Nick Mathewson 403c6ae78e Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4 10 éve
..
10777_netunreach 0844a262a2 update changes file 10 éve
6783_big_hammer e4614d30e5 Add a DisableV2DirectoryInfo_ option to 404 all v2 ns requests 11 éve
9854 270dcc9131 Changes file for 9854 11 éve
bug10124 a82b18f216 missing changes file for #10124 11 éve
bug1038-3 68a2e4ca4b Warn and drop the circuit if we receive an inbound 'relay early' cell 10 éve
bug10402 7b87003957 Never allow OpenSSL engines to replace the RAND_SSLeay method 11 éve
bug10409 d8cfa2ef4e Avoid free()ing from an mmap on corrupted microdesc cache 11 éve
bug10423 46b3b6208d Avoid double-free on failure to dump_descriptor() a cached md 11 éve
bug10456 b5d13d11c9 Fix a logic error in circuit_stream_is_being_handled. 11 éve
bug10465 b9f6e40ecb Fix automapping to ipv6 11 éve
bug10470 3511549651 Clarify DirPort multiplicity 11 éve
bug10485 edc6fa2570 Deliver circuit handshake counts as part of the heartbeat 10 éve
bug10777_internal_024 b15f75b632 Don't treat END_STREAM_REASON_INTERNAL as total circuit failure 10 éve
bug10793 9e2de8cecc changelog for 10793 10 éve
bug10835 9bb34aa897 Survive fedora's openssl in our benchmarks 10 éve
bug10849_023 f8248abbd6 Forbid TunneledDirConns 0 and PreferTunneledDirConns 0 if being a HS 10 éve
bug10870 3133cde3c1 Excise the insertion_time_elem_t logic 10 éve
bug10904 e4bc757cde changes file for bug 10904 10 éve
bug10929 9f38cd9350 add changes file for bug 10929 10 éve
bug11437 ab1a679eef Fix a small memory leak when resolving PTR addresses 10 éve
bug11464_023 09ed8a5dbb Tweak changes file and comment dates. 10 éve
bug11513 bd3db82906 New sort order for server choice of ciphersuites. 10 éve
bug11519 b2106956e0 Don't send uninitialized stack to the controller and say it's a date. 10 éve
bug11553 bb9b4c37f8 Supply better and less frequent warnings on circID exhaustion 10 éve
bug12227 1b551823de Avoid illegal read off end of an array in prune_v2_cipher_list 10 éve
bug12718 8882dcfc59 add a changes file for bug 12718 10 éve
bug13100 0eec8e2aa5 gabelmoo's IPv4 address changed 10 éve
bug13151-client 0c3b3650aa clients now send correct address for rendezvous point 10 éve
bug13471 c1dd598df8 Note that our #13426 fix is also a #13471 fix. 10 éve
bug1992 5911fc0c17 Check for IP address change every minute, not 15 minutes 11 éve
bug2286 e73bbea262 Tweak consensus method 17 based on arma's comments 11 éve
bug5595 fddb814fea When downloading certificates, distinguish requesting by identity digest from requesting by ID digest, signing key pair; fixes bug 5595 11 éve
bug5650 39ac1db60e Avoid busy-looping on WANTREAD within connection_handle_write 11 éve
bug6026 07e26005a6 Treat a changed IPv6 ORPort like an IPv4 one in retry_all_listeners() 11 éve
bug6055 ad763a336c Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1e 11 éve
bug6174 62fb209d83 Stop frobbing timestamp_dirty as our sole means to mark circuits unusable 11 éve
bug6206 63b67577d6 Check return values from fcntl and setsockopt 11 éve
bug6304 b9a8f8c17c Fix the warning about LearnCircuitBuildTimeout && !CircuitBuildTimeout 11 éve
bug6572 fc9a72c688 Changes file for bug6572. 11 éve
