.. |
10777_netunreach
|
0844a262a2
update changes file
|
10 years ago |
6783_big_hammer
|
e4614d30e5
Add a DisableV2DirectoryInfo_ option to 404 all v2 ns requests
|
11 years ago |
9854
|
270dcc9131
Changes file for 9854
|
11 years ago |
bug10124
|
a82b18f216
missing changes file for #10124
|
11 years ago |
bug1038-3
|
68a2e4ca4b
Warn and drop the circuit if we receive an inbound 'relay early' cell
|
10 years ago |
bug10402
|
7b87003957
Never allow OpenSSL engines to replace the RAND_SSLeay method
|
11 years ago |
bug10409
|
d8cfa2ef4e
Avoid free()ing from an mmap on corrupted microdesc cache
|
11 years ago |
bug10423
|
46b3b6208d
Avoid double-free on failure to dump_descriptor() a cached md
|
11 years ago |
bug10456
|
b5d13d11c9
Fix a logic error in circuit_stream_is_being_handled.
|
11 years ago |
bug10465
|
b9f6e40ecb
Fix automapping to ipv6
|
11 years ago |
bug10470
|
3511549651
Clarify DirPort multiplicity
|
11 years ago |
bug10485
|
edc6fa2570
Deliver circuit handshake counts as part of the heartbeat
|
10 years ago |
bug10777_internal_024
|
b15f75b632
Don't treat END_STREAM_REASON_INTERNAL as total circuit failure
|
10 years ago |
bug10793
|
9e2de8cecc
changelog for 10793
|
10 years ago |
bug10835
|
9bb34aa897
Survive fedora's openssl in our benchmarks
|
10 years ago |
bug10849_023
|
f8248abbd6
Forbid TunneledDirConns 0 and PreferTunneledDirConns 0 if being a HS
|
10 years ago |
bug10870
|
3133cde3c1
Excise the insertion_time_elem_t logic
|
10 years ago |
bug10904
|
e4bc757cde
changes file for bug 10904
|
10 years ago |
bug10929
|
9f38cd9350
add changes file for bug 10929
|
10 years ago |
bug11437
|
ab1a679eef
Fix a small memory leak when resolving PTR addresses
|
10 years ago |
bug11464_023
|
09ed8a5dbb
Tweak changes file and comment dates.
|
10 years ago |
bug11513
|
bd3db82906
New sort order for server choice of ciphersuites.
|
10 years ago |
bug11519
|
b2106956e0
Don't send uninitialized stack to the controller and say it's a date.
|
10 years ago |
bug11553
|
bb9b4c37f8
Supply better and less frequent warnings on circID exhaustion
|
10 years ago |
bug12227
|
1b551823de
Avoid illegal read off end of an array in prune_v2_cipher_list
|
10 years ago |
bug12718
|
8882dcfc59
add a changes file for bug 12718
|
10 years ago |
bug13100
|
0eec8e2aa5
gabelmoo's IPv4 address changed
|
10 years ago |
bug13151-client
|
0c3b3650aa
clients now send correct address for rendezvous point
|
10 years ago |
bug13296
|
0493db4adb
Add changes file for #13926
|
10 years ago |
bug13471
|
c1dd598df8
Note that our #13426 fix is also a #13471 fix.
|
10 years ago |
bug14129
|
905287415b
Avoid attempts to double-remove edge connections from the DNS resolver.
|
9 years ago |
bug15083
|
addffcc14d
Adjust changes header
|
9 years ago |
bug15515
|
8dba8a088d
Block multiple introductions on the same intro circuit.
|
9 years ago |
bug15600
|
49ddd92c11
Validate the RSA key size received when parsing INTRODUCE2 cells.
|
9 years ago |
bug15601
|
7451b4cafe
Changes file for bug15601
|
9 years ago |
bug17772
|
5138f5ca69
Ensure node is a guard candidate when picking a directory guard
|
9 years ago |
bug17781
|
b0867fec96
Fix a compilation warning introduced by clang 3.6
|
9 years ago |
bug17906
|
11f63d26ac
Update dannenberg's V3 authority identity fingerprint
|
8 years ago |
bug18162
|
bca7083e82
avoid integer overflow in and around smartlist_ensure_capacity.
