Skip to content

GitLab

Trac
Trac

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

Closed
Opened by Roger Dingledine@arma

Private data leak in 0.2.2 debs

In our Tor 0.2.2 debs, we enable cores by default:

#
# Comment this out if you do not want to get coredumps
#
ulimit -c unlimited

But most users don't know about this setting, so they accrue core files in their $datadir. These core files could include keys, relay cell payloads, buffer contents, etc.

We should turn this feature off by default.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information