summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | | | | | | | | | Whitespace cleanupNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Reindent a block in dns.cNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Actually send BEGIN cell flagsNick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This uses advertised IPv6 ports as an implicit version check.
| * | | | | | | | | | | | | | When asking for a specific address type, others aren't acceptableNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | I think it is correct to decorate these addresses.Nick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Better checking of exit policies for connections by hostnameNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Only send begin cell flags when we have some to sendNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Never support IPv6 traffic on a SOCKS4 connection.Nick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Add a function to set a tor_addr_t to a null addressNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Get the client side of receiving an IPv6 address to workNick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This makes it so we can handle getting an IPv6 in the 3 different formats we specified it for in RESOLVED cells, END_STREAM_REASON_EXITPOLICY cells, and CONNECTED cells. We don't cache IPv6 addresses yet, since proposal 205 isn't implemented. There's a refactored function for parsing connected cells; it has unit tests.
| * | | | | | | | | | | | | | Reject IPv4 or IPv6 addresses from the user depending on SOCKS settingsNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Rename ipv{4,6}_only to bind_ipv{4,6}_onlyNick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is to avoid confusion with the ipv{4,6}_traffic flags.
| * | | | | | | | | | | | | | Add {No,}IPv{4,6}Traffic options to SOCKSPortNick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These options are for telling the SOCKSPort that it should allow or not allow connections to IPv4/IPv6 addresses. These aren't implemented yet; this is just the code to read the options and get them into the entrey_connection_t.
| * | | | | | | | | | | | | | Make DNS callback pass IPv6 answers to dns_answer_foundNick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also, count ipv6 timeouts vs others. If we have too many ipv6 requests time out, then we could be degrading performance because of a broken DNS server that ignores AAAA requests. Other cases in which we never learn an AAAA address aren't so bad, since they don't slow A (ipv4) answers down very much.
| * | | | | | | | | | | | | | Make dns wildcarding checks work for ipv6Nick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Add an IPv6Exit configuration optionNick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Don't advertise an IPv6 exit policy, or accept IPv6 exit requests, if IPv6Exit is not true.
| * | | | | | | | | | | | | | Simplest version of server-side IPv6 support (no dns)Nick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a relatively simple set of changes: we mostly need to remove a few "but not for IPv6" changes. We also needed to tweak the handling of DNS code to generate RESOLVED cells that could get an IPv6 answer in return.
| * | | | | | | | | | | | | | Record, send, and receive flags in BEGIN cellsNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Add IPv6 support to compare_to_addr_to_node_policyNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Authorities put p6 lines into microdescriptors.Nick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Parse IPv6 policy summaries from router descriptors and microdescsNick Mathewson2012-11-14
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Better policy support for IPv6Nick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now, "accept *:80" means "accept all addresses on port 80", and not just IPv4. For just v4, say "accept *4:80"; for just v6 say "accept *6:80". We can parse these policies from torrc just fine, and we should be successfully keeping them out of descriptors for now. We also now include appropriate IPv6 addresses in "reject private:*"
| * | | | | | | | | | | | | | Add a new family-specific syntax for tor_addr_parse_mask_portsNick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By default, "*" means "All IPv4 addresses" with tor_addr_parse_mask_ports, so I won't break anything. But if the new EXTENDED_STAR flag is provided, then * means "any address", *4 means "any IPv4 address" (that is, 0.0.0.0/0), and "*6" means "any IPv6 address" (that is, [::]/0). This is going to let us have a syntax for specifying exit policies in torrc that won't drive people mad. Also, add a bunch of unit tests for tor_addr_parse_mask_ports to test these new features, and to increase coverage.
| * | | | | | | | | | | | | | Refactor begin cell parsing into its own function, with tests.Nick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add 'flags' argument to begin cells, per proposal 208.
| * | | | | | | | | | | | | | Refactor client_dns_set_{reverse_,}addressmap() to take a circNick Mathewson2012-11-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We'd like these functions to be circuit-relative so that we can implement a per-circuit DNS cache and per-circuit DNS cache rules for proposal 205 or its successors. I'm doing this now, as a part of the IPv6 exits code, since there are about to be a few more instances of code using this.