|
8 years ago |
bug1992
|
5911fc0c17
Check for IP address change every minute, not 15 minutes
|
11 years ago |
bug2286
|
e73bbea262
Tweak consensus method 17 based on arma's comments
|
11 years ago |
bug5595
|
fddb814fea
When downloading certificates, distinguish requesting by identity digest from requesting by ID digest, signing key pair; fixes bug 5595
|
11 years ago |
bug5650
|
39ac1db60e
Avoid busy-looping on WANTREAD within connection_handle_write
|
11 years ago |
bug6026
|
07e26005a6
Treat a changed IPv6 ORPort like an IPv4 one in retry_all_listeners()
|
11 years ago |
bug6055
|
ad763a336c
Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1e
|
11 years ago |
bug6174
|
62fb209d83
Stop frobbing timestamp_dirty as our sole means to mark circuits unusable
|
11 years ago |
bug6206
|
63b67577d6
Check return values from fcntl and setsockopt
|
11 years ago |
bug6304
|
b9a8f8c17c
Fix the warning about LearnCircuitBuildTimeout && !CircuitBuildTimeout
|
11 years ago |
bug6572
|
fc9a72c688
Changes file for bug6572.
|
11 years ago |
bug6673
|
fdafe11a25
Give an #error when we want threads and OpenSSL has disabled threads
|
11 years ago |
bug6979
|
dece40fd77
Fix an assert when disabling ORPort with accounting disabled.
|
11 years ago |
bug7054
|
0b598cb2bb
Say "KBytes" rather than "KB" in the man page
|
12 years ago |
bug7065
|
4cc7cc28f8
Changes file for #7065
|
11 years ago |
bug7143
|
3dc52e6636
Add src/or/micro-revision.i to CLEANFILES in case anybody has one
|
11 years ago |
bug7164_diagnostic
|
adfc3de833
Log fname:lineno in log messages for #7164
|
11 years ago |
bug7164_downgrade
|
6a4f5d9b4d
Downgrade bug 7164 warning to INFO
|
10 years ago |
bug7280
|
e4d2177d31
Fix some basic socket issues with tor-fw-helper-natpmp on windows
|
11 years ago |
bug7302
|
805ecb8719
Make control_event_bootstrap_problem always INFO when hibernating
|
11 years ago |
bug7350
|
ca50fb4f81
Don't assert when writing a cell to a CLOSING connection.
|
11 years ago |
bug7582
|
2b22c0aeef
On END_REASON_EXITPOLICY, mark circuit as unusable for that address.
|
11 years ago |
bug7707_diagnostic
|
452cfaacfc
Track TLS overhead: diagnostic for bug 7707
|
11 years ago |
bug7768
|
03efe54027
Use option name --test-commandline in tor-fw-helper.
|
11 years ago |
bug7799
|
1d49ba84a8
Update the changes file for bug7799.
|
11 years ago |
bug7801
|
e998bbcdd5
changes file for bug7801
|
11 years ago |
bug7816.024
|
f272ee6a20
Fix an impossible-in-normal-operation leaks in dirvote
|
12 years ago |
bug7816_023
|
b509ead20d
Avoid leaking headers received from SSL proxy
|
12 years ago |
bug7816_023_small
|
d3aabf4db1
Fix various small leaks on error cases
|
12 years ago |
bug7902
|
d1b5ae903f
When we get an END cell before CONNECTED, don't report SOCKS success
|
11 years ago |
bug7947
|
bd9901bef2
Handle TRUNCATE correctly if our next channel isn't done yet.
|
11 years ago |
bug7950
|
1827be0bd6
Make a parse_config_line_from_str variant that gives error messages
|
11 years ago |
bug7982
|
a2e72ac04a
Copy-paste description of PathBias params from man page to or.h comment
|
11 years ago |
bug8002
|
22804c0391
Check for CPUs more accurartely when ONLN != CONF.
|
11 years ago |
bug8014
|
10fb339808
Be explicit that we want not only nacl but nacl-with-a-fast-curve25519
|
11 years ago |
bug8031
|
6905c1f60d
Check more error codes when writing microdescriptors.
|
11 years ago |
bug8037
|
0cf2c01dbd
Reject most directory documents with an internal NUL.
