commit 413a442f57abb084499d1aa363aee1f8a0b53ad8
Author: Nick Mathewson <nickm(a)torproject.org>
Date: Thu May 29 11:21:17 2014 -0400
Start on the 0.2.5.5-alpha changelog.
I've copied the entries from changes/, labeled the ones that also
appeared in 0.2.4.22, sorted them lightly with a python script
(added to maint), and combined sections with the same name.
I didn't combine sections without a description (e.g. "Minor
bugfixes:"), since we'll probably add a description to those.
---
ChangeLog | 241 +++++++++++++++++++++++++++++++++++++++++-
changes/11622 | 3 -
changes/12032 | 4 -
changes/bug10849_023 | 6 --
changes/bug10849_025 | 6 --
changes/bug11233 | 4 -
changes/bug11469 | 6 --
changes/bug11476 | 5 -
changes/bug11477 | 4 -
changes/bug11605 | 2 -
changes/bug11608 | 5 -
changes/bug11609 | 5 -
changes/bug11618 | 5 -
changes/bug11623 | 3 -
changes/bug11628 | 4 -
changes/bug11632 | 5 -
changes/bug11633_part1 | 4 -
changes/bug11633_part2 | 4 -
changes/bug11634 | 6 --
changes/bug11635 | 6 --
changes/bug11648 | 8 --
changes/bug11654 | 4 -
changes/bug11729 | 5 -
changes/bug11737_diagnostic | 5 -
changes/bug11742 | 4 -
changes/bug11743 | 16 ---
changes/bug11750 | 5 -
changes/bug11761 | 4 -
changes/bug11805 | 5 -
changes/bug11946 | 5 -
changes/bug11965 | 6 --
changes/bug12028 | 5 -
changes/bug12032 | 4 -
changes/bug12041 | 5 -
changes/bug12043 | 4 -
changes/bug12064_part1 | 4 -
changes/bug12064_part2 | 5 -
changes/bug12115 | 3 -
changes/bug12139 | 4 -
changes/bug4345 | 10 --
changes/bug8368 | 4 -
changes/bug9635 | 3 -
changes/bug9781 | 5 -
changes/diagnose_8387 | 4 -
changes/md_leak_bug | 5 -
changes/msvc_fix | 3 -
changes/stats_not_status | 4 -
changes/ticket8368 | 5 -
changes/ticket8966 | 7 --
scripts/maint/sortChanges.py | 40 +++++++
50 files changed, 280 insertions(+), 239 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index 9873696..72d5f97 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,243 @@
-Changes in version 0.2.5.5-alpha - 2014-05-??
+Changes in version 0.2.5.5-alpha - 2014-06-??
+ Write a blurb here.
+
+ o Major bugfixes (security, OOM, new since 0.2.5.4-alpha, also in 0.2.4.22):
+ - Fix a memory leak that could occur if a microdescriptor parse
+ fails during the tokenizing step. This bug could enable a memory
+ exhaustion attack by directory servers. Fixes bug 11649; bugfix
+ on 0.2.2.6-alpha.
+
+ o Major bugfixes (relay):
+ - When uploading to the directory authorities, use a direct dirport
+ connection if we are a uploading an ordinary, non-anonymous directory
+ object. Previously, relays would used tunnel connections under a
+ fairly wide variety of circumstances. Fixes bug 11469; bugfix on
+ 0.2.4.3-alpha.
+
+ o Major security fixes (directory authorities):
+ - Directory authorities now include a digest of each relay's
+ identity key as a part of its microdescriptor.
+
+ This is a workaround for bug #11743 (reported by "cypherpunks"),
+ where Tor clients do not
+ support receiving multiple microdescriptors with the same SHA256
+ digest in the same consensus. When clients receive a consensus
+ like this, they only use one of the relays. Without this fix, a
+ hostile relay could selectively disable some client use of target
+ relays by constucting a router descriptor with a different
+ identity and the same microdescriptor parameters and getting the
+ authorities to list it in a microdescriptor consensus. This fix
+ prevents an attacker from causing a microdescriptor collision,
+ because the router's identity is not forgeable.
