Nick Mathewson cca6198c77 Avoid illegal read off end of an array in prune_v2_cipher_list 10 rokov pred
..
10777_netunreach 0844a262a2 update changes file 10 rokov pred
6783_big_hammer e4614d30e5 Add a DisableV2DirectoryInfo_ option to 404 all v2 ns requests 11 rokov pred
9854 270dcc9131 Changes file for 9854 11 rokov pred
bug10124 a82b18f216 missing changes file for #10124 11 rokov pred
bug10402 7b87003957 Never allow OpenSSL engines to replace the RAND_SSLeay method 11 rokov pred
bug10409 d8cfa2ef4e Avoid free()ing from an mmap on corrupted microdesc cache 11 rokov pred
bug10423 46b3b6208d Avoid double-free on failure to dump_descriptor() a cached md 11 rokov pred
bug10456 b5d13d11c9 Fix a logic error in circuit_stream_is_being_handled. 11 rokov pred
bug10465 b9f6e40ecb Fix automapping to ipv6 11 rokov pred
bug10470 3511549651 Clarify DirPort multiplicity 11 rokov pred
bug10485 edc6fa2570 Deliver circuit handshake counts as part of the heartbeat 10 rokov pred
bug10777_internal_024 b15f75b632 Don't treat END_STREAM_REASON_INTERNAL as total circuit failure 10 rokov pred
bug10793 9e2de8cecc changelog for 10793 10 rokov pred
bug10835 9bb34aa897 Survive fedora's openssl in our benchmarks 10 rokov pred
bug10849_023 f8248abbd6 Forbid TunneledDirConns 0 and PreferTunneledDirConns 0 if being a HS 10 rokov pred
bug10870 3133cde3c1 Excise the insertion_time_elem_t logic 10 rokov pred
bug10904 e4bc757cde changes file for bug 10904 10 rokov pred
bug10929 9f38cd9350 add changes file for bug 10929 10 rokov pred
bug11437 ab1a679eef Fix a small memory leak when resolving PTR addresses 10 rokov pred
bug11464_023 09ed8a5dbb Tweak changes file and comment dates. 10 rokov pred
bug11513 bd3db82906 New sort order for server choice of ciphersuites. 10 rokov pred
bug11519 b2106956e0 Don't send uninitialized stack to the controller and say it's a date. 10 rokov pred
bug11553 bb9b4c37f8 Supply better and less frequent warnings on circID exhaustion 10 rokov pred
bug12227 cca6198c77 Avoid illegal read off end of an array in prune_v2_cipher_list 10 rokov pred
bug1992 5911fc0c17 Check for IP address change every minute, not 15 minutes 11 rokov pred
bug2286 e73bbea262 Tweak consensus method 17 based on arma's comments 11 rokov pred
bug5595 fddb814fea When downloading certificates, distinguish requesting by identity digest from requesting by ID digest, signing key pair; fixes bug 5595 11 rokov pred
bug5650 39ac1db60e Avoid busy-looping on WANTREAD within connection_handle_write 11 rokov pred
bug6026 07e26005a6 Treat a changed IPv6 ORPort like an IPv4 one in retry_all_listeners() 11 rokov pred
bug6055 ad763a336c Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1e 11 rokov pred
bug6174 62fb209d83 Stop frobbing timestamp_dirty as our sole means to mark circuits unusable 11 rokov pred
bug6206 63b67577d6 Check return values from fcntl and setsockopt 11 rokov pred
bug6304 b9a8f8c17c Fix the warning about LearnCircuitBuildTimeout && !CircuitBuildTimeout 11 rokov pred
bug6572 fc9a72c688 Changes file for bug6572. 11 rokov pred
bug6673 fdafe11a25 Give an #error when we want threads and OpenSSL has disabled threads 11 rokov pred
bug6979 dece40fd77 Fix an assert when disabling ORPort with accounting disabled. 11 rokov pred