|
11 years ago |
bug8059
|
b9037521c6
Fix a framing bug when reading versions from a versions cell.
|
11 years ago |
bug8062
|
fca578d9b5
Increase link_proto field to 2 bytes
|
11 years ago |
bug8065
|
3340d3279d
Downgrade an assert to LD_BUG
|
11 years ago |
bug8093.part1
|
30c06c187a
Downgrade the unexpected sendme cell warnings for 0.2.4
|
11 years ago |
bug8117
|
fa3c237739
Per-SOCKSPort configuration for bug 8117 fix.
|
11 years ago |
bug8121
|
266419d244
Tolerate curve25519 backends where the high bit of the pk isn't ignored
|
11 years ago |
bug8151
|
cd4ad45ba3
Include a flag-thresholds line in each vote to describe flag cutoffs
|
11 years ago |
bug8158
|
2403ef66ba
Coalesce identical adjacent microdescriptor vote lines.
|
11 years ago |
bug8161
|
3fb40fa3ff
Changes file for path use bias threshold changes.
|
11 years ago |
bug8180
|
686aaa5c4c
Upgrade the warn for EntryNodes without UseEntryGuards to an error
|
11 years ago |
bug8185_diagnostic
|
7d1ade251b
Debugging log for bug 8185
|
11 years ago |
bug8200
|
92ea0b86de
Refactor resolve_my_address() so logs are more accurate / helpful
|
11 years ago |
bug8203
|
3f837d4826
Make stream events for RESOLVE lookups more consistent
|
11 years ago |
bug8207
|
f12fafac5a
Make hidden service authorization work again.
|
11 years ago |
bug8208
|
e3578d52e4
Check whether ei is non-NULL before altering it.
|
11 years ago |
bug8209
|
da6720e9fa
Make _SC_OPEN_MAX actually get used when closing fds before exec.
|
11 years ago |
bug8210
|
719940df2b
Fix a nigh-impossible overflow in cpuworker.c
|
11 years ago |
bug8218
|
5d400b5f7f
Authorities were adding downtime for every relay every restart
|
11 years ago |
bug8231
|
44095312fa
Changes file for bug8231 (duplicate directory guards)
|
11 years ago |
bug8235-diagnosing
|
3207ace605
Changes file.
|
11 years ago |
bug8253-fix
|
c72558f396
Changes file for 8235.
|
11 years ago |
bug8273
|
b5a164bde4
Prefer measured bandwidths over advertised when computing things for votes on a dirauth
|
11 years ago |
bug8290
|
4740d2e8bc
Remove some lingering tsocks cruft.
|
11 years ago |
bug8377
|
b528aaef03
Make sure that [::1] is recognized as a private address
|
11 years ago |
bug8408
|
a660fe6fd5
Let testing networks override ABSOLUTE_MIN_VALUE_FOR_FAST_FLAG
|
11 years ago |
bug8427
|
16f2e4aa8c
Don't warn about not sending a socks reply if we get a write error
|
11 years ago |
bug8435
|
f93f7e331b
Ignore advertised bandwidths if we have enough measured bandwidths available
|
11 years ago |
bug8464
|
eb9420082d
Check for 0.2.4.8, not 0.2.4.7, to determine EXTEND2 support
|
11 years ago |
bug8475
|
1b28f366b8
Apply ClientDNSRejectInternalAddresses to IPv6 in RESOLVED cells
|
11 years ago |
bug8477-easypart
|
653b09e1ec
Make circuit_purpose_to_string handle CIRCUIT_PURPOSE_PATH_BIAS_TESTING
|
11 years ago |
bug8587
|
e9e430403c
Fix two dump bugs in "whether we can use curve25519-donna-c64" test
|
11 years ago |
bug8596
|
74f5e304e4
Controller: Add CACHED keyword to ADDRMAP events (#8596 part 2/2)
|
11 years ago |
bug8598
|
7f8098d2d0
Add some missing case values to please clang
|
11 years ago |
bug8599
|
96c0a42a92
Add a changes file for #8599
|
11 years ago |
bug8638
|
d1dc23c938
test.c: Try to create a more random temporary directory for our workspace (re: Bug#8638)
|
11 years ago |
bug8639
|
ce147a2a9a
When launching a resolve request on behalf of an AF_UNIX control, omit the address field of the new entry connection. Fixes bug 8639.