+
+ o Minor features (diagnostic):
+ - When logging a warning because of bug #7164, additionally check the
+ hash table for consistency (as proposed on ticket #11737). This may
+ help diagnose bug #7164.
+ - When we log a heartbeat, log how many one-hop circuits we have that
+ are at least 30 minutes old, and log status information about a
+ few of them. This is an attempt to track down bug 8387.
+
+ o Minor features (security):
+ - Apply the secure SipHash-2-4 function to the hash table mapping
+ circuit IDs and channels to circuits. We missed this one when we
+ were converting all the other hash functions to use SipHash back
+ in 0.2.5.3-alpha. Resolves ticket 11750.
+
+ o Minor features:
+ - Add a systemd service file (tor.service) that can be installed by
+ Linux distributions that make use of the systemd init daemon.
+ Fixes bug 8368.
+
+ o Minor features:
+ - Give more specific warnings when we notice at the client side that
+ an onion handshake has failed. Fixes ticket 9635.
+
+ o Minor features:
+ - The configure script has a --disable-seccomp option to turn off
+ support for libseccomp on systems that have it, in case it (or
+ Tor's use of it) is broken. Resolves ticket 11628.
+
+ o Minor features:
+ - When we encounter an unexpected CR in text that we're trying to
+ write to a file on Windows, log the name of the file. Should help
+ diagnosing bug 11233.
+
+ o Minor bugfixes (configuration, security, new since 0.2.5.4-alpha, also in 0.2.4.22):
+ - When running a hidden service, do not allow TunneledDirConns 0;
+ this will keep the hidden service from running, and also
+ make it publish its descriptors directly over HTTP. Fixes bug 10849;
+ bugfix on 0.2.1.1-alpha.
+
+ o Minor bugfixes (compilation):
+ - Fix compilation of test_status.c when building with MVSC.
+ Bugfix on 0.2.5.4-alpha. Patch from Gisle Vanem.
+ - Resolve GCC complaints on OpenBSD about discarding constness in
+ TO_{ORIGIN,OR}_CIRCUIT functions. Fixes part of bug 11633; bugfix on
+ 0.1.1.23. Patch from Dana Koch.
+ - Resolve clang complaints on OpenBSD with -Wshorten-64-to-32 due to
+ treatment of long and time_t as comparable types. Fixes part of bug 11633.
+ Patch from Dana Koch.
+
+ o Minor bugfixes (build):
+ - When deciding whether to build the 64-bit curve25519 implementation,
+ detect platforms where we can compile 128-bit arithmetic but cannot
+ link it. Fixes bug 11729; bugfix on 0.2.4.8-alpha. Patch
+ from "conradev".
+
+ o Minor bugfixes (Directory server):
+ - When sending a compressed set of descriptors or microdescriptors,
+ make sure to finalize the zlib stream. Previously, we would write
+ all the compressed data, but if the last descriptor we wanted to
+ send was missing or too old, we would not mark the stream as
+ finished. This caused problems for decompression tools. Fixes bug
+ 11648; bugfix on 0.1.1.23.
+
+ o Minor bugfixes (dmalloc):
+ - Fix compilation with dmalloc. Fixes bug 11605; bugfix on 0.2.4.10-alpha.
+
+ o Minor bugfixes (documentation):
+ - Correct the documenation so that it lists the correct directories
+ for the stats files. (They are in a subdirectory called "stats",
+ not "status".)
+
+ o Minor bugfixes (linux seccomp sandbox)
+ - Make the seccomp sandbox code compile with ARM linux. Fixes bug
+ 11622; bugfix on 0.2.5.1-alpha.
+ - Avoid crashing when re-opening listener ports with the seccomp
+ sandbox active. Fixes bug 12115; bugfix on 0.2.5.1-alpha.
