Conflicts:
	src/or/circuitbuild.c

Right now this accounts for about 1% of circuits over all, but if you
pick a guard that's running 0.2.3, it will be about 6% of the circuits
running through that guard.

Making sure that every circuit has at least one ntor link means that
we're getting plausibly good forward secrecy on every circuit.

This implements ticket 9777,

It's possible to set your ExitNodes to contains only exits that don't
have the Exit flag.  If you do that, we'll decide that 0 of your exits
are working.  Instead, in that case we should look at nodes which have
(or which might have) exit policies that don't reject everything.

Fix for bug 10543; bugfix on 0.2.4.10-alpha.

Florent Daigniere authored 11 years ago and Nick Mathewson committed 11 years ago

sed -i 's/BN_free/BN_clear_free/g'

Conflicts:
	changes/bug10485
	src/or/rephist.c
	src/or/status.c

Previously, they went out once an hour, unconditionally.

Fixes 10485; bugfix on 0.2.4.17-rc.

Apparently the compiler on solaris 9 didn't like "sun" as an identifier.

Fix for bug 10565; bugfix on 0.2.5.1-alpha.

'make distcheck' now passes again.

My OSX laptop rightly gave a warning because of sticking strlen() into
an int, but once I took a closer look... it appears that the strlen()
was part of a needlessly verbose implementation for tor_strdup().

While I was there, I fixed the usage of tor_free() in test_hs.c: It
checks for NULL, and it zeros its argument.  So instead of
    if (foo) {
      tor_free(foo);
      foo = NULL;
    }
we should just say
    tor_free(foo);

I'm making this change now since ipfw will want its own option too,
and proliferating options here isn't sensible.

(See #10582 and #10267)

Karsten Loesing authored 11 years ago and Nick Mathewson committed 11 years ago

(This was a squash commit, but I forgot to squash it. Sorry! --Nick)

rl1987 authored 11 years ago and Nick Mathewson committed 11 years ago

Fixes issue 10365.

It looks to me like these functions can never get called with NULL
arguments, but better safe than sorry.

Improvement on f308adf8, where we made the ntor
unit tests run everywhere... so long as a python curve25519 module
was installed.  Now the unit tests don't require that module.

Florent Daigniere authored 11 years ago and Nick Mathewson committed 11 years ago

sed -i 's/BN_free/BN_clear_free/g'

I'm doing this because:
   * User doesn't mean you're running as root, and running as root
     doesn't mean you've set User.
   * It's possible that the user has done some other
     capability-based hack to retain the necessary privileges.

Based on patch from "thomo" at #10582.

The remaining vestige is that we continue to publish the V2dir flag,
and that, for the controller, we continue to emit v2 directory
formats when requested.

also replace them with the versions of the changelog stanzas from
release-0.2.4, for consistency