|
11 years ago |
bug8711
|
b933360ee8
Add a boolean to flag-thresholds for "we have enough measured bandwidth"
|
11 years ago |
bug8716
|
0a9c17a61a
Fix memory leak when sending configuration-changed event
|
11 years ago |
bug8719
|
cd2b508f4e
Don't leak a waiting-for-certs consensus when accepting it.
|
11 years ago |
bug8822
|
f455686b77
Unmap the microdescriptor cache before replacing it.
|
11 years ago |
bug8833
|
139d367f29
Fix 8833: crash bug from using NULL node->ri in dirserv.c
|
11 years ago |
bug8844
|
00e2310f12
Don't run off the end of the array-of-freelists
|
11 years ago |
bug8845
|
7d3fd85838
Fix bug 8845: check the right length of memory in aes unit tests
|
11 years ago |
bug8846
|
bc56918e5a
Fix bug 8846: better log message on IP version confusion
|
11 years ago |
bug8879
|
0bfaf86612
Fix socks5 handshake for username/password auth
|
11 years ago |
bug8965
|
a3f6f3316a
Remove various outdated documents.
|
11 years ago |
bug9002
|
dc516a5436
Limit hidden service descriptors to at most 10 guard nodes.
|
11 years ago |
bug9017
|
77a1935339
Fix (Open?)BSD fast-connect bug with optimistic data.
|
11 years ago |
bug9047
|
caa0d15c49
If we write the annotation but not the microdescriptor, rewind.
|
11 years ago |
bug9063
|
418c2845d0
Don't queue more cells as a middle relay than the spec allows to be in flight
|
11 years ago |
bug9063_redux
|
2e1fe1fcf9
Implement a real OOM-killer for too-long circuit queues.
|
11 years ago |
bug9072
|
2a95f31716
Disable middle relay queue overfill detection code due to possible guard discovery attack
|
11 years ago |
bug9093
|
1b8ceb83c9
Improved circuit queue out-of-memory handler
|
11 years ago |
bug9122
|
ca6aacce16
Fix bug 9122: don't allow newdefaultoptions to be NULL
|
11 years ago |
bug9147
|
c955149271
Give a warning when bufferevents are enabled.
|
11 years ago |
bug9200
|
15cd79f832
FIx undefined behavior in dirvote.c
|
11 years ago |
bug9213_doc
|
a68e6ea9c0
Fix documentation of torrc search order
|
10 years ago |
bug9229
|
db72479eea
Update ns downloads when we receive a bridge descriptor
|
10 years ago |
bug9254
|
c36bdbd535
Re-do a cast in order to make old buggy freebsd gcc happy
|
11 years ago |
bug9288
|
5a5147dd2e
Fix invalid-read when a managed proxy configuration fails.
|
11 years ago |
bug9295
|
e9c2484311
Fix for bug 9295: Don't crash when running --hash-password.
|
11 years ago |
bug9309
|
1d2e8020b7
Fix bug9309, and n_noncanonical count/continue code
|
11 years ago |
bug9337
|
11f1b7d9df
Avoid assertion failure on unexepcted address family in DNS reply.
|
11 years ago |
bug9354
|
ff6bb13c02
NumDirectoryGuards now tracks NumEntryGuards by default
|
11 years ago |
bug9366
|
b9f9110ac7
Don't allow all ORPort values to be NoAdvertise
|
11 years ago |
bug9393
|
cbf9e74236
Correct the URL in the "a relay on win95???" message
|
10 years ago |
bug9400
|
d819663b66
Avoid a double-close on one failing case of the socketpair replacement code
|
11 years ago |
bug9543
|
af7970b6bc
Add a 30-day maximum on user-supplied MaxCircuitDirtiness
|
11 years ago |
bug9546
|
cbc53a2d52
Make bridges send AUTH_CHALLENGE cells
|
11 years ago |
bug9564
|
2530c84220
Replace return with continue in update_consensus_networkstatus_downloads
|
11 years ago |
bug9596
|
a5f6cb908c
Increase POLICY_BUF_LEN to 72 to accomodate IPv6 exit policy items.
|
11 years ago |
bug9602
|
a7e946596d
Attribute bug 9602 to a version.
