Past due
Milestone
Jun 9, 2020–Oct 15, 2020
Tor: 0.4.5.x-freeze
Tor 0.4.5.x series up to the freeze
Unstarted Issues (open and unassigned)
31
- Tor ./configure fails when --enable-static-libevent and --enable-static-openssl when cross compiling mingw target
- Sandbox failure when adding an extra %include file.
- Move to Gitlab CI
- Use Gitlab CI with Bots for Code Quality and Technical Debt checks
- Inbuf for outgoing SOCKS 4 proxy not cleared before reading from OR connection
- circuit_build_times_update_alpha(): Bug: Could not determine largest build time
- log rotation for /var/log/tor/debug.log did not close handle to old file after compression
- Static building tor with openssl does not work
- Adjust clang-format name in script to be parameterized
- Split router.c, and disable it (mostly) when building without relay support.
- v0.4.1.6 bug journalctl failed assertion
- Remove 0.2.9 from the jenkins builders
- Require client protocol versions based on 0.3.5.7
- Require supported relay protocol versions based on 0.3.5.7
- BUG: Non-fatal assertion info failed in onion_extend_cpath at src/core/or/circuitbuild.c:2663. (Stack trace not available) (on Tor 0.4.1.5 439ca48989ece545)
- Use clang's enum_extensibility attribute to check enum values
- Tor adds trailing space character to log events
- Drop support for Python 2
- Auto-tabify makefiles? complain about mistabbed makefiles?
- Use UndefinedBehaviorSanitizer when the UBSan configure checks pass, rather than the ASan configure checks
- Automate application of C formatting to code
- OpenSSL 1.1.0 issue during static link
- No Control Socket when DisableNetwork and User options are set
- sched: Have per-scheduler type data in a channel_t
- Do any controllers still use getinfo network-status?
- WIP: Reject bridge descriptors posted to non-bridge authorities
- Untange kludgey library detection, particularly for SSL forks
- Bridges should report implementation versions of their pluggable transports
- capture tor log messages before control connection is opened
- Add client-side log indicator that an obfsbridge works
- If only a working static OpenSSL is available, ./configure fails
Ongoing Issues (open and assigned)
25
- Implement proposal 321: "Better performance and usability for the MyFamily option (v2)"
- Implement proposal 318: "Limit protover values to 0-63"
- Implement proposal 315: "Updating the list of fields required in directory documents"
- Implement proposal 285: Directory documents should be standardized as UTF-8
- Implement Proposal 275: Stop including meaningful "published" time in microdescriptor consensus
- Link Tor's code into one big .a file.
- Bridge chooses IPv6 instead of IPv4 (as configured) for server transport 'obfs4'
- ONION_CLIENT_AUTH_ADD persistence error unhelpfully vague
- ONION_CLIENT_AUTH_ADD client names aren't persisted
- Add nonfatal_once assertion about is_canonical assertion in `circuit_deliver_create_cell()`
- relay: IPv4Only ORPort without any IPv6 address configured spam logs
- stats: Create a stat exporter port for monitoring purposes
- Build Tor without warnings or test failures with OpenSSL 3.0.0
- "Pluggable Transport process terminated" but Tor keeps on going (and of course doesn't work)
- Add a BandwidthStatistics option and consensus parameter
- improve OOS (out-of-sockets) handler victim selection and more
- check-local target to enforce doxygen-correctness
- Add more robust Tor API documentation
- must not *skip* obsolete options.
- control: Add a key to GETINFO to get the DoS subsystem stats
- Extract information from more kinds of wedged directory connections.
