Fixes bug 24480; bugfix on 0.2.5.16.

"ours" merge to avoid version bump.

"ours" merge to avoid version bump.

"ours" merge to avoid version bump.

"ours" to avoid version bump

David Goulet authored 7 years ago and Nick Mathewson committed 7 years ago

TROVE-2017-12. Severity: Medium

When choosing a random node for a circuit, directly use our router
descriptor to exclude ourself instead of the one in the global
descriptor list. That list could be empty because tor could be
downloading them which could lead to not excluding ourself.

Closes #21534

David Goulet authored 7 years ago and Nick Mathewson committed 7 years ago

TROVE-2017-13. Severity: High.

In the unlikely case that a hidden service could be missing intro circuit(s),
that it didn't have enough directory information to open new circuits and that
an intro point was about to expire, a use-after-free is possible because of
the intro point object being both in the retry list and expiring list at the
same time.

The intro object would get freed after the circuit failed to open and then
access a second time when cleaned up from the expiring list.

Fixes #24313

Fixes bug 24246 and TROVE-2017-011.

This bug is so old, it's in Matej's code.  Seems to have been
introduced with e01522bb.

Fixes bug 24245; bugfix on 0.2.9.4-alpha. TROVE-2017-010.

This is a regression; we should have been checking only the
public-key encrypted portion.  Fixes bug 24244, TROVE-2017-009, and
CVE-2017-8819.

David Goulet authored 7 years ago and Nick Mathewson committed 7 years ago

Going from 4 hours to 24 hours in order to try reduce the efficiency of guard
discovery attacks.

Closes #23856

Signed-off-by: David Goulet <dgoulet@torproject.org>

Sebastian Hahn authored 7 years ago and Nick Mathewson committed 7 years ago

Implements ticket 24394