summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | | | | Merge commit 'nickm/fix_security_bug_022' into maint-0.2.2Roger Dingledine2010-12-16
| |\ \ \ \ \ \ \ \ \
| | * \ \ \ \ \ \ \ \ Merge remote branch fix_security_bug_021 into fix_security_bug_022Nick Mathewson2010-12-15
| | |\ \ \ \ \ \ \ \ \ | | | | |/ / / / / / / | | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/common/memarea.c src/or/or.h src/or/rendclient.c
| | | * | | | | | | | Add a changelog entryNick Mathewson2010-12-15
| | | | | | | | | | |
| | | * | | | | | | | Make payloads into uint8_t.Nick Mathewson2010-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will avoid some signed/unsigned assignment-related bugs.
| | | * | | | | | | | Have all of our allocation functions and a few others check for underflowNick Mathewson2010-12-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's all too easy in C to convert an unsigned value to a signed one, which will (on all modern computers) give you a huge signed value. If you have a size_t value of size greater than SSIZE_T_MAX, that is way likelier to be an underflow than it is to be an actual request for more than 2gb of memory in one go. (There's nothing in Tor that should be trying to allocate >2gb chunks.)
| | | * | | | | | | | Base SIZE_T_CEILING on SSIZE_T_MAX.Nick Mathewson2010-12-13
| | | | | | | | | | |
* | | | | | | | | | | Turn on epoll changelists with libevent 2.0.9-rc and laterNick Mathewson2010-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Libevent 2.0 has a "changelist" feature that avoids making redundant syscalls if we wind up doing a lot of event_add/event_del operations on the same fd in a row. Unfortunately, due to a weird design choice in Linux, it doesn't work right with epoll when multiple fds refer to the same socket (e.g., one is a dup() of the other). We don't dup() anything we give to Libevent, though, so it is safe for us to explicitly turn this feature on.
* | | | | | | | | | | Merge remote branch 'origin/maint-0.2.2'Nick Mathewson2010-12-16
|\ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / /
| * | | | | | | | | | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson2010-12-16
| |\ \ \ \ \ \ \ \ \ \ | | |/ / / / / / / / / | |/| | / / / / / / / | | | |/ / / / / / / | | |/| | | | | | |
| | * | | | | | | | Change gabelmoo's IP address and ports.Karsten Loesing2010-12-16
| | | | | | | | | |
* | | | | | | | | | Merge branch 'crypto_ideas'Nick Mathewson2010-12-14
|\ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|_|_|/ |/| | | | | | | | |
| * | | | | | | | | Reformat circuit crypto requirements as a proposal-like documentNick Mathewson2010-12-14
| | | | | | | | | |
| * | | | | | | | | Add start of rransom's notes on tor crypto requirementsNick Mathewson2010-12-14
| | | | | | | | | |
| * | | | | | | | | List another place router identity keys are used.Robert Ransom2010-12-13
| | | | | | | | | |
| * | | | | | | | | Fix typos.Robert Ransom2010-12-13
| | | | | | | | | |
| * | | | | | | | | Add a proposal-ideas document for crypto migration.Nick Mathewson2010-12-13
| | | | | | | | | |
| * | | | | | | | | start reformatting and editing the pluggable-transport proposalNick Mathewson2010-12-11
| | | | | | | | | |
| * | | | | | | | | convert draft pluggable transport proposal to plaintextNick Mathewson2010-12-10
| | | | | | | | | |
* | | | | | | | | | Merge remote branch 'origin/maint-0.2.2'Nick Mathewson2010-12-14
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / |/| / / / / / / / / | |/ / / / / / / /
| * | | | | | | | Merge remote branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson2010-12-14
| |\ \ \ \ \ \ \ \ | | |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/config/geoip
| | * | | | | | | Update to the December 1 2010 Maxmind GeoLite Country database.Karsten Loesing2010-12-08
| | | | | | | | |
* | | | | | | | | Merge remote branch 'origin/maint-0.2.2'Nick Mathewson2010-12-07
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / /
| * | | | | | | | Merge branch 'bug2081_followup_022' into maint-0.2.2Nick Mathewson2010-12-07
| |\ \ \ \ \ \ \ \
| | * | | | | | | | Reject relay versions older than 0.2.0.26-rcNick Mathewson2010-12-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was the first version to cache the correct directory information. Fixes bug 2156.
| | * | | | | | | | revise bug2081_followup changelogNick Mathewson2010-12-07
| | | | | | | | | |
| | * | | | | | | | Have authorities reject routers running verions susceptible to bug 1038.Nick Mathewson2010-11-22
| | | |_|_|_|_|_|/ | | |/| | | | | |
* | | | | | | | | Merge branch 'isolated-streams'Nick Mathewson2010-12-07
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: doc/spec/proposals/000-index.txt
| * | | | | | | | | Revise proposal 171 from start to finishNick Mathewson2010-12-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The big semantic change is to make the IsolateFoo options exist on a per-client-port basis.