bug7054 0b598cb2bb Say "KBytes" rather than "KB" in the man page 12 rokov pred
bug7065 4cc7cc28f8 Changes file for #7065 11 rokov pred
bug7143 3dc52e6636 Add src/or/micro-revision.i to CLEANFILES in case anybody has one 11 rokov pred
bug7164_diagnostic adfc3de833 Log fname:lineno in log messages for #7164 11 rokov pred
bug7164_downgrade 6a4f5d9b4d Downgrade bug 7164 warning to INFO 10 rokov pred
bug7280 e4d2177d31 Fix some basic socket issues with tor-fw-helper-natpmp on windows 11 rokov pred
bug7302 805ecb8719 Make control_event_bootstrap_problem always INFO when hibernating 11 rokov pred
bug7350 ca50fb4f81 Don't assert when writing a cell to a CLOSING connection. 11 rokov pred
bug7582 2b22c0aeef On END_REASON_EXITPOLICY, mark circuit as unusable for that address. 11 rokov pred
bug7707_diagnostic 452cfaacfc Track TLS overhead: diagnostic for bug 7707 11 rokov pred
bug7768 03efe54027 Use option name --test-commandline in tor-fw-helper. 11 rokov pred
bug7799 1d49ba84a8 Update the changes file for bug7799. 11 rokov pred
bug7801 e998bbcdd5 changes file for bug7801 11 rokov pred
bug7816.024 f272ee6a20 Fix an impossible-in-normal-operation leaks in dirvote 12 rokov pred
bug7816_023 b509ead20d Avoid leaking headers received from SSL proxy 12 rokov pred
bug7816_023_small d3aabf4db1 Fix various small leaks on error cases 12 rokov pred
bug7902 d1b5ae903f When we get an END cell before CONNECTED, don't report SOCKS success 12 rokov pred
bug7947 bd9901bef2 Handle TRUNCATE correctly if our next channel isn't done yet. 11 rokov pred
bug7950 1827be0bd6 Make a parse_config_line_from_str variant that gives error messages 11 rokov pred
bug7982 a2e72ac04a Copy-paste description of PathBias params from man page to or.h comment 11 rokov pred
bug8002 22804c0391 Check for CPUs more accurartely when ONLN != CONF. 11 rokov pred
bug8014 10fb339808 Be explicit that we want not only nacl but nacl-with-a-fast-curve25519 11 rokov pred
bug8031 6905c1f60d Check more error codes when writing microdescriptors. 11 rokov pred
bug8037 0cf2c01dbd Reject most directory documents with an internal NUL. 11 rokov pred
bug8059 b9037521c6 Fix a framing bug when reading versions from a versions cell. 11 rokov pred
bug8062 fca578d9b5 Increase link_proto field to 2 bytes 11 rokov pred
bug8065 3340d3279d Downgrade an assert to LD_BUG 11 rokov pred
bug8093.part1 30c06c187a Downgrade the unexpected sendme cell warnings for 0.2.4 11 rokov pred
bug8117 fa3c237739 Per-SOCKSPort configuration for bug 8117 fix. 11 rokov pred
bug8121 266419d244 Tolerate curve25519 backends where the high bit of the pk isn't ignored 11 rokov pred
bug8151 cd4ad45ba3 Include a flag-thresholds line in each vote to describe flag cutoffs 11 rokov pred
bug8158 2403ef66ba Coalesce identical adjacent microdescriptor vote lines. 11 rokov pred
bug8161 3fb40fa3ff Changes file for path use bias threshold changes. 11 rokov pred
bug8180 686aaa5c4c Upgrade the warn for EntryNodes without UseEntryGuards to an error 11 rokov pred
bug8185_diagnostic 7d1ade251b Debugging log for bug 8185 11 rokov pred
bug8200 92ea0b86de Refactor resolve_my_address() so logs are more accurate / helpful 11 rokov pred
