summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* dirauth: Warn when failing to post during a votebug40910Sebastian Hahn24 hours
| | | | | | | | | The only way to figure out that posting a vote or signatures to another dirauth failed is by counting how many success messages there are on notice level, and noticing that it is fewer than the number of configured dirauths. Closes #40910.
* dirauth: Reject 0.4.7.x series at the authority levelDavid Goulet3 days
| | | | Signed-off-by: David Goulet <dgoulet@torproject.org>
* bwauth: Allow "node_id" KeyValue without "$"juga3 days
| | | | | | | | | | Allow "node_id" KeyValue without the dollar sign at the start of the hexdigit in the BandwidthFiles, in order to easier database queries combining Tor documents in which the relays fingerprint doesn't include it. Bugfix on all supported versions of Tor. Closes #40891
* add release note and changelog entry for #40819trinity-1686a2024-01-09
|
* version: Bump version to 0.4.8.10-devTor CI Release2023-12-08
|
* version: Bump version to 0.4.8.10Tor CI Release2023-12-08
|
* fallbackdir: Update list generated on December 08, 2023Tor CI Release2023-12-08
|
* Update geoip files to match ipfire location db, 2023/12/08.Tor CI Release2023-12-08
|
* Merge remote-tracking branch 'mikeperry-private/bug40897' into maint-0.4.8David Goulet2023-12-08
|\
| * Bug 40897: Changes fileMike Perry2023-12-07
| |
| * Bug 40897 Bug Bounty: Double the number of max conflux circsMike Perry2023-12-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We strongly suspect that bug 40897 was caused by a custom Tor client that tried to use more than the default number of conflux circuits, for either performance or traffic analysis defense gains, or both. This entity hit a safety check on the exit side, which caused a UAF. Our "belt and suspenders" snapped off, and hit us in the face... again... Since there are good reasons to try more than 2 conflux legs, and research has found some traffic analysis benefits with as many as 5, we're going to raise and parameterize this limit as a form of bug bounty for finding this UAF, so that this entity can try out a little more confluxing. This should also make it easier for researchers to try things like gathering traces with larger amounts of confluxing than normal, to measure real-world traffic analysis impacts of conflux. Shine on, you yoloing anonymous diamond. Let us know if you find out anything interesting!
| * Bug 40897: Add more checks to free pathsMike Perry2023-12-07
| | | | | | | | | | Similar double-frees would be caught earlier by these, so long as the pointers remain nulled out.
| * Bug 40897: Move safety check to proper location and give it error handling.Mike Perry2023-12-07
| |
* | Merge remote-tracking branch 'origin/merge-requests/776' into maint-0.4.8Alexander Færøy2023-12-07
|\ \ | |/ |/|
| * update changes file with correct introduced versiontrinity-1686a2023-12-06
| |
| * add change filetrinity-1686a2023-10-12
| |
| * fix bridge transport statisticstrinity-1686a2023-10-12
| |
* | version: Bump version to 0.4.8.9-devTor CI Release2023-11-09
| |
* | version: Bump version to 0.4.8.9Tor CI Release2023-11-09
| |
* | fallbackdir: Update list generated on November 09, 2023Tor CI Release2023-11-09
| |
* | Update geoip files to match ipfire location db, 2023/11/09.Tor CI Release2023-11-09
| |
* | Merge branch 'ticket40883_048_01' into maint-0.4.8David Goulet2023-11-09
|\ \
| * | hs: Always check if the hs_ident is available when processing a cellDavid Goulet2023-11-08
