1. 11 Jun, 2016 1 commit
    • Nick Mathewson's avatar
      Enable -Wnull-dereference (GCC >=6.1), and fix the easy cases · 4f8086fb
      Nick Mathewson authored
      This warning, IIUC, means that the compiler doesn't like it when it
      sees a NULL check _after_ we've already dereferenced the
      variable. In such cases, it considers itself free to eliminate the
      NULL check.
      There are a couple of tricky cases:
      One was the case related to the fact that tor_addr_to_in6() can
      return NULL if it gets a non-AF_INET6 address.  The fix was to
      create a variant which asserts on the address type, and never
      returns NULL.
  2. 28 Mar, 2016 1 commit
  3. 04 Mar, 2016 2 commits
  4. 27 Feb, 2016 1 commit
  5. 06 Feb, 2016 1 commit
  6. 28 Jan, 2016 1 commit
  7. 09 Jan, 2016 1 commit
  8. 06 Jan, 2016 2 commits
    • rl1987's avatar
      Use get_interface6_via_udp_socket_hack() properly in _list(). · 110765f5
      rl1987 authored
      When _list() is called with AF_UNSPEC family and fails to enumerate
      network interfaces using platform specific API, have it call
      _hack() twice to find out IPv4 and/or IPv6 address of a machine Tor
      instance is running on. This is correct way to handle this case
      because _hack() can only be called with AF_INET and AF_INET6 and
      does not support any other address family.
    • rl1987's avatar
      Tweak ioctl case. · 680d0701
      rl1987 authored
  9. 03 Jan, 2016 2 commits
  10. 15 Dec, 2015 1 commit
  11. 07 Dec, 2015 1 commit
  12. 18 Nov, 2015 2 commits
  13. 29 Sep, 2015 2 commits
    • teor (Tim Wilson-Brown)'s avatar
      Add checks and unit tests for get_interface_address* failure · 7fa102b4
      teor (Tim Wilson-Brown) authored and Nick Mathewson's avatar Nick Mathewson committed
      Ensure that either a valid address is returned in address pointers,
      or that the address data is zeroed on error.
      Ensure that free_interface_address6_list handles NULL lists.
      Add unit tests for get_interface_address* failure cases.
      Fixes bug #17173.
      Patch by fk/teor, not in any released version of tor.
    • Fabian Keil's avatar
      get_interface_address6_list(): Bring back a return code check · 3ea834ce
      Fabian Keil authored and Nick Mathewson's avatar Nick Mathewson committed
      ... that was removed by 31eb486c which first appeared in
      If tor is running in a ElectroBSD (or FreeBSD) jail it can't
      get any IP addresses that aren't assigned to the jail by
      looking at the interfaces and (by design) the
      get_interface_address6_via_udp_socket_hack() fallback doesn't
      work either.
      The missing return code check resulted in tor_addr_is_internal()
      complaining about a "non-IP address of type 49", due to reading
      uninitialised memory.
      Fixes #17173.
  14. 15 Sep, 2015 4 commits
    • teor (Tim Wilson-Brown)'s avatar
      ExitPolicyRejectPrivate rejects local IPv6 address and interface addresses · 098b82c7
      teor (Tim Wilson-Brown) authored
      ExitPolicyRejectPrivate now rejects more local addresses by default:
       * the relay's published IPv6 address (if any), and
       * any publicly routable IPv4 or IPv6 addresses on any local interfaces.
      This resolves a security issue for IPv6 Exits and multihomed Exits that
      trust connections originating from localhost.
      Resolves ticket 17027. Patch by "teor".
      Patch on 42b8fb5a (11 Nov 2007), released in
    • teor (Tim Wilson-Brown)'s avatar
      ExitPolicy accept6/reject6 produces IPv6 wildcard addresses only · d3358a0a
      teor (Tim Wilson-Brown) authored
      In previous versions of Tor, ExitPolicy accept6/reject6 * produced
      policy entries for IPv4 and IPv6 wildcard addresses.
      To reduce operator confusion, change accept6/reject6 * to only produce
      an IPv6 wildcard address.
      Resolves bug #16069.
      Patch on 2eb7eafc and a96c0aff (25 Oct 2012),
      released in
    • teor (Tim Wilson-Brown)'s avatar
      Ignore accept6/reject6 IPv4, warn about unexpected rule outcomes · e033d5e9
      teor (Tim Wilson-Brown) authored
      When parsing torrc ExitPolicies, we now warn if:
        * an IPv4 address is used on an accept6 or reject6 line. The line is
          ignored, but the rest of the policy items in the list are used.
          (accept/reject continue to allow both IPv4 and IPv6 addresses in torrcs.)
        * a "private" address alias is used on an accept6 or reject6 line.
          The line filters both IPv4 and IPv6 private addresses, disregarding
          the 6 in accept6/reject6.
      When parsing torrc ExitPolicies, we now issue an info-level message:
        * when expanding an accept/reject * line to include both IPv4 and IPv6
          wildcard addresses.
      In each instance, usage advice is provided to avoid the message.
      Partial fix for ticket 16069. Patch by "teor".
      Patch on 2eb7eafc and a96c0aff (25 Oct 2012),
      released in
    • teor (Tim Wilson-Brown)'s avatar
      Add get_interface_address[6]_list for a list of interface IP addresses · 31eb486c
      teor (Tim Wilson-Brown) authored
      Add get_interface_address[6]_list by refactoring
      get_interface_address6. Add unit tests for new and existing functions.
      Preparation for ticket 17027. Patch by "teor".
      Patch on 42b8fb5a (11 Nov 2007), released in
  15. 31 Jul, 2015 1 commit
    • Nick Mathewson's avatar
      Move formatting functions around. · 347fe449
      Nick Mathewson authored
      The base64 and base32 functions used to be in crypto.c;
      crypto_format.h had no header; some general-purpose functions were in
      This patch makes a {crypto,util}_format.[ch], and puts more functions
      there.  Small modules are beautiful!
  16. 29 Jun, 2015 2 commits
  17. 31 Mar, 2015 3 commits
  18. 16 Feb, 2015 2 commits
  19. 12 Feb, 2015 2 commits
  20. 23 Jan, 2015 1 commit
  21. 07 Jan, 2015 1 commit
  22. 02 Jan, 2015 1 commit
  23. 30 Dec, 2014 1 commit
  24. 29 Dec, 2014 2 commits
  25. 21 Dec, 2014 1 commit
  26. 20 Dec, 2014 1 commit
    • teor's avatar
      Fix clang warning, IPv6 address comment, buffer size typo · 6a9cae2e
      teor authored
      The address of an array in the middle of a structure will
      always be non-NULL. clang recognises this and complains.
      Disable the tautologous and redundant check to silence
      this warning.
      A comment about an IPv6 address string incorrectly refers
      to an IPv4 address format.
      A log buffer is sized 10024 rather than 10240.
      Fixes bug 14001.