summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | | | | | | | | | | | Merge remote-tracking branch 'public/bug5647_cleanup'Nick Mathewson2012-04-20
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | | Make base64_decode in rend_parse_client_keys more foolproofNick Mathewson2012-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In general, whenever we can, we should be doing base64_decode(buf, sizeof(buf), s, strlen(s)), and not base_64_decode(buf, expr1, s, expr2) where we hope that expr1 is a good name for the size of buf and expr2 is a good formula for the length of the base64 expression in s.
* | | | | | | | | | | | | | | | start to fold in changelog entriesRoger Dingledine2012-04-19
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | Merge remote-tracking branch 'asn-mytor/bug5601'Nick Mathewson2012-04-19
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / / / / |/| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | | Trivially refactor validate_pluggable_transports_config().George Kadianakis2012-04-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Remove the ugly if statement. * constify 'bridge_info_t' in SMARTLIST_FOREACH_BEGIN.
| * | | | | | | | | | | | | | | Improve the message of validate_pluggable_transports_config().George Kadianakis2012-04-12
| | |_|_|/ / / / / / / / / / / | |/| | | | | | | | | | | | |
* | | | | | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-04-19
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | |_|_|_|_|/ / / / / / / / / | |/| | | | | | | | | | | | |
| * | | | | | | | | | | | | | Fix a log-uninitialized-buffer bug.Nick Mathewson2012-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix for 5647; bugfix on 0.2.1.5-alpha.
* | | | | | | | | | | | | | | initial round of changelog stanza cleanupRoger Dingledine2012-04-19
| |_|_|_|_|_|_|_|/ / / / / / |/| | | | | | | | | | | | |
* | | | | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-04-18
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/rendservice.c Conflicts were due to new NON_ANONYMOUS_MODE_ENABLED tor2web code; I think I resolved them correctly.
| * | | | | | | | | | | | | rend_service_introduce(): do protocol violation check before anything else.George Kadianakis2012-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (Cherry-picked from 6ba13e4 by nickm)
* | | | | | | | | | | | | | Remove needless check for a buffer that could not be NULL.Nick Mathewson2012-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes coverity CID 508: coverity scan doesn't like checking a variable for non-NULL after it has been definitely dereferenced. This should take us back down to zero coverity issues.
* | | | | | | | | | | | | | Don't fetch v2 networkstatuses from caches, even if auths are downNick Mathewson2012-04-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix for 5635; fix on 0.2.2.26-beta, where caches stopped fetching this information.
* | | | | | | | | | | | | | Document unit of bandwidth related options in sample torrc.Peter Palfrader2012-04-13
| |/ / / / / / / / / / / / |/| | | | | | | | | | | |
* | | | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-04-11
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / /
| * | | | | | | | | | | | Merge branch 'bug5593' into maint-0.2.2Nick Mathewson2012-04-11
| |\ \ \ \ \ \ \ \ \ \ \ \
| | * | | | | | | | | | | | Include a Host: header with any HTTP/1.1 proxy requestNick Mathewson2012-04-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bugfix on 0.2.2.1-alpha, which added the orginal HTTP proxy authentication code. Fix for bug 5593.
* | | | | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-04-11
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / /
| * | | | | | | | | | | | | Update to the April 2012 GeoIP database.Karsten Loesing2012-04-11
| |/ / / / / / / / / / / /
* | | | | | | | | | | | | Simplify DH prime generation logic some.Sebastian Hahn2012-04-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is just refactoring work here. The old logic was kind of convoluted, especially after the bug 5572 fix. We don't actually need to distinguish so many cases here. Dropping detection of the "!old_options || !old_options->DynamicDHGroups" case is fine because that's the same that we'd do for clients. Also add a changes file for bug 5572.
* | | | | | | | | | | | | fix bug 5572Daniel 'koolfy' Faucon2012-04-07
| | | | | | | | | | | | |
* | | | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-04-04
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / /
| * | | | | | | | | | | | Wrap long line; strlen("ides")<strlen("turtles").Nick Mathewson2012-04-04
| | | | | | | | | | | | |
| * | | | | | | | | | | | ides has become turtles, and gotten a new IP addressSebastian Hahn2012-04-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per ticket 5569
* | | | | | | | | | | | | Merge remote-tracking branch 'asn-mytor/bug5558_take2'Nick Mathewson2012-04-03
|\ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | tor_vsscanf(): Don't return -1 if '%%' doesn't match.George Kadianakis2012-04-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tor_vsscanf() is supposed to return the current number of matches on match failure.
