Nick Mathewson 665baf5ed5 Consider the exit family when applying guard restrictions. ... When the new path selection logic went into place, I accidentally dropped the code that considered the _family_ of the exit node when deciding if the guard was usable, and we didn't catch that during code review. This patch makes the guard_restriction_t code consider the exit family as well, and adds some (hopefully redundant) checks for the case where we lack a node_t for a guard but we have a bridge_info_t for it. Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2016-006 and CVE-2017-0377.		2017-06-29 09:57:00 -04:00
..
.dummy	Add a .dummy file in the changes directory to stop git from removing it	2015-05-11 11:41:48 -04:00
bug20059	Avoid a double-mark bug when makring a pending circuit as "too old"	2017-03-15 11:05:37 -04:00
bug20509	dir auths reject 0.2.9.x for x<5, due to bug 20499	2017-05-22 08:31:39 -04:00
bug20711	Clarify the message logged when a remote relay is unexpectedly missing a port	2017-01-03 16:56:32 +11:00
bug20894	fixup! Don't atoi off the end of a buffer chunk.	2017-02-14 16:44:58 -05:00
bug21007_case2	Also allow C_MEASURE_TIMEOUT circuits to lack guard state.	2017-02-24 11:12:21 -05:00
bug21027	Change approach to preventing duplicate guards.	2017-02-28 08:16:33 -05:00
bug21116	test: Add missing socket errno in test_util.c	2017-02-08 09:00:48 -05:00
bug21278_extras	changes file for removing compare-by-subtraction pattern	2017-02-14 16:32:59 -05:00
bug21278_prevention	When examining descriptors as a dirserver, reject ones with bad versions	2017-02-15 07:46:34 -05:00
bug21369_check	Try to check for (and prevent) buffer size INT_MAX overflow better.	2017-02-27 10:01:27 -05:00
bug21415	Improve descriptor checks in the new guard algorithm.	2017-03-01 08:46:53 -05:00
bug21420	Revise the logic for picking the start time for link certs	2017-02-27 11:19:54 -05:00
bug21447	Rename make fuzz to make test-fuzz-corpora	2017-02-14 18:04:10 -05:00
bug21450	Limit version numbers to 0...INT32_MAX.	2017-02-15 07:57:34 -05:00
bug21471	hs: Avoid a strlen(NULL) if descriptor is not found in cache	2017-02-15 10:27:41 -05:00
bug21472	Small fixes to fuzzing documentation.	2017-02-24 10:57:58 -05:00
bug21492	Remove a redundant check in ..transition_affects_guards()	2017-02-17 11:47:25 -05:00
bug21553	hs: Fix bad use of sizeof() when encoding ESTABLISH_INTRO legacy cell	2017-02-24 11:36:36 -05:00
bug21562	Use bash in src/test/test-network.sh	2017-02-28 02:13:56 +11:00
bug21576	Fix a crash when a connection tries to open just after it has been unlinked	2017-03-02 11:10:30 +11:00
bug21581	Restore support for test-network.sh on BSD and other systems without bash	2017-03-01 11:40:54 +11:00
bug21594	Remove delay in hidden service introduction point checks	2017-03-07 08:04:57 -05:00
bug21596	Make hidden services always check for failed intro point connections	2017-03-02 15:34:45 +11:00
bug21682	Fix a memory leak in config_get_assigned_option()	2017-03-08 10:06:48 -05:00
bug21720	#21720: Update "directory server options" preamble in manpage	2017-03-14 11:25:54 -04:00
bug21771	Fix max sampled size logic when in bridge mode.	2017-03-27 15:39:26 +02:00
bug21799	Use update_approx_time() to run a test 100 days in the past.	2017-03-23 10:44:43 +01:00
bug21825	hs: Expose hs_service.c functions for unit tests	2017-04-04 09:41:14 -04:00
bug21894_029	Never read off the end of a buffer in base32_encode()	2017-04-07 10:47:16 -04:00
bug21943	Add a changes file for 21943.	2017-05-08 13:39:59 -04:00
bug22034	control: Wrong check on base16_decode return value	2017-04-24 09:20:13 -04:00
bug22246	Initialize the HS cache at startup	2017-05-15 13:49:29 -04:00
bug22252	Fix crash when starting with LearnCircuitBuildTimeout 0.	2017-05-16 11:20:12 -04:00
bug22370	Stop leaking keypin-rejected routerinfos on directory authorities	2017-05-25 00:09:40 -04:00
bug22400_01	Don't expand guard sample set unless consensus is "reasonably live"	2017-06-19 15:48:47 -04:00
bug22447	hs: Correctly validate v3 descriptor encrypted length	2017-05-30 10:27:42 -04:00
bug22460_case1	Fix ed25519 link certificate race on tls context rotation	2017-06-01 09:26:24 -04:00
bug22460_case2	Changes file for the x509 link certificate case of bug22460	2017-06-05 15:27:33 -04:00
bug22466_regenerate	Regenerate RSA->ed25519 identity crosscertificate as needed	2017-06-01 10:04:52 -04:00
bug22490	Fix undefined behavior in geoip_parse_entry().	2017-06-05 10:09:39 -04:00
bug22516	Permit the fchmod system call.	2017-06-16 14:03:02 -04:00
bug22737	Fix an errant memset() into the middle of a struct in cell_pack().	2017-06-27 10:47:20 -04:00
bug22753	Consider the exit family when applying guard restrictions.	2017-06-29 09:57:00 -04:00
feature21570	Log tor warnings during 'make test-network-all'	2017-02-28 02:01:37 +11:00
geoip-april2017	Update geoip and geoip6 to the April 4 2017 database.	2017-04-06 10:52:39 +02:00
geoip-february2017	Update geoip and geoip6 to the February 8 2017 database.	2017-02-12 15:56:31 +01:00
geoip-june2017	Update geoip and geoip6 to the June 8 2017 database.	2017-06-09 15:47:49 +02:00
geoip-march2017	Update geoip and geoip6 to the March 7 2017 database.	2017-03-08 09:41:35 +01:00
geoip-may2017	Update geoip and geoip6 to the May 2 2017 database.	2017-05-08 10:09:42 +02:00
prop275-minimal	Stop declining to download microdescs with future published times.	2017-03-06 15:37:01 -05:00
ticket20656	protover: Add new version for prop224 for HSIntro/HSDir	2017-02-14 10:51:18 -05:00
ticket21564	Update fallback directory mirrors in May 2017	2017-05-16 19:02:42 +10:00
trove-2017-001.2	Avoid integer underflow in tor_version_compare.	2017-02-14 16:10:27 -05:00
trove-2017-004	bump to 0.3.0.8	2017-06-08 09:24:28 -04:00
trove-2017-005	TROVE-2017-005: Fix assertion failure in connection_edge_process_relay_cell	2017-06-08 09:21:10 -04:00