Nick Mathewson [Tue, 11 Nov 2008 16:36:03 +0000 (16:36 +0000)]
Backport: Fix from rovv: when adding a detached signature, do not automatically assume it is good just because we are adding it. We might also be adding it because it was the first signature we saw for a given voter.
Nick Mathewson [Tue, 23 Sep 2008 20:26:05 +0000 (20:26 +0000)]
(Backport to 0.2.0 branch) Patch from roger for 752, but with more comments: When we get an A.B.exit:P address, and B would reject most connections to P, but we do not know whether it would allow A, then allow the connection to procede. Bugfix, amusingly, on 0.0.9rc5.
Nick Mathewson [Fri, 22 Aug 2008 16:56:08 +0000 (16:56 +0000)]
r17854@tombo: nickm | 2008-08-22 12:55:20 -0400
Backport to 0.2.0: We had been telling people to use --with-ssl-dir, which had not worked since 0.2.0.1-alpha: --with-openssl-dir was the one that worked. Make them both work, document --with-openssl-dir, and mark --with-ssl-dir as obsolete. Found by "Dave".
Nick Mathewson [Thu, 7 Aug 2008 19:41:54 +0000 (19:41 +0000)]
Backport: On recent linux kernels we were not detecting the linux/netfilter_ipv4.h header properly, since we needed to have in_addr and in6_addr and __u32 defined before trying to include it. Fix that.
Peter Palfrader [Thu, 17 Jul 2008 23:57:57 +0000 (23:57 +0000)]
Tweak a few error messages in the init script to use the proper variables (not
that it should matter, the Right One has the same value, but still) and to list
more possible error reasons.
Peter Palfrader [Thu, 17 Jul 2008 23:48:39 +0000 (23:48 +0000)]
Stop requiring that the binary in /usr/sbin/tor is still the same as the one
that actually is the running tor when we try to stop or reload the daemon using
the init script. If the process is called tor, running as debian-tor, and the
pid file agrees to then it probably is the Tor you want to stop (closes:
#491246).
Nick Mathewson [Wed, 9 Jul 2008 15:23:35 +0000 (15:23 +0000)]
Stop using __attribute__((nonnull)): It gets us occcasional warnings when we do something so foolish it can be detected without dataflow analysis, but it also eliminates some of our error checking code. Suggested by Peter Gutmann.
Nick Mathewson [Thu, 3 Jul 2008 15:04:25 +0000 (15:04 +0000)]
r16690@tombo: nickm | 2008-07-03 11:03:39 -0400
Backport to 0.2.0: Fix for bug 742: do not use O_CREAT on 2-option version of open(). Especially do not use it on /dev/null. Fix from Michael Scherer. Bugfix on 0.0.2pre19 (wow).
Nick Mathewson [Sat, 28 Jun 2008 04:16:44 +0000 (04:16 +0000)]
r16588@tombo: nickm | 2008-06-28 00:15:45 -0400
Backport fix for bug 704; found by sjmurdoch. Windows and recent openssl both want to define OCSP_RESPONSE; do not let them.
Karsten Loesing [Tue, 24 Jun 2008 20:39:47 +0000 (20:39 +0000)]
Enable cannibalization of circuits for introduction circuits (backport r14166) and actually use introduction circuits that originate from cannibalization afterwards (backports r15332/r15335).
Roger Dingledine [Fri, 13 Jun 2008 05:12:27 +0000 (05:12 +0000)]
backport r14329 and r14334:
Make relay cells written on a connection count as non-padding when
tracking how long a connection has been in use. Bugfix on
0.2.0.1-alpha. Spotted by lodger.
Roger Dingledine [Fri, 13 Jun 2008 04:18:26 +0000 (04:18 +0000)]
backport r15074, r15076, r15077:
When we haven't had any application requests lately, don't bother
logging that we have expired a bunch of descriptors.
Roger Dingledine [Wed, 11 Jun 2008 11:09:55 +0000 (11:09 +0000)]
If we change our MaxAdvertisedBandwidth and then reload torrc,
Tor won't realize it should publish a new relay descriptor. Fixes
bug 688, reported by mfr.
Peter Palfrader [Wed, 11 Jun 2008 10:48:21 +0000 (10:48 +0000)]
Remove debian/patches/11_tor_as_root_more_helpful.dpatch as it is no longer
needed: We now setuid() to the Tor user when run as root and it all just
works.
Roger Dingledine [Wed, 11 Jun 2008 03:21:03 +0000 (03:21 +0000)]
When we're checking if we have enough dir info for each relay
to begin establishing circuits, make sure that we actually have
the descriptor listed in the consensus, not just any descriptor.
Roger Dingledine [Wed, 11 Jun 2008 02:04:59 +0000 (02:04 +0000)]
Fix a bug where, when we were choosing the 'end stream reason' to
put in our relay end cell that we send to the exit relay, Tor
clients on Windows were sometimes sending the wrong 'reason'. The
anonymity problem is that exit relays may be able to guess whether
client is running Windows, thus helping partition the anonymity
set. Down the road we should stop sending reasons to exit relays,
or otherwise prevent future versions of this bug.
Tor 0.2.1.x can start with 'log notice stdout' and 'runasdaemon 1'
both set. Earlier Tors cannot. This will be considered a feature
of 0.2.1.x, not a bug in 0.2.0.x.