| | | | | | | | | | | | Signed-off-by: David Goulet <dgoulet@torproject.org>
| * | hs: Fix assert in hs_metrics_update_by_ident()David Goulet2023-11-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The hs_metrics_failed_rdv() macro could pass a NULL value for the identity key when a building circuit would end up in a failure path *before* the "hs_ident" was able to be set which leading to this assert. This was introduced in 0.4.8.1-alpha with the addition of rendezvous circuit failure metrics for the MetricsPort. This fixes TROVE-2023-006 for which its severity is considered high. Signed-off-by: David Goulet <dgoulet@torproject.org>
* | | Merge branch 'tor-gitlab/mr/778' into maint-0.4.8David Goulet2023-11-09
|\ \ \ | |/ / |/| |
| * | Bug 40876 changes fileMike Perry2023-11-01
| | |
| * | Bug 40876: Extra loggingMike Perry2023-11-01
| | |
| * | Bug 40876: Don't reduce primary list for temporary restrictionsMike Perry2023-11-01
| | |
* | | version: Bump version to 0.4.8.8-devTor CI Release2023-11-03
| | |
* | | Merge branch 'maint-0.4.7' into maint-0.4.8David Goulet2023-11-03
|\ \ \
| * | | version: Bump version to 0.4.7.16-devTor CI Release2023-11-03
| | | |
* | | | Update geoip files to match ipfire location db, 2023/11/03.Tor CI Release2023-11-03
| | | |
* | | | fallbackdir: Update list generated on November 03, 2023Tor CI Release2023-11-03
| | | |
* | | | Merge branch 'maint-0.4.7' into maint-0.4.8David Goulet2023-11-03
|\ \ \ \ | |/ / /
| * | | version: Bump version to 0.4.7.16Tor CI Release2023-11-03
| | | |
| * | | fallbackdir: Update list generated on November 03, 2023Tor CI Release2023-11-03
| | | |
| * | | Update geoip files to match ipfire location db, 2023/11/03.Tor CI Release2023-11-03
| | | |
* | | | version: Bump version to 0.4.8.8Tor CI Release2023-11-03
| | | |
* | | | Merge branch 'maint-0.4.7' into maint-0.4.8David Goulet2023-11-03
|\ \ \ \ | |/ / /
| * | | Sync geoip and fallbackdir from maint 048 before releaseDavid Goulet2023-11-03
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <dgoulet@torproject.org>
* | | | Merge branch 'maint-0.4.7' into maint-0.4.8David Goulet2023-11-03
|\ \ \ \ | |/ / / | | / / | |/ / |/| |
| * | Fix TROVE-2023-004: Remote crash when compiled against OpenSSLAlexander Færøy2023-11-03
| | | | | | | | | | | | | | | | | | Fixes #40874 Signed-off-by: David Goulet <dgoulet@torproject.org>
* | | Changes file for bug 40878Mike Perry2023-10-30
| | |
* | | Bug 40878: Count a valid conflux linked cell as valid dataMike Perry2023-10-30
| |/ |/| | | | | For vanguards addon.
* | configure: Bump version to 0.4.8.8-devDavid Goulet2023-10-12
| | | | | | | | Signed-off-by: David Goulet <dgoulet@torproject.org>
* | Merge branch 'bug40869_048' into 'maint-0.4.8'David Goulet2023-10-11
|\ \ | | | | | | | | | | | | Fix the spelling of maxunmeasur(e)dbw (backport to 0.4.8) See merge request tpo/core/tor!774
| * | Fix the spelling of maxunmeasur(e)dbw.Nick Mathewson2023-10-11
|/ / | | | | | | | | | | | | This has been misspelled when using consensus method 31 or later since 0.4.6.1-alpha. Fixes bug 40869. This commit is a backport of b9b0abd6c26d9b361923 to 0.4.8.
* | version: Bump version to 0.4.8.7-devDavid Goulet2023-09-25
| | | | | | | | Signed-off-by: David Goulet <dgoulet@torproject.org>
* | version: Bump version to 0.4.8.7Tor CI Release2023-09-25
| |
* | fallbackdir: Update list generated on September 25, 2023Tor CI Release2023-09-25
| |
generated by cgit v1.2.1 (git 2.18.0) at 2024-02-02 09:59:28 +0000