Commit 79eaeef1 authored by Roger Dingledine's avatar Roger Dingledine
Browse files

stop bridge authorities from leaking their bridge list

parent 5201e05f

ChangeLog

+7 −0
Original line number Diff line number Diff line 
Changes in version 0.2.1.22 - 2010-??-??

  o Major bugfixes:

    - Stop bridge directory authorities from answering dbg-stability.txt

      directory queries, which would let people fetch a list of all

      bridge identities they track. Bugfix on 0.2.1.6-alpha.





Changes in version 0.2.1.21 - 2009-12-21

  Tor 0.2.1.21 fixes an incompatibility with the most recent OpenSSL

  library. If you use Tor on Linux / Unix and you're getting SSL

src/or/directory.c

+2 −1
Original line number Diff line number Diff line
@@ -2956,7 +2956,8 @@ directory_handle_command_get(dir_connection_t *conn, const char *headers, 
  if (!strcmp(url,"/tor/dbg-stability.txt")) {

    const char *stability;

    size_t len;

    if (! authdir_mode_tests_reachability(options) ||

    if (options->BridgeAuthoritativeDir ||

        ! authdir_mode_tests_reachability(options) ||

        ! (stability = rep_hist_get_router_stability_doc(time(NULL)))) {

      write_http_status_line(conn, 404, "Not found.");

      goto done;