+ - Avoid crashing with the seccomp sandbox enabled along with
+ ConstrainedSockets. Fixes bug 12139; bugfix on 0.2.5.1-alpha.
+ - When we receive a SIGHUP with the sandbox enabled, correctly
+ support rotating our log files. Fixes bug 12032; bugfix on
+ 0.2.5.1-alpha.
+ - Avoid crash when running with sandboxing enabled and
+ DirReqStatistics not disabled. Fixes bug 12035; bugfix on
+ 0.2.5.1-alpha.
+ - Fix a "BUG" warning when trying to write bridge-stats files with
+ the Linux syscall sandbox filter enabled. Fixes bug 12041;
+ bugfix on 0.2.5.1-alpha.
+ - Prevent the sandbox from crashing on startup when run with the
+ --enable-expensive-hardening configuration option. Fixes bug
+ 11477; bugfix on 0.2.5.4-alpha.
+ - When running with DirPortFrontPage and Sandbox both enabled, reload
+ the DirPortFrontPage correctly when restarting. Fixes bug 12028;
+ bugfix on 0.2.5.1-alpha.
+ - Don't try to enable the sandbox when using the Tor binary to
+ check its configuration, hash a passphrase, or so on. Doing
+ so was crashing on startup for some users. Fixes bug 11609;
+ bugfix on 0.2.5.1-alpha.
+ - Avoid warnings when running with sandboxing and node statistics
+ enabled at the same time.
+ Fixes part of 12064; bugfix on 0.2.5.1-alpha. Patch from Michael Wolf.
+ - Avoid warnings when running with sandboxing enabled at the same
+ time as cookie authentication, hidden services or directory
+ authority voting. Fixes part of 12064; bugfix on 0.2.5.1-alpha.
+ - Do not allow options which would require us to call exec to be
+ enabled along with the seccomp2 sandbox: they will inevitably
+ crash. Fix for bug 12043; bugfix on 0.2.5.1-alpha.
+ - Handle failures in getpwnam()/getpwuid() when running with the
+ User option set and the Linux syscall sandbox enabled. Fixes bug
+ 11946; bugfix on 0.2.5.1-alpha.
+
+ o Minor bugfixes (pluggable transports):
+ - Enable the ExtORPortCookieAuthFile option, to allow changing the
+ default location of the authentication token for the extended OR Port
+ as used by sever-side pluggable transports. We had implemented this
+ option before, but the code to make it settable had been omitted.
+ Fixes bug 11635; bugfix on 0.2.5.1-alpha.
+
+ o Minor bugfixes (testing):
+ - The Python parts of the test scripts now work on Python 3 as well
+ as Python 2, so systems where '/usr/bin/python' is Python 3 will
+ no longer have the tests break. Fixes bug 11608; bugfix on
+ 0.2.5.2-alpha.
+ - When looking for versions of python that we could run the tests
+ with, check for "python2.7" and "python3.3"; previously we were
+ only looking for "python", "python2", and "python3". Patch from
+ Dana Koch. Fixes bug 11632; bugfix on 0.2.5.2-alpha.
+
+ o Minor bugfixes (tor-fw-helper):
+ - Give a correct log message when tor-fw-helper fails to launch.
+ (Previously, we would say something like "tor-fw-helper sent us a
+ string we could not parse".) Fixes bug 9781; bugfix on 0.2.4.2-alpha.
+
+ o Minor bugfixes:
+ - Avoid another 60-second delay when starting Tor in a
+ pluggable-transport-using configuration when we already have
+ cached descriptors for our bridges. Fixes bug 11965; bugfix on
+ 0.2.3.6-alpha.
+
+ o Minor bugfixes:
+ - Check return code on spawn_func() in cpuworker code, so that we don't
+ think we've spawned a nonworking cpuworker and write junk to it
+ forever. Fix related to bug 4345; bugfix on all released Tor versions.