bug6673 fdafe11a25 Give an #error when we want threads and OpenSSL has disabled threads 11 éve
bug6979 dece40fd77 Fix an assert when disabling ORPort with accounting disabled. 11 éve
bug7054 0b598cb2bb Say "KBytes" rather than "KB" in the man page 12 éve
bug7065 4cc7cc28f8 Changes file for #7065 11 éve
bug7143 3dc52e6636 Add src/or/micro-revision.i to CLEANFILES in case anybody has one 11 éve
bug7164_diagnostic adfc3de833 Log fname:lineno in log messages for #7164 11 éve
bug7164_downgrade 6a4f5d9b4d Downgrade bug 7164 warning to INFO 10 éve
bug7280 e4d2177d31 Fix some basic socket issues with tor-fw-helper-natpmp on windows 11 éve
bug7302 805ecb8719 Make control_event_bootstrap_problem always INFO when hibernating 11 éve
bug7350 ca50fb4f81 Don't assert when writing a cell to a CLOSING connection. 11 éve
bug7582 2b22c0aeef On END_REASON_EXITPOLICY, mark circuit as unusable for that address. 11 éve
bug7707_diagnostic 452cfaacfc Track TLS overhead: diagnostic for bug 7707 11 éve
bug7768 03efe54027 Use option name --test-commandline in tor-fw-helper. 11 éve
bug7799 1d49ba84a8 Update the changes file for bug7799. 11 éve
bug7801 e998bbcdd5 changes file for bug7801 11 éve
bug7816.024 f272ee6a20 Fix an impossible-in-normal-operation leaks in dirvote 12 éve
bug7816_023 b509ead20d Avoid leaking headers received from SSL proxy 12 éve
bug7816_023_small d3aabf4db1 Fix various small leaks on error cases 12 éve
bug7902 d1b5ae903f When we get an END cell before CONNECTED, don't report SOCKS success 12 éve
bug7947 bd9901bef2 Handle TRUNCATE correctly if our next channel isn't done yet. 11 éve
bug7950 1827be0bd6 Make a parse_config_line_from_str variant that gives error messages 11 éve
bug7982 a2e72ac04a Copy-paste description of PathBias params from man page to or.h comment 11 éve
bug8002 22804c0391 Check for CPUs more accurartely when ONLN != CONF. 11 éve
bug8014 10fb339808 Be explicit that we want not only nacl but nacl-with-a-fast-curve25519 11 éve
bug8031 6905c1f60d Check more error codes when writing microdescriptors. 11 éve
bug8037 0cf2c01dbd Reject most directory documents with an internal NUL. 11 éve
bug8059 b9037521c6 Fix a framing bug when reading versions from a versions cell. 11 éve
bug8062 fca578d9b5 Increase link_proto field to 2 bytes 11 éve
bug8065 3340d3279d Downgrade an assert to LD_BUG 11 éve
bug8093.part1 30c06c187a Downgrade the unexpected sendme cell warnings for 0.2.4 11 éve
bug8117 fa3c237739 Per-SOCKSPort configuration for bug 8117 fix. 11 éve
bug8121 266419d244 Tolerate curve25519 backends where the high bit of the pk isn't ignored 11 éve
bug8151 cd4ad45ba3 Include a flag-thresholds line in each vote to describe flag cutoffs 11 éve
bug8158 2403ef66ba Coalesce identical adjacent microdescriptor vote lines. 11 éve
bug8161 3fb40fa3ff Changes file for path use bias threshold changes. 11 éve
bug8180 686aaa5c4c Upgrade the warn for EntryNodes without UseEntryGuards to an error 11 éve
bug8185_diagnostic 7d1ade251b Debugging log for bug 8185 11 éve
bug8200 92ea0b86de Refactor resolve_my_address() so logs are more accurate / helpful 11 éve
bug8203 3f837d4826 Make stream events for RESOLVE lookups more consistent 11 éve
