86e0c
"Authetnicate" is not the usual spelling
|
14 years ago |
|
Nick Mathewson
|
c2a098e980
Fix a double-free that would occur on an invalid cert in a CERTS cell
|
14 years ago |
 Sebastian Hahn
|
2dec6597af
Merge branch 'maint-0.2.2_secfix' into master_secfix
|
14 years ago |
|
Sebastian Hahn
|
df05e5ef4d
Merge branch 'maint-0.2.1_secfix' into maint-0.2.2_secfix
|
14 years ago |
 Robert Ransom
|
a74e7fd40f
Reject create cells on outgoing OR connections from bridges
|
14 years ago |
|
Robert Ransom
|
af12c39d6d
Don't use any OR connection which sent us a CREATE_FAST cell for an EXTEND
|
14 years ago |
|
Roger Dingledine
|
a68867b150
manually backport a5232e0c4c
|
14 years ago |