|
10 years ago |
bug9644
|
7dbf66713f
When freeing a cert_list_t, avoid memory leak.
|
11 years ago |
bug9645a
|
264aa271a7
Fix bug 9645: don't forget an md just because we can't save it.
|
11 years ago |
bug9671_023
|
4f3dbb3c0a
use !cbt_disabled in place of LearnCBT to avoid needless circs
|
11 years ago |
bug9686_024
|
35699ef9f5
Drop the MaxMemInCellQueues lower limit down to 256 MB.
|
10 years ago |
bug9700
|
a83abcf5ee
Fix unittest compilation with --disable-curve25519
|
10 years ago |
bug9716
|
a2754d418d
Try using INT_MAX, not SOMAXCONN, to set listen() backlog.
|
11 years ago |
bug9731
|
c5532889a8
Don't apply read/write buckets to cpuworker connections
|
11 years ago |
bug9776
|
938ee9b24d
Always call circuit_n_chan_done(chan, 0) from channel_closed()
|
11 years ago |
bug9780
|
72c1e5acfe
Switch ECDHE group default logic for bridge/relay TLS
|
11 years ago |
bug9880
|
557f332957
Fix a bug in our bug 9776 fix.
|
11 years ago |
bug9904
|
b8abadedd3
When examining interfaces to find an address, discard non-up ones.
|
11 years ago |
bug9927
|
c7c24785ee
Generate bootstrapping status messages for microdescs too
|
11 years ago |
bug9928
|
bfe56e05b0
Give credit to bug reporter for 9928
|
11 years ago |
bug9946
|
8f9fb63cdb
be willing to bootstrap from all three of our directory guards
|
11 years ago |
cov980650
|
b9432becbe
Fix a copy-and-paste issue found by coverity
|
11 years ago |
curve25519-donna32-bug
|
ad0cf550b7
Put the bug number and correct credits in the changes file for the new curve25519-donna32
|
10 years ago |
disable_sslv3
|
af73d3e4d8
Disable SSLv3 unconditionally. Closes ticket 13426.
|
10 years ago |
doc-heartbeat-loglevel
|
edaea773e5
Document the correct loglevel for the heartbeat message
|
11 years ago |
easy.ratelim
|
f269e0f9a5
Wrapper function for the common rate-limited-log pattern.
|
12 years ago |
feature4994
|
a8297cdbd3
use microdescriptors if *any* of our bridges can handle them
|
11 years ago |
feature9574
|
71e0ca02b5
add a changes entry for ticket 9574
|
11 years ago |
feature9777
|
1068e50aec
Discard circuit paths on which nobody supports ntor
|
10 years ago |
ff28_ciphers
|
4231729176
Update ciphers.inc to match ff28
|
10 years ago |
fix-geoipexclude-doc
|
8aded5b07c
Manpage: refer to ExcludeExitNodes, not the nonexistent ExcludeEntryNodes
|
11 years ago |
geoip-apr2013
|
b41f03f6df
Update to the April 2013 GeoIP database.
|
11 years ago |
geoip-april2015
|
bcc0a48cfe
Update geoip to the April 8 2015 database.
|
9 years ago |
geoip-august2013
|
41bf8fa889
Update to the August 2013 GeoIP database.
|
11 years ago |
geoip-august2014
|
b98e3f9936
Update geoip to the August 7 2014 database.
|
10 years ago |
geoip-december2015
|
dbb919cf94
Update geoip and geoip6 to the December 1 2015 database.
|
9 years ago |
geoip-feb2013
|
adff7f944a
Update to the February 2013 GeoIP database.
|
11 years ago |
geoip-february2014
|
26dd328891
Update to the February 2014 GeoIP database.
|
10 years ago |
geoip-february2014-regcountry
|
2658e70d16
Fix geoip by falling back to registered countries.
|
10 years ago |
geoip-january2015
|
c3f8f5ab0e
Update geoip to the January 7 2015 database.
|
9 years ago |
geoip-january2016
|
1496056c12
Update geoip and geoip6 to the January 5 2016 database.
|
8 years ago |
geoip-july2013
|
2a61b0dd6b
Update to the July 2013 GeoIP database.
|
11 years ago |
geoip-july2014
|
6d5efbef22
Update geoip to the July 10 2014 database.