+ Found by "skruffy".
+ - Use a pthread_attr to make sure that spawn_func() cannot return
+ an error while at the same time launching a thread. Fix related
+ to bug 4345; bugfix on all released Tor versions. Reported by
+ "cypherpunks".
+
+ o Minor bugfixes:
+ - Correctly detect the total available system memory. We tried to do this
+ in 0.2.5.4-alpha, but the code was set up to always return an error
+ value, even on success.
+ Fixes bug 11805; bugfix on 0.2.5.4-alpha.
+
+ o Minor bugfixes:
+ - Fix a broken log message about delayed directory fetches that
+ was caused by a misuse of strlcpy(). Fixes bug 11654; bugfix on
+ 0.2.5.3-alpha.
+
+ o Minor bugfixes:
+ - Fix all valgrind warnings produced by the unit tests. There were
+ over a thousand memory leak warnings previously, mostly produced
+ by forgetting to free things in the unit test code. Fixes bug
+ 11618, bugfixes on many versions of Tor.
+
+ o Minor bugfixes:
+ - Fix compilation when DNS_CACHE_DEBUG is enabled. Fixes bug 11761;
+ bugfix on 0.2.3.13-alpha. Found by "cypherpunks".
+
+ o Minor bugfixes:
+ - Make Tor compile correctly with --disable-buf-freelists.
+ Fixes bug 11623; bugfix on 0.2.5.3-alpha.
+
+ o Bugfixes:
+ - Add configure options controlling allocator tricks like mempools and
+ freelists, and turn them off by default; on most platforms malloc is
+ reasonable enough for this not to be necessary, and a similar feature
+ in OpenSSL exacerbated Heartbleed. Fixes bug #11476.
+
+ o Distribution:
+ - Include a tor.service file in contrib.dist for use with
+ systemd. Some distributions will be able to use this file unmodified;
+ others will need to tweak it, or write their own. Patch from
+ Jamie Nguyen; resolves ticket 8368.
+
+ o Documentation:
+ - Clean up several option names in the manpage to match their real
+ names, add the missing documentation for a couple of testing and
+ directory authority options, remove the documentation for a
+ V2-directory fetching option that no longer exists. Resolves
+ ticket 11634.
+
+ o Package cleanup:
+ - The contrib directory has been sorted and tidy. Before, it was an
+ unsorted dumping ground for useful and not-so-useful things. Now,
+ it has been divided based on functionality, and the items which
+ seemed to be nonfunctional or useless have been removed. Resolves
+ ticket 8966; based on patches from "rl1987".
+
+ o Removed code:
+ - Remove /tor/dbg-stability.txt URL that was meant to help debug WFU
+ and MTBF calculations, but that nobody was using. Fixes #11742.
+ - The TunnelDirConns and PreferTunnelledDirConns options no longer
+ exist; tunneled directory connections have been available since
+ 0.1.2.5-alpha, and turning them off is not a good idea. This is a
+ brute-force fix for 10849, where "TunnelDirConns 0" would break
+ hidden services.
+
Changes in version 0.2.4.22 - 2014-05-16
diff --git a/changes/11622 b/changes/11622
deleted file mode 100644
index 9e4be41..0000000
--- a/changes/11622
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (linux seccomp sandbox)
- - Make the seccomp sandbox code compile with ARM linux. Fixes bug
- 11622; bugfix on 0.2.5.1-alpha.
\ No newline at end of file
diff --git a/changes/12032 b/changes/12032
deleted file mode 100644
index c51ddb8..0000000
--- a/changes/12032
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (linux syscall sandbox):
- - Avoid crash when running with sandboxing enabled and
- DirReqStatistics not disabled. Fixes bug 12035; bugfix on
- 0.2.5.1-alpha.