bug8207 f12fafac5a Make hidden service authorization work again. 11 éve
bug8208 e3578d52e4 Check whether ei is non-NULL before altering it. 11 éve
bug8209 da6720e9fa Make _SC_OPEN_MAX actually get used when closing fds before exec. 11 éve
bug8210 719940df2b Fix a nigh-impossible overflow in cpuworker.c 11 éve
bug8218 5d400b5f7f Authorities were adding downtime for every relay every restart 11 éve
bug8231 44095312fa Changes file for bug8231 (duplicate directory guards) 11 éve
bug8235-diagnosing 3207ace605 Changes file. 11 éve
bug8253-fix c72558f396 Changes file for 8235. 11 éve
bug8273 b5a164bde4 Prefer measured bandwidths over advertised when computing things for votes on a dirauth 11 éve
bug8290 4740d2e8bc Remove some lingering tsocks cruft. 11 éve
bug8377 b528aaef03 Make sure that [::1] is recognized as a private address 11 éve
bug8408 a660fe6fd5 Let testing networks override ABSOLUTE_MIN_VALUE_FOR_FAST_FLAG 11 éve
bug8427 16f2e4aa8c Don't warn about not sending a socks reply if we get a write error 11 éve
bug8435 f93f7e331b Ignore advertised bandwidths if we have enough measured bandwidths available 11 éve
bug8464 eb9420082d Check for 0.2.4.8, not 0.2.4.7, to determine EXTEND2 support 11 éve
bug8475 1b28f366b8 Apply ClientDNSRejectInternalAddresses to IPv6 in RESOLVED cells 11 éve
bug8477-easypart 653b09e1ec Make circuit_purpose_to_string handle CIRCUIT_PURPOSE_PATH_BIAS_TESTING 11 éve
bug8587 e9e430403c Fix two dump bugs in "whether we can use curve25519-donna-c64" test 11 éve
bug8596 74f5e304e4 Controller: Add CACHED keyword to ADDRMAP events (#8596 part 2/2) 11 éve
bug8598 7f8098d2d0 Add some missing case values to please clang 11 éve
bug8599 96c0a42a92 Add a changes file for #8599 11 éve
bug8638 d1dc23c938 test.c: Try to create a more random temporary directory for our workspace (re: Bug#8638) 11 éve
bug8639 ce147a2a9a When launching a resolve request on behalf of an AF_UNIX control, omit the address field of the new entry connection. Fixes bug 8639. 11 éve
bug8711 b933360ee8 Add a boolean to flag-thresholds for "we have enough measured bandwidth" 11 éve
bug8716 0a9c17a61a Fix memory leak when sending configuration-changed event 11 éve
bug8719 cd2b508f4e Don't leak a waiting-for-certs consensus when accepting it. 11 éve
bug8822 f455686b77 Unmap the microdescriptor cache before replacing it. 11 éve
bug8833 139d367f29 Fix 8833: crash bug from using NULL node->ri in dirserv.c 11 éve
bug8844 00e2310f12 Don't run off the end of the array-of-freelists 11 éve
bug8845 7d3fd85838 Fix bug 8845: check the right length of memory in aes unit tests 11 éve
bug8846 bc56918e5a Fix bug 8846: better log message on IP version confusion 11 éve
bug8879 0bfaf86612 Fix socks5 handshake for username/password auth 11 éve
bug8965 a3f6f3316a Remove various outdated documents. 11 éve
bug9002 dc516a5436 Limit hidden service descriptors to at most 10 guard nodes. 11 éve
bug9017 77a1935339 Fix (Open?)BSD fast-connect bug with optimistic data. 11 éve
bug9047 caa0d15c49 If we write the annotation but not the microdescriptor, rewind. 11 éve
bug9063 418c2845d0 Don't queue more cells as a middle relay than the spec allows to be in flight 11 éve
bug9063_redux 2e1fe1fcf9 Implement a real OOM-killer for too-long circuit queues. 11 éve
