Nick Mathewson f5acfe6723 Add a sandbox workaround for Glibc 2.33 ... This change permits the newfstatat() system call, and fixes issues 40382 (and 40381). This isn't a free change. From the commit: // Libc 2.33 uses this syscall to implement both fstat() and stat(). // // The trouble is that to implement fstat(fd, &st), it calls: // newfstatat(fs, "", &st, AT_EMPTY_PATH) // We can't detect this usage in particular, because "" is a pointer // we don't control. And we can't just look for AT_EMPTY_PATH, since // AT_EMPTY_PATH only has effect when the path string is empty. // // So our only solution seems to be allowing all fstatat calls, which // means that an attacker can stat() anything on the filesystem. That's // not a great solution, but I can't find a better one.		2021-05-07 12:12:11 -04:00
..
.dummy	Add a .dummy file in the changes directory to stop git from removing it	2015-05-11 11:41:48 -04:00
40241	Fix warnings in current debian-hardened CI.	2021-01-11 14:25:56 -05:00
40241_v2	Delete changes/40241_v2 as it breaks CI.	2021-02-05 19:18:13 +00:00
autoconf-2.70	Try making our configure.ac script build with AC 2.70.	2021-04-07 10:18:44 -04:00
bug24857	fix changes file	2021-01-21 13:39:40 -05:00
bug30187	Implement WIN32 tor_cond_wait using condition variables #30187	2020-11-01 03:10:25 +00:00
bug32666	Remove unnecessary non-fatal assertion.	2021-01-19 17:08:01 +00:00
bug32880	Use connection_or_change_state() in v3 handshaking state change	2020-11-12 12:06:34 -05:00
bug40015	Avoid asserts with flag	2020-10-27 14:47:42 -07:00
bug40017	Deliberately close OR connections if proxies leave extra data	2020-11-12 11:07:33 -05:00
bug40172	changes file for bug 40172.	2020-11-10 17:29:37 -05:00
bug40177	Fix another duplicate typedef.	2020-11-02 07:15:10 -05:00
bug40179_part1	Handle a change in the implementation of hashlib in Python 3.9	2020-11-05 09:34:36 -05:00
bug40179_part2	Make config/parse_tcp_proxy_line work in the presence of DNS hijacking	2020-11-05 09:47:32 -05:00
bug40187	Fake the current time when we're loading TEST_DESCRIPTORS.	2020-11-12 09:28:27 -05:00
bug40190	Socks5: handle truncated client requests correctly	2020-12-14 10:14:03 -05:00
bug40210	Fix Keccak undefined behavior on exotic platforms.	2020-12-17 13:49:17 +02:00
bug40238	Changes file for #40238.	2021-01-21 23:17:31 +02:00
bug40256_045	Fix documentation formatting for VirtualAddrNetworkIPv6	2021-03-08 11:17:24 -05:00
bug40281	Don't log supported-protover warnings if consensus is older than Tor.	2021-02-08 11:52:53 -05:00
bug40285_045	Don't warn about missing guard state if controller picked first hop	2021-03-08 13:42:43 -05:00
bug40287	relay: No longer test dirport reachability for authorities	2021-02-17 10:28:18 -05:00
bug40298	Make our configure.ac script use the portable = comparison	2021-02-17 12:36:23 -05:00
bug40315	Fix parsing bug in linux get_total_system_memory().	2021-03-03 14:52:15 -05:00
bug40316	Fix detection of point to insert signatures on a pending consensus.	2021-03-15 08:56:58 -04:00
bug40318	Fix glob processing on BSD systems. #40318	2021-03-26 01:56:07 +00:00
bug40380	Reindent a few lines to fix a GCC warning.	2021-05-07 10:39:20 -04:00
geoip-2021-03-12	Use the right ticket number.	2021-03-12 11:31:36 -05:00
geoip-2021-04-13	Update geoip files to match ipfire location db, 2021/04/13.	2021-04-13 10:35:50 -04:00
geoip-2021-05-07	Update geoip files to match ipfire location db, 2021/05/07.	2021-05-07 09:53:46 -04:00
ticket2667	exit: Deny re-entry into the network	2021-01-29 14:28:54 -05:00
ticket18888	Log a warning if Tor was built with any "risky" compile-time options	2020-10-28 11:34:30 -04:00
