- May 07, 2021
-
-
Nick Mathewson authored
-
Nick Mathewson authored
As of GCC 11.1.1, the compiler warns us about code like this: if (a) b; c; and that's a good thing: we wouldn't want to "goto fail". But we had an instance if this in circuituse.c, which was making our compilation sad. Fixes bug 40380; bugfix on 0.3.0.1-alpha.
-
Nick Mathewson authored
-
Nick Mathewson authored
-
- Apr 21, 2021
-
-
Nick Mathewson authored
-
George Kadianakis authored
-
- Apr 14, 2021
-
-
David Goulet authored
-
David Goulet authored
Signed-off-by:
David Goulet <dgoulet@torproject.org>
-
- Apr 13, 2021
-
-
Nick Mathewson authored
This is a bugfix against my fix for #40133, which has not yet appeared in 0.3.5.
-
Nick Mathewson authored
-
David Goulet authored
Signed-off-by:
David Goulet <dgoulet@torproject.org>
-
Nick Mathewson authored
-
Nick Mathewson authored
-
- Mar 23, 2021
-
-
David Goulet authored
Fortunately, our tor_free() is setting the variable to NULL after so we were in a situation where NULL was always used instead of the transport name. This first appeared in 894ff2dc and results in basically no bridge with a transport being able to use DoS defenses. Fixes #40345 Signed-off-by:
David Goulet <dgoulet@torproject.org>
-
- Mar 16, 2021
-
-
Nick Mathewson authored
-
Nick Mathewson authored
"ours" to avoid version bump.
-
Nick Mathewson authored
-
- Mar 15, 2021
-
-
Nick Mathewson authored
-
Nick Mathewson authored
-
Nick Mathewson authored
-
Nick Mathewson authored
We were looking for the first instance of "directory-signature " when instead the correct behavior is to look for the first instance of "directory-signature " at the start of a line. Unfortunately, this can be exploited as to crash authorities while they're voting. Fixes #40316; bugfix on 0.2.2.4-alpha. This is TROVE-2021-002, also tracked as CVE-2021-28090.
-
Nick Mathewson authored
-
Nick Mathewson authored
We're going to disable this feature in all versions for now.
-
Nick Mathewson authored
-
Nick Mathewson authored
-
Nick Mathewson authored
-
Nick Mathewson authored
"ours" to avoid version bump.
-
Nick Mathewson authored
-
- Mar 12, 2021
-
-
Nick Mathewson authored
-
Nick Mathewson authored
-
Nick Mathewson authored
-
Nick Mathewson authored
-
Nick Mathewson authored
-
Nick Mathewson authored
-
- Mar 01, 2021
-
-
David Goulet authored
-
- Feb 23, 2021
-
-
David Goulet authored
Now deprecated in libc >= 2.33 Closes #40309 Signed-off-by:
David Goulet <dgoulet@torproject.org>
-
David Goulet authored
Now deprecated in libc >= 2.33 Closes #40309 Signed-off-by:
David Goulet <dgoulet@torproject.org>
-
- Feb 19, 2021
-
-
Nick Mathewson authored
It can be called with strings that should have been length-delimited, but which in fact are not. This can cause a CPU-DoS bug or, in a worse case, a crash. Since this function isn't essential, the best solution for older Tors is to just turn it off. Fixes bug 40286; bugfix on 0.2.2.1-alpha when dump_desc() was introduced.
-
- Feb 05, 2021
-
-
Alexander Hansen Færøy authored
Unreviewed build fix. Discussed the cnage on IRC with Nick.
-
Alexander Hansen Færøy authored
This was a bad copy and paste error from the previous commit which generated a duplicated entry error from practracker. Unreviewed build fix. See: tor#40275.
-