- When ClientTransportPlugin is missing, tor connects directly to bridge addresses, even if they have a transport name
- Tor uses 100% CPU when accessing the cache directory on Windows
- HSDirs should publish some count about new-style onion addresses
- we should log an unmistakeable warning when --disable-asserts-in-tests is enabled
Completed Issues (closed)
76
- unit test fail "assert(smartlist_len(results) OP_EQ sizeof(results_test11)/sizeof(*results_test11)): 6 vs 3"
- Give configure-time warnings on API mismatch with Openssl headers and libraries
- Revise doc/state-contents.txt to be accurate
- Debug log sr_state_get_start_time_of_current_protocol_run() appears ten of thousands of time when starting tor
- One last underflow in rend_cache tests
- hs-v2: The rend_cache/entry_free test underflows rend_cache_decrement_allocation()
- Incorrect key ID type used in some ed25519 certificates
- Coverity issues in test_glob()
- Make options_init_from_torrc smaller
- Assertion buf->tail failed in buf_assert_ok at src/lib/buf/buffers.c:919
- CFG_PORT_AUTO reported as 12845150
- Bug: Tor 0.4.4.3-alpha: Assertion new_conn failed in retry_all_listeners at src/core/mainloop/connection.c:3047
- relay: Setting ORPort [<IPv6>]:auto segfault or uses wrong port
- Tor always overwrites onion service hostname file, but should leave it alone if it shouldn't change
- Rebuild fallbackdir list 2020
- log: Double fmt_addr() use in the same logging results in same content
- ipv6: check_descriptor_ipaddress_changed() should check for IPv6 changes
- Audit use of `router_get_advertised_*()` functions to see if any callers should look at descriptor instead
- Rename `router_get_advertised_*()` functions to clarify that they look at configuration
- prop 312: Don't publish IPv6 address if ORPort is IPv4Only
- S55: Make router_has_advertised_ipv6_orport() look at the descriptor
- CID 1465290: Passing null pointer "ipv4_addr" to "geoip_get_country_by_addr"
- Add running glibc version to the log
- Define and use `CONST_TO_FOO_CONN()`
- node: format_node_description() interface is not standard
- relay: Stop using uint32_t addr for IPv4 and move to tor_addr_t
- Give or_connection_t a "canonical_addr" field rather than "real_addr".
- Add and use "describe connection" and "describe peer" functions.
- Document behavior of addr/address/real_addr fields
- ipv6: Specialize GETINFO address interface for v4 and v6
- resolved_addr_set_suggested() cannot succeed
- Rename blacklist and whitelist to something without a harmful connotation
- Nonfatal assertion in `relay_new_address_suggestion()`
- Remove coccinelle checks from check-local
- Prop 312: Make relay pick IPv4 or/and IPv6 resolved address in descriptor
- test: Memleak in get_address_from_config()
- Prop 312: Relay learn address from NETINFO cell
- Update git scripts with gitlab support
- Reject relays running 0.4.1
- Make tor_inet_pton() handle bad addresses consistently on Windows
- Add IPv6 Support to is_local_addr()
- Unsuccessful compilation of tor on FreeBSD system with libssl.so.11
- Pre-commit hook does not stash unstaged changes before running code style checkers
- Prop 312: 5.1. Ask Relay Operators to Test IPv6 Addresses Discovery
- Prop 312: 5.1. Test Relay IPv6 Addresses Discovery on the Tor Network
- Prop 312: 3.5.5. Detailed Address Resolution Logs
- Prop 312: 3.2.7. Publish IPv4 Descriptor on Guessed IPv6 Reachability Failure
- Prop 312: 3.2.7. Automatically Enable an IPv6 ORPort
- Prop 312: 3.2.6. Add an AddressDisableIPv6 torrc option
- Prop 312: 3.2.5. Use IPv6 Addresses from Directory Servers
- Prop 312: 3.2.3 Limit Directory Authority Addresses to Address and ORPort
- Prop 312: 3.2.3. Use Local Interface IPv6 Address
- Prop 312: 3.2.2. Stop Directory Authorities Resolving *Port Hostnames
- Prop 312: 3.2.2. Use Advertised ORPort IPv4 Address in Descriptors
- Prop 312: 3.2.1. Test Address torrc Option Configurations
- trace: Add tracepoints and userspace tracer support
- Make authorities add their own IPv6 address to trusted dir servers
- Document that we avoid changing src/ext
- hs-v2: Intro point circuit TIMEOUT failure is not reported
- update .gitlab-ci.yml to remove broken cruft and add a complete test suite
- Send a control port event when a stream enters the controller_wait state
- static Tor building against openssl-1.1.1 fails: configure unable to find linkable OpenSSL
- Stop shipping an abandoned systemd script?
- Relays log a bootstrap warning if they can't extend for somebody else's circuit
- MaxMemInCellQueues minimum of 256MB is still too large for low-RAM relays (LEDE and OpenWRT routers)
- Unreachable relays launch multiple testing circuits per second
- Update dir-spec with client fallback directory mirror attempt and timeout behaviour
- ORPort self reachability test happens also when it shouldn't
- When a relay advertises a new, unreachable address, OR reachability can succeed via the old address
- ratelimit message is incorrect.
- Rename fascist_firewall_* functions to reachable_address_*
- Authorities should describe their bwauth version in their votes
- Tor's sybil protection doesn't consider IPv6
- Make sure that we clear addresses before freeing connections
- Obfsproxy should respect OutboundBindAddress in torrc
- We launch dummy descriptor fetches more often than needed