Skip to content
Snippets Groups Projects
  1. Feb 15, 2014
  2. Feb 12, 2014
  3. Feb 11, 2014
  4. Feb 10, 2014
  5. Feb 08, 2014
  6. Feb 07, 2014
  7. Feb 06, 2014
  8. Dec 24, 2013
  9. Dec 22, 2013
  10. Dec 21, 2013
    • Nick Mathewson's avatar
      Fix a logic error in circuit_stream_is_being_handled. · b5d13d11
      Nick Mathewson authored
      When I introduced the unusable_for_new_circuits flag in
      62fb209d, I had a spurious ! in the
      circuit_stream_is_being_handled loop.  This made us decide that
      non-unusable circuits (that is, usable ones) were the ones to avoid,
      and caused it to launch a bunch of extra circuits.
      
      Fixes bug 10456; bugfix on 0.2.4.12-alpha.
      b5d13d11
  11. Dec 19, 2013
  12. Dec 18, 2013
    • Nick Mathewson's avatar
      Never allow OpenSSL engines to replace the RAND_SSLeay method · 7b870039
      Nick Mathewson authored
      This fixes bug 10402, where the rdrand engine would use the rdrand
      instruction, not as an additional entropy source, but as a replacement
      for the entire userspace PRNG.  That's obviously stupid: even if you
      don't think that RDRAND is a likely security risk, the right response
      to an alleged new alleged entropy source is never to throw away all
      previously used entropy sources.
      
      Thanks to coderman and rl1987 for diagnosing and tracking this down.
      7b870039
  13. Dec 17, 2013
  14. Dec 16, 2013
    • Nick Mathewson's avatar
      Avoid free()ing from an mmap on corrupted microdesc cache · d8cfa2ef
      Nick Mathewson authored
      The 'body' field of a microdesc_t holds a strdup()'d value if the
      microdesc's saved_location field is SAVED_IN_JOURNAL or
      SAVED_NOWHERE, and holds a pointer to the middle of an mmap if the
      microdesc is SAVED_IN_CACHE.  But we weren't setting that field
      until a while after we parsed the microdescriptor, which left an
      interval where microdesc_free() would try to free() the middle of
      the mmap().
      
      This patch also includes a regression test.
      
      This is a fix for #10409; bugfix on 0.2.2.6-alpha.
      d8cfa2ef
  15. Nov 15, 2013
  16. Nov 11, 2013
  17. Nov 10, 2013
  18. Nov 07, 2013
    • Nick Mathewson's avatar
      Improved circuit queue out-of-memory handler · 1b8ceb83
      Nick Mathewson authored
      Previously, when we ran low on memory, we'd close whichever circuits
      had the most queued cells. Now, we close those that have the
      *oldest* queued cells, on the theory that those are most responsible
      for us running low on memory, and that those are the least likely to
      actually drain on their own if we wait a little longer.
      
      Based on analysis from a forthcoming paper by Jansen, Tschorsch,
      Johnson, and Scheuermann. Fixes bug 9093.
      1b8ceb83
  19. Oct 31, 2013
Loading