* | | | | | | | | | | | | | Suppress "decided to publish new descriptor" message when not a serverNick Mathewson2012-04-02
|/ / / / / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The message only means that we're publishing a new descriptor when we are actually in some kind of server mode, and publication is on. Fix for bug 3942; bugfix on 0.2.3.2-alpha.
* | | | | | | | | | | | | Add a warning about settign a bridge in MyFamilyDaniel 'koolfy' Faucon2012-04-02
| | | | | | | | | | | | |
* | | | | | | | | | | | | Make it clear that bridges should not be set in MyFamilyDaniel 'koolfy' Faucon2012-04-02
| | | | | | | | | | | | |
* | | | | | | | | | | | | Merge branch 'maint-0.2.2'Roger Dingledine2012-04-01
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/config.c
| * | | | | | | | | | | | put a _ before or_options_t elements that aren't configurableRoger Dingledine2012-04-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | it's fine with me if we change the current convention, but we should actually decide to change it if we want to.
| * | | | | | | | | | | | BridgePassword was never for debuggingRoger Dingledine2012-04-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is for the not-yet-implemented bridge community design.
* | | | | | | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-04-01
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / | | / / / / / / / / / / / | |/ / / / / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/config.c Conflict was in or_options_free, where two newly added fields had free calls in the same place.
| * | | | | | | | | | | Do not use strcmp() to compare an http authenticator to its expected valueNick Mathewson2012-04-01
| | |_|_|_|_|_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes a side-channel attack on the (fortunately unused!) BridgePassword option for bridge authorities. Fix for bug 5543; bugfix on 0.2.0.14-alpha.
* | | | | | | | | | | Fix comment typoRobert Ransom2012-03-30
| |_|_|_|/ / / / / / |/| | | | | | | | |
* | | | | | | | | | Have tor_parse_*long functions check for negative basesNick Mathewson2012-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | One of our unit tests checks that they behave correctly (giving an error) when the base is negative. But there isn't a guarantee that strtol and friends actually handle negative bases correctly. Found by Coverity Scan; fix for CID 504.
* | | | | | | | | | Fix a couple of "unused assigned value" warnings in parse_config testsNick Mathewson2012-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Coverity doesn't like the fact that we were storing the value of parse_config_line_from_str() but not checking it in a couple of cases. Fixes CID 505 and 506.
* | | | | | | | | | Fix a memory leak in an error case of SAFECOOKIE authentication.Nick Mathewson2012-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Found by Coverity Scan; fix for CID 507; bugfix on 0.2.3.13-alpha.
* | | | | | | | | | Remove a couple redundant NULL-checks before crypto_cipher_freeNick Mathewson2012-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Calling crypto_cipher_free(NULL) is always safe, since (by convention) all of our xyz_free() functions treat xyz_free(NULL) as a no-op. Flagged by coverity scan; fixes CID 508 and 509.
* | | | | | | | | | Merge branch 'bug5527'Nick Mathewson2012-03-30
|\ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | Move router lookup to _after_ we assert that its argument is setNick Mathewson2012-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A previous commit in the 5527 branch had moved router_get_mutable_by_digest(digest_rcvd) to happen before we did tor_assert(digest_rcvd), which would have defeated the purpose of the assert.
| * | | | | | | | | | checking "same addr/port but with nonmatching keys" is obsoleteRoger Dingledine2012-03-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically, I believe it dates back to when extend cells had address:port but no digest in them. The special edge case is certainly not worth the complexity these days.
| * | | | | | | | | | simplify furtherRoger Dingledine2012-03-29
| | | | | | | | | | |
| * | | | | | | | | | Refactor dirserv_orconn_tls_done().Linus Nordberg2012-03-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Look up the router using the digest instead of looping over all routers.
* | | | | | | | | | | Merge remote-tracking branch 'linus/empty_desc_stats'Nick Mathewson2012-03-30
|\ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / |/| | | | | | | | | |
| * | | | | | | | | | Add changes file.Linus Nordberg2012-03-30
| | | | | | | | | | |
| * | | | | | | | | | Don't try to generate stats from an empty served_descs.Linus Nordberg2012-03-28
| | | | | | | | | | |
* | | | | | | | | | | Merge remote-tracking branch 'linus/bug4875_2'Nick Mathewson2012-03-29
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Make relays handle an address suggestion from a directory server giving an ↵Linus Nordberg2012-03-28
| |/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | IPv6 address. last_guessed_ip becomes a tor_addr_t. Most parts of router_new_address_suggestion() learns about IPv6 (resolve_my_address() is still IPv4 only).
* | | | | | | | | | | note that bug 5151 is on 0.2.3.9-alphaNick Mathewson2012-03-28
| | | | | | | | | | |