Skip to content
  1. Sep 20, 2023
  2. Aug 09, 2022
  3. Aug 07, 2022
  4. Jun 02, 2022
    • Jim Newsome's avatar
      Merge branch 'hintless' into 'main' · 1bbce97e
      Jim Newsome authored
      In getaddrinfo:
      
      * use default hints when none supplied
      * never request v4-mapped addresses
      * never let libc's getaddrinfo do network lookups
      
      See merge request !7
      1bbce97e
    • Jim Newsome's avatar
      Set AI_NUMERICHOST when delegating to libc gethostbyname · 7e1514cd
      Jim Newsome authored
      This is an extra safeguard to ensure it will never try to do a network
      lookup.
      7e1514cd
    • Jim Newsome's avatar
      Never request v4-mapped addresses · f8b36685
      Jim Newsome authored
      Tor doesn't support connecting to them, so don't ask for them.
      tor#40611
      f8b36685
    • Jim Newsome's avatar
      getaddrinfo: use default hints when none supplied · c702e4fc
      Jim Newsome authored
      Previously we fell back to libc's getaddrinfo when hints is NULL, under
      the mistaken assumption that the default address family AF_UNSPEC would
      guarantee it wouldn't look up any address. It's actually the opposite -
      it means v4 and v6 are both acceptable.
      
      On my machine the previous behavior the native call to getaddrinfo makes
      an interceptible call to `socket` to create a UDP socket which we block,
      preventing a leak, but it's possible with other libc's this could have
      caused a leak.
      
      With this change such calls can still potentially succeed and return
      addresses, resolved via tor.
      c702e4fc
  5. May 25, 2022
  6. May 24, 2022
  7. Feb 14, 2022
  8. Nov 12, 2021
  9. Feb 22, 2021
  10. Feb 08, 2021
  11. Feb 05, 2021
  12. Oct 27, 2020
  13. Jan 22, 2019
  14. Nov 19, 2018
  15. Apr 20, 2018
  16. Sep 30, 2017
    • Yawning Angel's avatar
      Bug 23715: Support memfd_create(2). · dc1d6ae5
      Yawning Angel authored
      Enough things use this now, that the syscall(2) wrapper should support
      it, since glibc doesn't provide a wrapper for it, and the documentation
      says to invoke it using syscall(2).
      dc1d6ae5
  17. Aug 04, 2017