bug8203 3f837d4826 Make stream events for RESOLVE lookups more consistent 11 rokov pred
bug8207 f12fafac5a Make hidden service authorization work again. 11 rokov pred
bug8208 e3578d52e4 Check whether ei is non-NULL before altering it. 11 rokov pred
bug8209 da6720e9fa Make _SC_OPEN_MAX actually get used when closing fds before exec. 11 rokov pred
bug8210 719940df2b Fix a nigh-impossible overflow in cpuworker.c 11 rokov pred
bug8218 5d400b5f7f Authorities were adding downtime for every relay every restart 11 rokov pred
bug8231 44095312fa Changes file for bug8231 (duplicate directory guards) 11 rokov pred
bug8235-diagnosing 3207ace605 Changes file. 11 rokov pred
bug8253-fix c72558f396 Changes file for 8235. 11 rokov pred
bug8273 b5a164bde4 Prefer measured bandwidths over advertised when computing things for votes on a dirauth 11 rokov pred
bug8290 4740d2e8bc Remove some lingering tsocks cruft. 11 rokov pred
bug8377 b528aaef03 Make sure that [::1] is recognized as a private address 11 rokov pred
bug8408 a660fe6fd5 Let testing networks override ABSOLUTE_MIN_VALUE_FOR_FAST_FLAG 11 rokov pred
bug8427 16f2e4aa8c Don't warn about not sending a socks reply if we get a write error 11 rokov pred
bug8435 f93f7e331b Ignore advertised bandwidths if we have enough measured bandwidths available 11 rokov pred
bug8464 eb9420082d Check for 0.2.4.8, not 0.2.4.7, to determine EXTEND2 support 11 rokov pred
bug8475 1b28f366b8 Apply ClientDNSRejectInternalAddresses to IPv6 in RESOLVED cells 11 rokov pred
bug8477-easypart 653b09e1ec Make circuit_purpose_to_string handle CIRCUIT_PURPOSE_PATH_BIAS_TESTING 11 rokov pred
bug8587 e9e430403c Fix two dump bugs in "whether we can use curve25519-donna-c64" test 11 rokov pred
bug8596 74f5e304e4 Controller: Add CACHED keyword to ADDRMAP events (#8596 part 2/2) 11 rokov pred
bug8598 7f8098d2d0 Add some missing case values to please clang 11 rokov pred
bug8599 96c0a42a92 Add a changes file for #8599 11 rokov pred
bug8638 d1dc23c938 test.c: Try to create a more random temporary directory for our workspace (re: Bug#8638) 11 rokov pred
bug8639 ce147a2a9a When launching a resolve request on behalf of an AF_UNIX control, omit the address field of the new entry connection. Fixes bug 8639. 11 rokov pred
bug8711 b933360ee8 Add a boolean to flag-thresholds for "we have enough measured bandwidth" 11 rokov pred
bug8716 0a9c17a61a Fix memory leak when sending configuration-changed event 11 rokov pred
bug8719 cd2b508f4e Don't leak a waiting-for-certs consensus when accepting it. 11 rokov pred
bug8822 f455686b77 Unmap the microdescriptor cache before replacing it. 11 rokov pred
bug8833 139d367f29 Fix 8833: crash bug from using NULL node->ri in dirserv.c 11 rokov pred
bug8844 00e2310f12 Don't run off the end of the array-of-freelists 11 rokov pred
bug8845 7d3fd85838 Fix bug 8845: check the right length of memory in aes unit tests 11 rokov pred
bug8846 bc56918e5a Fix bug 8846: better log message on IP version confusion 11 rokov pred
bug8879 0bfaf86612 Fix socks5 handshake for username/password auth 11 rokov pred
bug8965 a3f6f3316a Remove various outdated documents. 11 rokov pred
bug9002 dc516a5436 Limit hidden service descriptors to at most 10 guard nodes. 11 rokov pred