ticket22473	Remove "GETINFO network-status".	2020-10-28 11:48:23 -04:00
ticket25528	config: Bridge line with a transport must have a ClientTransportPlugin	2020-11-18 11:31:37 -05:00
ticket32178	Revise fix for bug 32178 (spaces at end of log msg).	2020-10-28 09:41:51 -04:00
ticket33624	m4: Change LIBS order of TOR_SEARCH_LIBRARY()	2021-01-13 09:52:10 -05:00
ticket40071	changes: Add file for #40071	2020-11-17 07:58:26 -05:00
ticket40106	config: Remove Bridge <-> ClientTransportPlugin validation	2021-01-20 15:56:19 -05:00
ticket40111	configure: Fix the --enable-static-tor switch	2020-12-08 09:14:49 -05:00
ticket40142	sendme: Turn log warning into debug	2020-11-17 13:23:34 -05:00
ticket40165	Changes file for #40165 (openssl deprecation warnings)	2020-10-28 10:34:22 -04:00
ticket40170	Fix a previously overstrict log message check.	2020-10-28 10:47:39 -04:00
ticket40174	configure: Check STAP_PROBEV macro when building with USDT tracing	2020-11-03 09:05:53 -05:00
ticket40183	port: Don't ignore ports of a different family	2020-11-13 08:38:22 -05:00
ticket40188	Tweak the documentation for approved-routers	2020-12-09 14:08:55 -05:00
ticket40195	config: Really ignore non ORPorts when removing duplicates	2020-11-17 09:40:16 -05:00
ticket40201	relay: Log address suggested by directory authorities	2020-12-21 14:41:52 -05:00
ticket40205	relay: Avoid log reachability test for bandwidth test circuit	2020-12-08 14:51:31 -05:00
ticket40208	relay: Allow RFC1918 addresses for non public relays	2021-02-10 13:24:21 -05:00
ticket40221_045	Remove DirCache=1 from list of supported versions.	2021-02-08 11:40:35 -05:00
ticket40226	relay: Report the entire content of a stats file	2020-12-21 13:18:20 -05:00
ticket40227	build: Add "make lsp" command	2021-01-21 16:06:31 -05:00
ticket40231	relay: Don't BUG() if we can't find authority descriptor	2021-01-14 10:02:03 -05:00
ticket40237	hs-v3: Require reasonably live consensus	2021-01-12 09:46:35 -05:00
ticket40243	Revert "IPv6 sybil: consider addresses in the same /64 to be equal."	2021-01-15 12:57:57 -05:00
ticket40245	log more during consensus voting process	2021-01-21 13:46:56 -05:00
ticket40254	relay: Don't trigger an address discovery without an ORPort	2021-01-27 09:36:17 -05:00
ticket40257	conn: Properly close MetricsPort socket on EOF	2021-02-08 14:26:45 -05:00
ticket40265	fallbackdir: Renegerate list with 200 relays	2021-04-13 15:15:58 -04:00
ticket40279	relay: Look at the omit IPv6 flag when publishing	2021-02-08 11:51:45 -05:00
ticket40286_minimal	Clarify new intended strategy with TROVE-2021-001	2021-03-15 08:53:36 -04:00
ticket40289	config: Do not compare for duplicate ORPorts with different addresses	2021-02-12 13:13:43 -05:00
ticket40295	metrics: Handle the connection finished flushing event	2021-02-17 09:54:05 -05:00
ticket40300	relay: Avoid a directory early fetch	2021-02-23 09:49:45 -05:00
ticket40309	Remove mallinfo() from codebase	2021-02-23 12:16:58 -05:00
ticket40334	hs: Remove hamrless BUG() that can happen	2021-03-10 09:12:29 -05:00
ticket40345	channel: Fix use after free in channel_do_open_actions()	2021-03-23 09:19:41 -04:00
ticket40356	hs: Fix memory leak in client cache	2021-04-21 11:37:46 -04:00
ticket40360	guard: Don't check bridge transport name when selecting eligible guards	2021-04-08 14:08:28 -04:00
ticket40369	Tweak changes/ticket40369 to be a bug.	2021-04-19 11:29:46 -04:00
ticket40373	Log warning when connecting to soon-to-be-deprecated v2 onions.	2021-05-07 08:44:36 -04:00
ticket40382	Add a sandbox workaround for Glibc 2.33	2021-05-07 12:12:11 -04:00