tor/changes
Nick Mathewson 35d08e30d8 An attempt at bug3940 and making AllowDotExit 0 work with MapAddress
This time, I follow grarpamp's suggestion and move the check for
.exit+AllowDotExit 0 to the top of connection_ap_rewrite_and_attach,
before any rewriting occurs.  This way, .exit addresses are
forbidden as they arrive from a socks connection or a DNSPort
request, and not otherwise.

It _is_ a little more complicated than that, though.  We need to
treat any .exit addresses whose source is TrackHostExits as meaning
that we can retry without that exit.  We also need to treat any
.exit address that comes from an AutomapHostsOnResolve operation as
user-provided (and thus forbidden if AllowDotExits==0), so that
transitioning from AllowDotExits==1 to AllowDotExits==0 will
actually turn off automapped .exit addresses.
2012-05-11 17:16:29 -04:00
..
bug3940_redux An attempt at bug3940 and making AllowDotExit 0 work with MapAddress 2012-05-11 17:16:29 -04:00
bug4591 Only disable cert chaining on the first TLS handshake 2012-04-27 12:13:56 -04:00
bug4865 Add changes file for #4865. 2012-03-31 14:05:12 +02:00
bug5070 Changes file for bug 5070 2012-05-07 09:56:12 -04:00
bug5091 Fix tor_strtok_r_impl and test cases per bug #5091 2012-03-30 11:01:21 -04:00
bug5645 Reorder rend_mid_rendezvous() to do protocol violation checks on top. 2012-05-07 18:05:54 +03:00
bug5723 Add a missing ntohl to tell_controller_about_resolve_result 2012-05-01 17:21:47 -04:00
bug5760 Add changes/bug5760 2012-05-10 12:55:33 +05:30
bug5762 Fix bug 5762: detect missing accept4 that gives ENOSYS 2012-05-04 13:18:14 -04:00
bug5786_nocrash Detect out-of-bounds bwweightscale values early in the voting process 2012-05-07 12:47:13 -04:00
bug5786_nodups Check more thoroughly for dups when parsing networkstatus parameters 2012-05-07 12:40:05 -04:00
bug5786_range Handle out-of-range values in tor_parse_* integer functions 2012-05-07 12:25:59 -04:00
bug5828 Fix O(n^2) performance when parsing a big pile of extrainfos 2012-05-10 17:41:31 -04:00