Jigsaw52 authored Apr 17, 2018 and Nick Mathewson committed Aug 08, 2018

The seccomp rule for the openat syscall checks for the AT_FDCWD
constant. Because this constant is usually a negative value, a
cast to unsigned int is necessary to make sure it does not get
converted to uint64_t used by seccomp.

More info on:
https://github.com/seccomp/libseccomp/issues/69#issuecomment-273805980

Instead, log a protocol warning when single onion services or
Tor2web clients fail to authenticate direct connections to relays.

Fixes bug 26924; bugfix on 0.2.9.1-alpha.

Another way to try to prevent a recurrence of 26485.

Prevents bug 26485; bugfix on 0.1.1.6-alpha.

teor authored Jul 17, 2018 and Nick Mathewson committed Jul 17, 2018

Skip an unreliable key generation test on Windows, until the underlying
issue in bug 26076 is resolved.

Fixes bug 26830; bugfix on 0.2.7.3-rc.

The "Bifroest" bridge authority has been retired; the new bridge authority
is "Serge", and it is operated by George from the TorBSD project.

Closes ticket 26771.

Closes ticket 20424.

Recent Python3 versions seem to require this on Windows.

Fixes bug 26535; bug introduced in f4be34f7, which
was apparently intended itself as a Python3 workaround.

This check was added by mistake long ago.  It will be nice to see
these EOLs disappear from our code over time.

(backport from master)

Bug not in any released Tor.

This patch fixes a memory leak in test_sr_setup_commits() where the
place_holder is allocated, but never freed again.

See: Coverity CID 1437440.

This patch fixes a memory leak in disk_state_parse_commits() where if
commit is NULL, we continue the internal loop, but without ever freeing
the args variable.

See: Coverity CID 1437441.

This patch fixes a memory leak in frac_nodes_with_descriptors() where
we might return without free'ing the bandwidths variable.

See: Coverity CID 1437451.

This patch fixes a potential memory leak in test_hs_auth_cookies() if a
test-case fails and we goto the done label where no memory clean up is
done.

See: Coverity CID 1437453

Closes ticket 26372.

Fixes bug 26269; bugfix on c30be5a8 in 0.2.8.2-alpha

rl1987 authored Jun 04, 2018 and Nick Mathewson committed Jun 08, 2018

and contract_protocol_list()

Apparently, contrary to its documentation, this is how OpenSSL now
wants us to report an error.

Fixes bug 26116; bugfix on 0.2.5.16.