Nick Mathewson
9b4ac986cb
Use tor_getpw{nam,uid} wrappers to fix bug 11946
...
When running with User set, we frequently try to look up our
information in the user database (e.g., /etc/passwd). The seccomp2
sandbox setup doesn't let us open /etc/passwd, and probably
shouldn't.
To fix this, we have a pair of wrappers for getpwnam and getpwuid.
When a real call to getpwnam or getpwuid fails, they fall back to a
cached value, if the uid/gid matches.
(Granting access to /etc/passwd isn't possible with the way we
handle opening files through the sandbox. It's not desirable either.)
2014-05-14 13:53:14 -04:00
Nick Mathewson
585582fc8c
Merge branch 'bug9781_v2'
2014-05-12 13:35:22 -04:00
Nick Mathewson
b5e142cb1b
Log an error reply from tor-fw-helper correctly.
...
Fix for bug 9781; bugfix on cd05f35d2c
in 0.2.4.2-alpha.
2014-05-12 13:35:01 -04:00
Nick Mathewson
75e850efe6
changes file for gisle vanem's MSVC fix
2014-05-12 11:49:17 -04:00
dana koch
d6e6c63baf
Quench clang's complaints with -Wshorten-64-to-32 when time_t is not long.
...
On OpenBSD 5.4, time_t is a 32-bit integer. These instances contain
implicit treatment of long and time_t as comparable types, so explicitly
cast to time_t.
2014-05-11 23:36:00 -04:00
Nick Mathewson
5b861ae53f
Merge remote-tracking branch 'public/bug11648'
2014-05-08 12:01:23 -04:00
Nick Mathewson
c86b709a07
changes file for 11648
2014-05-08 12:01:12 -04:00
Nick Mathewson
a32d7e1910
Return success when get_total_system_memory() succeeds.
...
Fixes bug 11805; bugfix on 0.2.5.4-alpha.
2014-05-08 00:32:22 -04:00
Nick Mathewson
683b80bf81
Merge remote-tracking branch 'public/bug11737_diagnostic'
2014-05-07 22:52:44 -04:00
Nick Mathewson
c948bdaa28
Improve bug11743 message a bit.
2014-05-07 22:23:19 -04:00
Nick Mathewson
0de2625675
Merge remote-tracking branch 'public/bug8387_diagnostic'
2014-05-07 22:15:24 -04:00
Nick Mathewson
4a740451ac
Merge remote-tracking branch 'public/bug11750'
2014-05-06 20:44:41 -04:00
Nick Mathewson
5cea500ce7
Merge branch 'bug11743_option_b'
2014-05-06 20:40:40 -04:00
Nick Mathewson
ea570fa13c
changes file for bug11743
2014-05-06 16:28:34 -04:00
Nick Mathewson
c7549cb4cd
Merge remote-tracking branch 'karsten/bug11742'
2014-05-06 13:54:37 -04:00
Nick Mathewson
a06044a485
Check HT_REP_IS_BAD_() when giving a bug-7164 warning.
...
This may let us know if we're hitting 7164 because of an
hte_hash-corruption situation proposed by "cypherpunks" in bug
11737.
2014-05-06 13:03:24 -04:00
Nick Mathewson
78301d99fe
Fix compilation with DEBUG_DNS_CACHE
...
Reported by cypherpunks.
Fix for #11761 ; bugfix on 0.2.3.13-alpha where we made ht.h stop using
_identifiers.
2014-05-06 10:18:34 -04:00
Nick Mathewson
8127f4db30
Use siphash on channel/circuit-id map too
...
Fixes ticket 11750.
2014-05-05 12:13:58 -04:00
Nick Mathewson
388478561d
Fix cross-compiling when 128-bit math compiles but won't link
...
Apparently, there exist cross-compiling environments for arm7 where
you can compile a 64x64->128 multiply, but not link it.
Fixes bug 11729; bugfix on 0.2.4.8-alpha. Patch from 'conradev'.
2014-05-05 11:44:02 -04:00
Nick Mathewson
5d496963b4
Don't start sandbox except for CMD_RUN_TOR
...
This was crashing on --verify-config in the debian startup script, if you
had sandboxing enabled. Fixes 11609; fix on 0.2.5.1-alpha.
2014-05-05 10:29:35 -04:00
Karsten Loesing
1289474dbd
Remove /tor/dbg-stability.txt URL.
...
The /tor/dbg-stability.txt URL was meant to help debug WFU and MTBF
calculations, but nobody was using it.
Fixes #11742 .