bug9072 2a95f31716 Disable middle relay queue overfill detection code due to possible guard discovery attack 11 éve
bug9093 1b8ceb83c9 Improved circuit queue out-of-memory handler 11 éve
bug9122 ca6aacce16 Fix bug 9122: don't allow newdefaultoptions to be NULL 11 éve
bug9147 c955149271 Give a warning when bufferevents are enabled. 11 éve
bug9200 15cd79f832 FIx undefined behavior in dirvote.c 11 éve
bug9213_doc a68e6ea9c0 Fix documentation of torrc search order 10 éve
bug9229 db72479eea Update ns downloads when we receive a bridge descriptor 10 éve
bug9254 c36bdbd535 Re-do a cast in order to make old buggy freebsd gcc happy 11 éve
bug9288 5a5147dd2e Fix invalid-read when a managed proxy configuration fails. 11 éve
bug9295 e9c2484311 Fix for bug 9295: Don't crash when running --hash-password. 11 éve
bug9309 1d2e8020b7 Fix bug9309, and n_noncanonical count/continue code 11 éve
bug9337 11f1b7d9df Avoid assertion failure on unexepcted address family in DNS reply. 11 éve
bug9354 ff6bb13c02 NumDirectoryGuards now tracks NumEntryGuards by default 11 éve
bug9366 b9f9110ac7 Don't allow all ORPort values to be NoAdvertise 11 éve
bug9393 cbf9e74236 Correct the URL in the "a relay on win95???" message 10 éve
bug9400 d819663b66 Avoid a double-close on one failing case of the socketpair replacement code 11 éve
bug9543 af7970b6bc Add a 30-day maximum on user-supplied MaxCircuitDirtiness 11 éve
bug9546 cbc53a2d52 Make bridges send AUTH_CHALLENGE cells 11 éve
bug9564 2530c84220 Replace return with continue in update_consensus_networkstatus_downloads 11 éve
bug9596 a5f6cb908c Increase POLICY_BUF_LEN to 72 to accomodate IPv6 exit policy items. 11 éve
bug9602 a7e946596d Attribute bug 9602 to a version. 10 éve
bug9644 7dbf66713f When freeing a cert_list_t, avoid memory leak. 11 éve
bug9645a 264aa271a7 Fix bug 9645: don't forget an md just because we can't save it. 11 éve
bug9671_023 4f3dbb3c0a use !cbt_disabled in place of LearnCBT to avoid needless circs 11 éve
bug9686_024 35699ef9f5 Drop the MaxMemInCellQueues lower limit down to 256 MB. 10 éve
bug9700 a83abcf5ee Fix unittest compilation with --disable-curve25519 10 éve
bug9716 a2754d418d Try using INT_MAX, not SOMAXCONN, to set listen() backlog. 11 éve
bug9731 c5532889a8 Don't apply read/write buckets to cpuworker connections 11 éve
bug9776 938ee9b24d Always call circuit_n_chan_done(chan, 0) from channel_closed() 11 éve
bug9780 72c1e5acfe Switch ECDHE group default logic for bridge/relay TLS 11 éve
bug9880 557f332957 Fix a bug in our bug 9776 fix. 11 éve
bug9904 b8abadedd3 When examining interfaces to find an address, discard non-up ones. 11 éve
bug9927 c7c24785ee Generate bootstrapping status messages for microdescs too 11 éve
bug9928 bfe56e05b0 Give credit to bug reporter for 9928 11 éve
bug9946 8f9fb63cdb be willing to bootstrap from all three of our directory guards 11 éve
cov980650 b9432becbe Fix a copy-and-paste issue found by coverity 11 éve
curve25519-donna32-bug ad0cf550b7 Put the bug number and correct credits in the changes file for the new curve25519-donna32 10 éve
disable_sslv3 af73d3e4d8 Disable SSLv3 unconditionally. Closes ticket 13426. 10 éve