bug9017 77a1935339 Fix (Open?)BSD fast-connect bug with optimistic data. 11 rokov pred
bug9047 caa0d15c49 If we write the annotation but not the microdescriptor, rewind. 11 rokov pred
bug9063 418c2845d0 Don't queue more cells as a middle relay than the spec allows to be in flight 11 rokov pred
bug9063_redux 2e1fe1fcf9 Implement a real OOM-killer for too-long circuit queues. 11 rokov pred
bug9072 2a95f31716 Disable middle relay queue overfill detection code due to possible guard discovery attack 11 rokov pred
bug9093 1b8ceb83c9 Improved circuit queue out-of-memory handler 11 rokov pred
bug9122 ca6aacce16 Fix bug 9122: don't allow newdefaultoptions to be NULL 11 rokov pred
bug9147 c955149271 Give a warning when bufferevents are enabled. 11 rokov pred
bug9200 15cd79f832 FIx undefined behavior in dirvote.c 11 rokov pred
bug9213_doc a68e6ea9c0 Fix documentation of torrc search order 10 rokov pred
bug9229 db72479eea Update ns downloads when we receive a bridge descriptor 10 rokov pred
bug9254 c36bdbd535 Re-do a cast in order to make old buggy freebsd gcc happy 11 rokov pred
bug9288 5a5147dd2e Fix invalid-read when a managed proxy configuration fails. 11 rokov pred
bug9295 e9c2484311 Fix for bug 9295: Don't crash when running --hash-password. 11 rokov pred
bug9309 1d2e8020b7 Fix bug9309, and n_noncanonical count/continue code 11 rokov pred
bug9337 11f1b7d9df Avoid assertion failure on unexepcted address family in DNS reply. 11 rokov pred
bug9354 ff6bb13c02 NumDirectoryGuards now tracks NumEntryGuards by default 11 rokov pred
bug9366 b9f9110ac7 Don't allow all ORPort values to be NoAdvertise 11 rokov pred
bug9393 cbf9e74236 Correct the URL in the "a relay on win95???" message 10 rokov pred
bug9400 d819663b66 Avoid a double-close on one failing case of the socketpair replacement code 11 rokov pred
bug9543 af7970b6bc Add a 30-day maximum on user-supplied MaxCircuitDirtiness 11 rokov pred
bug9546 cbc53a2d52 Make bridges send AUTH_CHALLENGE cells 11 rokov pred
bug9564 2530c84220 Replace return with continue in update_consensus_networkstatus_downloads 11 rokov pred
bug9596 a5f6cb908c Increase POLICY_BUF_LEN to 72 to accomodate IPv6 exit policy items. 11 rokov pred
bug9602 a7e946596d Attribute bug 9602 to a version. 10 rokov pred
bug9644 7dbf66713f When freeing a cert_list_t, avoid memory leak. 11 rokov pred
bug9645a 264aa271a7 Fix bug 9645: don't forget an md just because we can't save it. 11 rokov pred
bug9671_023 4f3dbb3c0a use !cbt_disabled in place of LearnCBT to avoid needless circs 11 rokov pred
bug9686_024 35699ef9f5 Drop the MaxMemInCellQueues lower limit down to 256 MB. 10 rokov pred
bug9700 a83abcf5ee Fix unittest compilation with --disable-curve25519 10 rokov pred
bug9716 a2754d418d Try using INT_MAX, not SOMAXCONN, to set listen() backlog. 11 rokov pred
bug9731 c5532889a8 Don't apply read/write buckets to cpuworker connections 11 rokov pred
bug9776 938ee9b24d Always call circuit_n_chan_done(chan, 0) from channel_closed() 11 rokov pred
bug9780 72c1e5acfe Switch ECDHE group default logic for bridge/relay TLS 11 rokov pred
bug9880 557f332957 Fix a bug in our bug 9776 fix. 11 rokov pred
bug9904 b8abadedd3 When examining interfaces to find an address, discard non-up ones. 11 rokov pred