| * | | | | | | | | | | | | | Move address map into its own file.Nick Mathewson2012-11-14
|/ / / / / / / / / / / / / /
* | | | | | | | | | | | | | Merge branch 'bug7267' of ssh://git-rw.torproject.org/user/andrea/torAndrea Shepard2012-11-13
|\ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | Add comment explaining different channel close functionsAndrea Shepard2012-11-13
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Add changes file for bug 7267Andrea Shepard2012-11-13
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | Call channel_mark_for_close() properly in hibernate_go_dormant()Andrea Shepard2012-11-13
| | |_|_|_|_|_|_|_|_|_|_|_|/ | |/| | | | | | | | | | | |
* | | | | | | | | | | | | | Merge remote-tracking branch 'public/bug7059'Nick Mathewson2012-11-13
|\ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | Allow an optional $ in GETINFO ns/id/<identity>Nick Mathewson2012-11-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | That's not where I'd want to put a $, but apparently the other foo/id/<identity> things allow it, as does an arguably valid interpretation of control-spec.txt. So let's be consistent. Fix for a piece of bug 7059.
* | | | | | | | | | | | | | | Actually distribute the geoip6 file.Nick Mathewson2012-11-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes a bug (with no ticket) on 0.2.4.6-alpha.
* | | | | | | | | | | | | | | bump to 0.2.4.6-alpha-devRoger Dingledine2012-11-13
| |/ / / / / / / / / / / / / |/| | | | | | | | | | | | |
* | | | | | | | | | | | | | bump to 0.2.4.6-alphator-0.2.4.6-alphaRoger Dingledine2012-11-13
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | fold in changes filesRoger Dingledine2012-11-12
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Merge branch 'maint-0.2.3'Roger Dingledine2012-11-12
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | | |_|_|_|/ / / / / / / / / | |/| | | | | | | | | | | |
| * | | | | | | | | | | | | use a more logical operatorRoger Dingledine2012-11-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a harmless bug when opting against publishing a relay descriptor because DisableNetwork is set. Fixes bug 7464; bugfix on 0.2.3.9-alpha.
* | | | | | | | | | | | | | Possible fix for bug 7212Nick Mathewson2012-11-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is the simplest possible workaround: make it safe to call circuit_cell_queue_clear() on a non-attached circuit, and make it safe-but-a-LD_BUG-warning to call update_circuit_on_cmux() on a non-attached circuit. LocalWords: unstage src Untracked
* | | | | | | | | | | | | | Merge branch 'check_for_orconn_on_close_squashed' of ↵Andrea Shepard2012-11-10
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ssh://git-rw.torproject.org/user/andrea/tor
| * | | | | | | | | | | | | | Add changes file for connection_mark_for_close()/connection_mark_and_flush() ↵Andrea Shepard2012-11-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | or_connection_t checking
| * | | | | | | | | | | | | | Make everything in connection.c that uses connection_or_notify_error() also ↵Andrea Shepard2012-11-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | use connection_mark_and_close_internal() to avoid spurious warnings
| * | | | | | | | | | | | | | Check for orconns in connection_mark_for_close and ↵Andrea Shepard2012-11-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | connection_mark_and_flush, and pass the call through channel_close_for_error with a warning to avoid asserts
* | | | | | | | | | | | | | | Fix a memory leak in handling errors on CERTS cells. bug 7422Nick Mathewson2012-11-08
| | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | Fix test.c compilation on mingw32.Nick Mathewson2012-11-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Looks like windows doesn't have an s6_addr32 in its in6_addr. Bug not in any released version of Tor; bugfix on abb886014e1ee.
* | | | | | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson2012-11-08
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | |/ / / / / / / / / / / / / | |/| | | | | | | | | | | | |
| * | | | | | | | | | | | | | Turn a memwipe in tor_process_handle_destroy() back to memsetNick Mathewson2012-11-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It broke linking on tor-resolve.c, and it's not actually sanitizing anything sensitive. Fix for bug 7420; bug not on ony released Tor.
* | | | | | | | | | | | | | | Turn some memset()s introduced in tor 0.2.4 into memwipe()sNick Mathewson2012-11-08
| | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson2012-11-08
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / / / | | / / / / / / / / / / / / / | |/ / / / / / / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/common/crypto.c src/or/rendservice.c
| * | | | | | | | | | | | | Merge branch 'bug7352_023_rebased' into maint-0.2.3Nick Mathewson2012-11-08
| |\ \ \ \ \ \ \ \ \ \ \ \ \