|
10 years ago |
geoip-july2015
|
7004d67430
Update geoip and geoip6 to the July 8 2015 database.
|
9 years ago |
geoip-june2013
|
d34753174e
Update to the June 2013 GeoIP database.
|
11 years ago |
geoip-june2015
|
e5907e94c2
Update geoip to the June 3 2015 database.
|
9 years ago |
geoip-mar2013
|
3dde6d5d29
Update to the March 2013 GeoIP database.
|
11 years ago |
geoip-march2015
|
beda8d2934
Update geoip to the March 3 2015 database.
|
9 years ago |
geoip-may2013
|
f8053179c9
Update to the May 2013 GeoIP database.
|
11 years ago |
geoip-november2014
|
8611c6bccd
Update geoip to the November 15 2014 database.
|
10 years ago |
geoip-october2013
|
3b0265198f
Update to the October 2013 GeoIP database.
|
11 years ago |
geoip-october2015
|
62b02a1941
Update geoip and geoip6 to the October 9 2015 database.
|
9 years ago |
geoip-september2013
|
13d192c1d8
Update to the September 2013 GeoIP database.
|
11 years ago |
geoip-september2015
|
8b3e0b7729
Update geoip and geoip6 to the September 3 2015 database.
|
9 years ago |
geoip6-april2015
|
b5f6495876
Update geoip6 to the April 8 2015 database.
|
9 years ago |
geoip6-august2014
|
6235b4769d
Update geoip6 to the August 7 2014 database.
|
10 years ago |
geoip6-february2014
|
f6f691df73
Update geoip6 to the February 2014 GeoIP database.
|
10 years ago |
geoip6-january2015
|
a9ce0cd659
Update geoip6 to the January 7 2015 database.
|
9 years ago |
geoip6-july2014
|
6345dfa1fe
Update geoip6 to the July 10 2014 database.
|
10 years ago |
geoip6-june2014
|
f5ce580bab
Fix changes file for geoip
|
10 years ago |
geoip6-june2015
|
08e14e1448
Update geoip6 to the June 3 2015 database.
|
9 years ago |
geoip6-march2015
|
62714068d9
Update geoip6 to the March 3 2015 database.
|
9 years ago |
geoip6-november2014
|
5441c733e0
Update geoip6 to the November 15 2014 database.
|
10 years ago |
integers_donna
|
4beee0f69b
Use torint.h in curve25519-donna*.c
|
11 years ago |
less_charbuf_usage
|
1ad6f979b9
Initial changelog for less_charbuf
|
11 years ago |
log-noise
|
80d8fb23e3
Changes file for 8230, 8477 and 8419.
|
11 years ago |
md_leak_bug
|
65575b0755
Stop leaking memory in error cases of md parsing
|
10 years ago |
no_client_timestamps_024
|
39bb59d363
Avoid error by not saying which intro cell type I mean
|
11 years ago |
prop221
|
e001610c99
Implement proposal 221: Stop sending CREATE_FAST
|
10 years ago |
signof_enum
|
41200b4770
Have autoconf check whether enums are signed.
|
11 years ago |
ticket11528
|
0b319de60f
Elevate server TLS cipher preferences over client
|
10 years ago |
ticket12688
|
9fc276a1c7
add a NumDirectoryGuards consensus param too
|
10 years ago |
ticket14487
|
8e61d38cf1
Faravahar's New IP Address as of 2/20/2015
|
9 years ago |
ticket2267
|
92ea0b86de
Refactor resolve_my_address() so logs are more accurate / helpful
|
11 years ago |
ticket8240
|
343f7aa059
Make the guard lifetime configurable and adjustable via the consensus
|
11 years ago |
ticket8443
|
edd6f02273
randomize SSLKeyLifetime by default
|
11 years ago |
ticket9658
|
2c877d2da4
collect and log statistics about onionskins received/processed
|
11 years ago |
ticket9866
|
fa1034cd99
Changes file for 9866
|
11 years ago |
v3_intro_len
|
d5cfbf96a2
Fix an uninitialized-read when parsing v3 introduction requests.
|
11 years ago |
warn-unsigned-time_t
|
2f98bf5c9f
Warn at configure time when time_t is unsigned
|
11 years ago |