Nick Mathewson [Wed, 12 Nov 2008 14:49:17 +0000 (14:49 +0000)]
Backport: Apparently sparc64 is way more strict about uint16_t access alignment than I had thought: it gave bus errors when messing with var-cell headers. Maybe this patch will fix bug 862.
Steven Murdoch [Wed, 12 Nov 2008 01:10:21 +0000 (01:10 +0000)]
Backport of changesets 17200, 17201, 17203-17206, 17228, 17232, 17236: Patch from Jacob Appelbaum and me to make User option more robust, properly set supplementary groups, deprecated the Group option, and log more information on credential switching. Fixes bugs 848 and 857
Nick Mathewson [Tue, 11 Nov 2008 16:36:03 +0000 (16:36 +0000)]
Backport: Fix from rovv: when adding a detached signature, do not automatically assume it is good just because we are adding it. We might also be adding it because it was the first signature we saw for a given voter.
Nick Mathewson [Tue, 23 Sep 2008 20:26:05 +0000 (20:26 +0000)]
(Backport to 0.2.0 branch) Patch from roger for 752, but with more comments: When we get an A.B.exit:P address, and B would reject most connections to P, but we do not know whether it would allow A, then allow the connection to procede. Bugfix, amusingly, on 0.0.9rc5.
Nick Mathewson [Fri, 22 Aug 2008 16:56:08 +0000 (16:56 +0000)]
r17854@tombo: nickm | 2008-08-22 12:55:20 -0400
Backport to 0.2.0: We had been telling people to use --with-ssl-dir, which had not worked since 0.2.0.1-alpha: --with-openssl-dir was the one that worked. Make them both work, document --with-openssl-dir, and mark --with-ssl-dir as obsolete. Found by "Dave".
Nick Mathewson [Thu, 7 Aug 2008 19:41:54 +0000 (19:41 +0000)]
Backport: On recent linux kernels we were not detecting the linux/netfilter_ipv4.h header properly, since we needed to have in_addr and in6_addr and __u32 defined before trying to include it. Fix that.
Peter Palfrader [Thu, 17 Jul 2008 23:57:57 +0000 (23:57 +0000)]
Tweak a few error messages in the init script to use the proper variables (not
that it should matter, the Right One has the same value, but still) and to list
more possible error reasons.
Peter Palfrader [Thu, 17 Jul 2008 23:48:39 +0000 (23:48 +0000)]
Stop requiring that the binary in /usr/sbin/tor is still the same as the one
that actually is the running tor when we try to stop or reload the daemon using
the init script. If the process is called tor, running as debian-tor, and the
pid file agrees to then it probably is the Tor you want to stop (closes:
#491246).
Nick Mathewson [Wed, 9 Jul 2008 15:23:35 +0000 (15:23 +0000)]
Stop using __attribute__((nonnull)): It gets us occcasional warnings when we do something so foolish it can be detected without dataflow analysis, but it also eliminates some of our error checking code. Suggested by Peter Gutmann.
Nick Mathewson [Thu, 3 Jul 2008 15:04:25 +0000 (15:04 +0000)]
r16690@tombo: nickm | 2008-07-03 11:03:39 -0400
Backport to 0.2.0: Fix for bug 742: do not use O_CREAT on 2-option version of open(). Especially do not use it on /dev/null. Fix from Michael Scherer. Bugfix on 0.0.2pre19 (wow).
Nick Mathewson [Sat, 28 Jun 2008 04:16:44 +0000 (04:16 +0000)]
r16588@tombo: nickm | 2008-06-28 00:15:45 -0400
Backport fix for bug 704; found by sjmurdoch. Windows and recent openssl both want to define OCSP_RESPONSE; do not let them.
Karsten Loesing [Tue, 24 Jun 2008 20:39:47 +0000 (20:39 +0000)]
Enable cannibalization of circuits for introduction circuits (backport r14166) and actually use introduction circuits that originate from cannibalization afterwards (backports r15332/r15335).
Roger Dingledine [Fri, 13 Jun 2008 05:12:27 +0000 (05:12 +0000)]
backport r14329 and r14334:
Make relay cells written on a connection count as non-padding when
tracking how long a connection has been in use. Bugfix on
0.2.0.1-alpha. Spotted by lodger.
Roger Dingledine [Fri, 13 Jun 2008 04:18:26 +0000 (04:18 +0000)]
backport r15074, r15076, r15077:
When we haven't had any application requests lately, don't bother
logging that we have expired a bunch of descriptors.
Roger Dingledine [Wed, 11 Jun 2008 11:09:55 +0000 (11:09 +0000)]
If we change our MaxAdvertisedBandwidth and then reload torrc,
Tor won't realize it should publish a new relay descriptor. Fixes
bug 688, reported by mfr.
Peter Palfrader [Wed, 11 Jun 2008 10:48:21 +0000 (10:48 +0000)]
Remove debian/patches/11_tor_as_root_more_helpful.dpatch as it is no longer
needed: We now setuid() to the Tor user when run as root and it all just
works.