| * | | | | | | | | Rename proposal 171 fileNick Mathewson2010-11-27
| | | | | | | | | |
| * | | | | | | | | This change creates proposal 171: 171-separate-streams-by-port-or-host.txtJacob Appelbaum2010-08-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This numbers the proposal to reflect the current discussion on or-dev and irc This change updates the proposal index to reflect prop 171 This change also includes an update about Nick blessing me as a proposal editor Proposal 171 is the product of many comments from many contributors including but not limited to: Damon McCoy Linus Nordberg Nick Matthewson Robert Hogan Robert Ransom Sebastian Hahn
| * | | | | | | | | remove old xxx-separate-streams-by-port.txt ideaJacob Appelbaum2010-07-22
| | | | | | | | | |
* | | | | | | | | | Merge remote branch 'origin/maint-0.2.2'Nick Mathewson2010-12-06
|\ \ \ \ \ \ \ \ \ \ | | |/ / / / / / / / | |/| | | | | | | |
| * | | | | | | | | Fix a bug in calculating wakeup time on 64-bit machines.Nick Mathewson2010-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If you had TIME_MAX > INT_MAX, and your "time_to_exhaust_bw = accountingmax/expected_bandwidth_usage * 60" calculation managed to overflow INT_MAX, then your time_to_consider value could underflow and wind up being rediculously low or high. "Low" was no problem; negative values got caught by the (time_to_consider <= 0) check. "High", however, would get you a wakeup time somewhere in the distant future. The fix is to check for time_to_exhaust_bw overflowing INT_MAX, not TIME_MAX: We don't allow any accounting interval longer than a month, so if time_to_exhaust_bw is significantly larger than 31*24*60*60, we can just clip it. This is a bugfix on 0.0.9pre6, when accounting was first introduced. It fixes bug 2146, unless there are other causes there too. The fix is from boboper. (I tweaked it slightly by removing an assignment that boboper marked as dead, and lowering a variable that no longer needed to be function-scoped.)
* | | | | | | | | | Merge remote branch 'origin/maint-0.2.2'Nick Mathewson2010-12-06
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / /
| * | | | | | | | | Add a missing ! to directory_fetches_from_authoritiesNick Mathewson2010-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old logic would have us fetch from authorities if we were refusing unknown exits and our exit policy was reject*. Instead, we want to fetch from authorities if we're refusing unknown exits and our exit policy is _NOT_ reject*. Fixed by boboper. Fixes more of 2097. Bugfix on 0.2.2.16-alpha.
* | | | | | | | | | Fetch missing certs to authenticate microdesc consensuses as neededNick Mathewson2010-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes bug 2253; fix by rransom
* | | | | | | | | | Merge remote branch 'origin/maint-0.2.2'Nick Mathewson2010-12-03
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / /
| * | | | | | | | | Don't crash when accountingmax is set in non-server TorsNick Mathewson2010-12-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We use a hash of the identity key to seed a prng to tell when an accounting period should end. But thanks to the bug998 changes, clients no longer have server-identity keys to use as a long-term seed in accounting calculations. In any case, their identity keys (as used in TLS) were never never fixed. So we can just set the wakeup time from a random seed instead there. Still open is whether everybody should be random. This patch fixes bug 2235, which was introduced in 0.2.2.18-alpha. Diagnosed with help from boboper on irc.
* | | | | | | | | | Make connection direction statistics compile again.Karsten Loesing2010-12-03
| | | | | | | | | |
* | | | | | | | | | Write bidirectional connection stats in single line.Karsten Loesing2010-12-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There's no need to have a separate line conn-stats-end for the end date and interval length with only a single line conn-bi-direct following.
* | | | | | | | | | Refactor conn stats and add unit tests.Karsten Loesing2010-12-03
| | | | | | | | | |
* | | | | | | | | | Add ChangeLog entry and man page entry.Karsten Loesing2010-12-03
| | | | | | | | | |
* | | | | | | | | | Document BIDI_* constants.Karsten Loesing2010-12-03
| | | | | | | | | |
* | | | | | | | | | Call the new config option ConnDirectionStatistics.Karsten Loesing2010-12-03
| | | | | | | | | |
* | | | | | | | | | Add metric on uni/bidirectional connection usage.Karsten Loesing2010-12-03
| | | | | | | | | |
* | | | | | | | | | Merge remote branch 'origin/maint-0.2.2'Nick Mathewson2010-12-02
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / /
| * | | | | | | | | Fix a harmless off-by-one error in counting controller argument lengthsNick Mathewson2010-12-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bugfix on 0.1.1.1-alpha; found by boboper.
* | | | | | | | | | Merge remote branch 'origin/maint-0.2.2'Nick Mathewson2010-12-01
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / /
| * | | | | | | | | Specified grammars for orconn-status and entry-guards for Tor versions ↵Poet (Tim Sally)2010-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0.1.2.2-alpha through 0.2.2.1-alpha with feature VERBOSE_NAMES turned off.
| * | | | | | | | | Correct information about support for guards being called helper nodes.Poet (Tim Sally)2010-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The spec stated that support for the helper-nodes command would be removed in 0.1.3.x, however support for this command is still in Tor. Updated the spec to reflect this and added a node that the command is deprecated.