doc-heartbeat-loglevel edaea773e5 Document the correct loglevel for the heartbeat message 11 éve
easy.ratelim f269e0f9a5 Wrapper function for the common rate-limited-log pattern. 12 éve
feature4994 a8297cdbd3 use microdescriptors if *any* of our bridges can handle them 11 éve
feature9574 71e0ca02b5 add a changes entry for ticket 9574 11 éve
feature9777 1068e50aec Discard circuit paths on which nobody supports ntor 10 éve
ff28_ciphers 4231729176 Update ciphers.inc to match ff28 10 éve
fix-geoipexclude-doc 8aded5b07c Manpage: refer to ExcludeExitNodes, not the nonexistent ExcludeEntryNodes 11 éve
geoip-apr2013 b41f03f6df Update to the April 2013 GeoIP database. 11 éve
geoip-august2013 41bf8fa889 Update to the August 2013 GeoIP database. 11 éve
geoip-august2014 b98e3f9936 Update geoip to the August 7 2014 database. 10 éve
geoip-feb2013 adff7f944a Update to the February 2013 GeoIP database. 11 éve
geoip-february2014 26dd328891 Update to the February 2014 GeoIP database. 10 éve
geoip-february2014-regcountry 2658e70d16 Fix geoip by falling back to registered countries. 10 éve
geoip-july2013 2a61b0dd6b Update to the July 2013 GeoIP database. 11 éve
geoip-july2014 6d5efbef22 Update geoip to the July 10 2014 database. 10 éve
geoip-june2013 d34753174e Update to the June 2013 GeoIP database. 11 éve
geoip-mar2013 3dde6d5d29 Update to the March 2013 GeoIP database. 11 éve
geoip-may2013 f8053179c9 Update to the May 2013 GeoIP database. 11 éve
geoip-october2013 3b0265198f Update to the October 2013 GeoIP database. 11 éve
geoip-september2013 13d192c1d8 Update to the September 2013 GeoIP database. 11 éve
geoip6-august2014 6235b4769d Update geoip6 to the August 7 2014 database. 10 éve
geoip6-february2014 f6f691df73 Update geoip6 to the February 2014 GeoIP database. 10 éve
geoip6-july2014 6345dfa1fe Update geoip6 to the July 10 2014 database. 10 éve
geoip6-june2014 f5ce580bab Fix changes file for geoip 10 éve
integers_donna 4beee0f69b Use torint.h in curve25519-donna*.c 11 éve
less_charbuf_usage 1ad6f979b9 Initial changelog for less_charbuf 11 éve
log-noise 80d8fb23e3 Changes file for 8230, 8477 and 8419. 11 éve
md_leak_bug 65575b0755 Stop leaking memory in error cases of md parsing 10 éve
no_client_timestamps_024 39bb59d363 Avoid error by not saying which intro cell type I mean 11 éve
prop221 e001610c99 Implement proposal 221: Stop sending CREATE_FAST 10 éve
signof_enum 41200b4770 Have autoconf check whether enums are signed. 11 éve
ticket11528 0b319de60f Elevate server TLS cipher preferences over client 10 éve
ticket12688 9fc276a1c7 add a NumDirectoryGuards consensus param too 10 éve
ticket2267 92ea0b86de Refactor resolve_my_address() so logs are more accurate / helpful 11 éve
ticket8240 343f7aa059 Make the guard lifetime configurable and adjustable via the consensus 11 éve
ticket8443 edd6f02273 randomize SSLKeyLifetime by default 11 éve
ticket9658 2c877d2da4 collect and log statistics about onionskins received/processed 11 éve
ticket9866 fa1034cd99 Changes file for 9866 11 éve
v3_intro_len d5cfbf96a2 Fix an uninitialized-read when parsing v3 introduction requests. 11 éve
warn-unsigned-time_t 2f98bf5c9f Warn at configure time when time_t is unsigned 11 éve