bug9927 c7c24785ee Generate bootstrapping status messages for microdescs too 11 rokov pred
bug9928 bfe56e05b0 Give credit to bug reporter for 9928 11 rokov pred
bug9946 8f9fb63cdb be willing to bootstrap from all three of our directory guards 11 rokov pred
cov980650 b9432becbe Fix a copy-and-paste issue found by coverity 11 rokov pred
doc-heartbeat-loglevel edaea773e5 Document the correct loglevel for the heartbeat message 11 rokov pred
easy.ratelim f269e0f9a5 Wrapper function for the common rate-limited-log pattern. 12 rokov pred
feature4994 a8297cdbd3 use microdescriptors if *any* of our bridges can handle them 11 rokov pred
feature9574 71e0ca02b5 add a changes entry for ticket 9574 11 rokov pred
feature9777 1068e50aec Discard circuit paths on which nobody supports ntor 10 rokov pred
ff28_ciphers 4231729176 Update ciphers.inc to match ff28 10 rokov pred
fix-geoipexclude-doc 8aded5b07c Manpage: refer to ExcludeExitNodes, not the nonexistent ExcludeEntryNodes 11 rokov pred
geoip-apr2013 b41f03f6df Update to the April 2013 GeoIP database. 11 rokov pred
geoip-august2013 41bf8fa889 Update to the August 2013 GeoIP database. 11 rokov pred
geoip-feb2013 adff7f944a Update to the February 2013 GeoIP database. 11 rokov pred
geoip-february2014 26dd328891 Update to the February 2014 GeoIP database. 10 rokov pred
geoip-february2014-regcountry 2658e70d16 Fix geoip by falling back to registered countries. 10 rokov pred
geoip-july2013 2a61b0dd6b Update to the July 2013 GeoIP database. 11 rokov pred
geoip-june2013 d34753174e Update to the June 2013 GeoIP database. 11 rokov pred
geoip-mar2013 3dde6d5d29 Update to the March 2013 GeoIP database. 11 rokov pred
geoip-may2013 f8053179c9 Update to the May 2013 GeoIP database. 11 rokov pred
geoip-october2013 3b0265198f Update to the October 2013 GeoIP database. 11 rokov pred
geoip-september2013 13d192c1d8 Update to the September 2013 GeoIP database. 11 rokov pred
geoip6-february2014 f6f691df73 Update geoip6 to the February 2014 GeoIP database. 10 rokov pred
integers_donna 4beee0f69b Use torint.h in curve25519-donna*.c 11 rokov pred
less_charbuf_usage 1ad6f979b9 Initial changelog for less_charbuf 11 rokov pred
log-noise 80d8fb23e3 Changes file for 8230, 8477 and 8419. 11 rokov pred
md_leak_bug 65575b0755 Stop leaking memory in error cases of md parsing 10 rokov pred
no_client_timestamps_024 39bb59d363 Avoid error by not saying which intro cell type I mean 11 rokov pred
signof_enum 41200b4770 Have autoconf check whether enums are signed. 11 rokov pred
ticket11528 0b319de60f Elevate server TLS cipher preferences over client 10 rokov pred
ticket2267 92ea0b86de Refactor resolve_my_address() so logs are more accurate / helpful 11 rokov pred
ticket8240 343f7aa059 Make the guard lifetime configurable and adjustable via the consensus 11 rokov pred
ticket8443 edd6f02273 randomize SSLKeyLifetime by default 11 rokov pred
ticket9658 2c877d2da4 collect and log statistics about onionskins received/processed 11 rokov pred
ticket9866 fa1034cd99 Changes file for 9866 11 rokov pred
v3_intro_len d5cfbf96a2 Fix an uninitialized-read when parsing v3 introduction requests. 11 rokov pred
warn-unsigned-time_t 2f98bf5c9f Warn at configure time when time_t is unsigned 11 rokov pred