2014-05-05 11:21:35 +02:00
Nick Mathewson
7ad0cd209c
Merge remote-tracking branch 'public/bug9635'
2014-05-01 12:39:39 -04:00
Nick Mathewson
c472ac4fb8
Merge remote-tracking branch 'public/bug11233_diagnose'
2014-05-01 12:37:16 -04:00
Nick Mathewson
a2b59dba71
Merge branch 'bug11654_squashed'
2014-05-01 12:34:59 -04:00
George Kadianakis
a787575b7f
Fix a misuse of strlcpy() introduced by the #11156 patch.
2014-05-01 12:34:50 -04:00
Nick Mathewson
b51ce90777
Merge remote-tracking branch 'public/valgrind_tests'
2014-05-01 12:29:31 -04:00
Nick Mathewson
b6c8a14bf3
Merge remote-tracking branch 'public/bug4345a_024'
2014-05-01 12:13:07 -04:00
Nick Mathewson
1bbd3811c1
Merge remote-tracking branch 'public/bug10849_025'
...
Conflicts:
src/or/config.c
2014-05-01 11:51:22 -04:00
Nick Mathewson
01e2aae12a
Changes file for bug 11623 (fix was in 91ff10f6be
)
2014-05-01 11:33:17 -04:00
Nick Mathewson
9511522bd4
Merge remote-tracking branch 'origin/maint-0.2.4'
2014-04-30 20:26:55 -04:00
Nick Mathewson
efab3484e6
Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4
2014-04-30 20:25:15 -04:00
Nick Mathewson
8828794dc2
Merge remote-tracking branch 'public/bug10849_023_bruteforce' into maint-0.2.3
2014-04-30 20:23:22 -04:00
Nick Mathewson
f43fee8f8f
Merge remote-tracking branch 'public/bug11628'
2014-04-30 17:21:15 -04:00
Nick Mathewson
35699ef9f5
Drop the MaxMemInCellQueues lower limit down to 256 MB.
...
on #9686 , gmorehose reports that the 500 MB lower limit is too high
for raspberry pi users.
This is a backport of 647248729f
to 0.2.4.
Note that in 0.2.4, the option is called MaxMemInCellQueues.
2014-04-29 20:48:22 -04:00
Nick Mathewson
545e2119f2
Merge remote-tracking branch 'public/bug11605_024'
2014-04-29 14:33:39 -04:00
Nick Mathewson
b0e078d5af
Log info on ancient one-hop circuits in heartbeat
...
This is an attempt to diagnose 8387.
2014-04-29 14:02:12 -04:00
Nick Mathewson
acc7623420
changes file for last patch
2014-04-29 13:23:54 -04:00
Nick Mathewson
cae6388053
Put tor.service in the right place, and autoconfify it
...
This closes 8368.
2014-04-29 13:17:30 -04:00
Jamie Nguyen
a42e81eea1
Add contrib/tor.service for use with systemd
2014-04-29 13:17:29 -04:00
Nick Mathewson
0514bcd37c
Merge remote-tracking branch 'origin/maint-0.2.4'
2014-04-29 13:03:27 -04:00
Nick Mathewson
1d3ffc0ec9
Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4
2014-04-29 13:02:18 -04:00
Nick Mathewson
65575b0755
Stop leaking memory in error cases of md parsing
...
When clearing a list of tokens, it's important to do token_clear()
on them first, or else any keys they contain will leak. This didn't
leak memory on any of the successful microdescriptor parsing paths,
but it does leak on some failing paths when the failure happens
during tokenization.
Fixes bug 11618; bugfix on 0.2.2.6-alpha.
2014-04-29 13:00:00 -04:00
Nick Mathewson
3866792cd0
Changes file for valgrind fixes
2014-04-29 12:53:19 -04:00
Nick Mathewson
c0a73c8bf3
Changes file for bug 11632.
2014-04-29 11:58:43 -04:00
Nick Mathewson
cdc64f020c
Merge remote-tracking branch 'public/bug11608'
2014-04-28 15:52:57 -04:00
Nick Mathewson
6e8ae50938
changes file for 11634 documentation fixes
2014-04-28 12:40:23 -04:00
Nick Mathewson
4b519de5f9
Actually put ExtORPortCookieAuthFile into config.c
...
Fixes bug 11635; bugfix on 0.2.5.1-alpha.
2014-04-28 12:23:18 -04:00
Nick Mathewson
703ad69587
Deal with the aftermath of sorting contrib
...
This basically amounts to grepping for every file that mentioned
contrib and adjusting its references to refer to the right place.
2014-04-28 11:59:55 -04:00
Nick Mathewson
904dd436b5
New --disable-seccomp option to turn off support for seccomp.
...
Fixes 11628.
2014-04-28 11:11:50 -04:00
Nick Mathewson
f4be34f70d
Make the python test scripts work on python3
...
The python scripts invoked by 'make check' didn't work on python3
before. That was a problem on systems where 'python' is python3.
Fixes bug 11608; bugfix on 0.2.5.2-alpha.
2014-04-27 22:54:24 -04:00