Nick Mathewson [Wed, 9 Jul 2008 15:23:35 +0000 (15:23 +0000)]
Stop using __attribute__((nonnull)): It gets us occcasional warnings when we do something so foolish it can be detected without dataflow analysis, but it also eliminates some of our error checking code. Suggested by Peter Gutmann.
Nick Mathewson [Thu, 3 Jul 2008 15:04:25 +0000 (15:04 +0000)]
r16690@tombo: nickm | 2008-07-03 11:03:39 -0400
Backport to 0.2.0: Fix for bug 742: do not use O_CREAT on 2-option version of open(). Especially do not use it on /dev/null. Fix from Michael Scherer. Bugfix on 0.0.2pre19 (wow).
Nick Mathewson [Sat, 28 Jun 2008 04:16:44 +0000 (04:16 +0000)]
r16588@tombo: nickm | 2008-06-28 00:15:45 -0400
Backport fix for bug 704; found by sjmurdoch. Windows and recent openssl both want to define OCSP_RESPONSE; do not let them.
Karsten Loesing [Tue, 24 Jun 2008 20:39:47 +0000 (20:39 +0000)]
Enable cannibalization of circuits for introduction circuits (backport r14166) and actually use introduction circuits that originate from cannibalization afterwards (backports r15332/r15335).
Roger Dingledine [Fri, 13 Jun 2008 05:12:27 +0000 (05:12 +0000)]
backport r14329 and r14334:
Make relay cells written on a connection count as non-padding when
tracking how long a connection has been in use. Bugfix on
0.2.0.1-alpha. Spotted by lodger.
Roger Dingledine [Fri, 13 Jun 2008 04:18:26 +0000 (04:18 +0000)]
backport r15074, r15076, r15077:
When we haven't had any application requests lately, don't bother
logging that we have expired a bunch of descriptors.
Roger Dingledine [Wed, 11 Jun 2008 11:09:55 +0000 (11:09 +0000)]
If we change our MaxAdvertisedBandwidth and then reload torrc,
Tor won't realize it should publish a new relay descriptor. Fixes
bug 688, reported by mfr.
Peter Palfrader [Wed, 11 Jun 2008 10:48:21 +0000 (10:48 +0000)]
Remove debian/patches/11_tor_as_root_more_helpful.dpatch as it is no longer
needed: We now setuid() to the Tor user when run as root and it all just
works.
Roger Dingledine [Wed, 11 Jun 2008 03:21:03 +0000 (03:21 +0000)]
When we're checking if we have enough dir info for each relay
to begin establishing circuits, make sure that we actually have
the descriptor listed in the consensus, not just any descriptor.
Roger Dingledine [Wed, 11 Jun 2008 02:04:59 +0000 (02:04 +0000)]
Fix a bug where, when we were choosing the 'end stream reason' to
put in our relay end cell that we send to the exit relay, Tor
clients on Windows were sometimes sending the wrong 'reason'. The
anonymity problem is that exit relays may be able to guess whether
client is running Windows, thus helping partition the anonymity
set. Down the road we should stop sending reasons to exit relays,
or otherwise prevent future versions of this bug.
Tor 0.2.1.x can start with 'log notice stdout' and 'runasdaemon 1'
both set. Earlier Tors cannot. This will be considered a feature
of 0.2.1.x, not a bug in 0.2.0.x.
Peter Palfrader [Thu, 5 Jun 2008 23:22:20 +0000 (23:22 +0000)]
Use ${binary:Version} to depend on the right tor binary package from the
tor-dbg package instead of ${Source-Version}. Some guy on the internet said
the latter was deprecated.
Nick Mathewson [Thu, 29 May 2008 00:45:07 +0000 (00:45 +0000)]
Backport fix for bug noted by roger: rebuild extrainfo store from time to time, even if we have never actually downloaded an extrainfo. Bridge authorities need this, or they never clean the extrainfo store.
Nick Mathewson [Wed, 28 May 2008 17:19:19 +0000 (17:19 +0000)]
Backport: Fix the rpm build: we need to list all our files in the files section. Also, put fallback-consensus and geoip file in /usr/share/tor/, not in /usr/share/
Peter Palfrader [Tue, 13 May 2008 17:03:44 +0000 (17:03 +0000)]
* New upstream version.
* Conflict with old libssls.
* On upgrading from versions prior to, including, 0.1.2.19-2, or
from versions later than 0.2.0 and prior to 0.2.0.26-rc do the
following, and if we are a server (we have a /var/lib/tor/keys
directory)
- move /var/lib/tor/keys/secret_onion_key out of the way.
- move /var/lib/tor/keys/secret_onion_key.old out of the way.
- move /var/lib/tor/keys/secret_id_key out of the way if it was
created on or after 2006-09-17, which is the day the bad
libssl was uploaded to Debian unstable.
* Add a NEWS file explaining this change.
Nick Mathewson [Tue, 13 May 2008 12:42:25 +0000 (12:42 +0000)]
r19723@catbus: nickm | 2008-05-13 08:41:40 -0400
Bump version and update authority keys affected by Debian OpenSSL bug (See CVE-2008-0166 or http://lists.debian.org/debian-security-announce/2008/msg00152.html )
Nick Mathewson [Mon, 12 May 2008 21:12:01 +0000 (21:12 +0000)]
r19713@catbus: nickm | 2008-05-12 17:10:37 -0400
Bugfix: an authority signature is "unrecognized" if we lack a dirserver entry for it, even if we have an older cached certificate that says it is recognized. This affects clients who remove entries from their dirserver list without clearing their certificate cache.