\ No newline at end of file
diff --git a/changes/bug10849_023 b/changes/bug10849_023
deleted file mode 100644
index 480dea3..0000000
--- a/changes/bug10849_023
+++ /dev/null
@@ -1,6 +0,0 @@
- o Major bugfixes:
- - When running a hidden service, do not allow TunneledDirConns 0;
- this will keep the hidden service from running, and also
- make it publish its descriptors directly over HTTP. Fixes bug 10849;
- bugfix on 0.2.1.1-alpha.
-
diff --git a/changes/bug10849_025 b/changes/bug10849_025
deleted file mode 100644
index 1a3b71b..0000000
--- a/changes/bug10849_025
+++ /dev/null
@@ -1,6 +0,0 @@
- o Removed code:
- - The TunnelDirConns and PreferTunnelledDirConns options no longer
- exist; tunneled directory connections have been available since
- 0.1.2.5-alpha, and turning them off is not a good idea. This is a
- brute-force fix for 10849, where "TunnelDirConns 0" would break
- hidden services.
diff --git a/changes/bug11233 b/changes/bug11233
deleted file mode 100644
index 1161b6d..0000000
--- a/changes/bug11233
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features:
- - When we encounter an unexpected CR in text that we're trying to
- write to a file on Windows, log the name of the file. Should help
- diagnosing bug 11233.
diff --git a/changes/bug11469 b/changes/bug11469
deleted file mode 100644
index 8517d38..0000000
--- a/changes/bug11469
+++ /dev/null
@@ -1,6 +0,0 @@
- o Major bugfixes (relay):
- - When uploading to the directory authorities, use a direct dirport
- connection if we are a uploading an ordinary, non-anonymous directory
- object. Previously, relays would used tunnel connections under a
- fairly wide variety of circumstances. Fixes bug 11469; bugfix on
- 0.2.4.3-alpha.
diff --git a/changes/bug11476 b/changes/bug11476
deleted file mode 100644
index cb3d217..0000000
--- a/changes/bug11476
+++ /dev/null
@@ -1,5 +0,0 @@
- o Bugfixes:
- - Add configure options controlling allocator tricks like mempools and
- freelists, and turn them off by default; on most platforms malloc is
- reasonable enough for this not to be necessary, and a similar feature
- in OpenSSL exacerbated Heartbleed. Fixes bug #11476.
diff --git a/changes/bug11477 b/changes/bug11477
deleted file mode 100644
index 21dd345..0000000
--- a/changes/bug11477
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (linux syscall sandbox):
- - Prevent the sandbox from crashing on startup when run with the
- --enable-expensive-hardening configuration option. Fixes bug
- 11477; bugfix on 0.2.5.4-alpha.
diff --git a/changes/bug11605 b/changes/bug11605
deleted file mode 100644
index 973ac6d..0000000
--- a/changes/bug11605
+++ /dev/null
@@ -1,2 +0,0 @@
- o Minor bugfixes (dmalloc):
- - Fix compilation with dmalloc. Fixes bug 11605; bugfix on 0.2.4.10-alpha.
diff --git a/changes/bug11608 b/changes/bug11608
deleted file mode 100644
index f34c9eb..0000000
--- a/changes/bug11608
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (testing):
- - The Python parts of the test scripts now work on Python 3 as well
- as Python 2, so systems where '/usr/bin/python' is Python 3 will
- no longer have the tests break. Fixes bug 11608; bugfix on
- 0.2.5.2-alpha.
diff --git a/changes/bug11609 b/changes/bug11609
deleted file mode 100644
index 2a11613..0000000
--- a/changes/bug11609
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (sandbox):
- - Don't try to enable the sandbox when using the Tor binary to
- check its configuration, hash a passphrase, or so on. Doing
- so was crashing on startup for some users. Fixes bug 11609;
- bugfix on 0.2.5.1-alpha.
diff --git a/changes/bug11618 b/changes/bug11618
deleted file mode 100644
index e650d55..0000000
--- a/changes/bug11618
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes:
- - Fix all valgrind warnings produced by the unit tests. There were
- over a thousand memory leak warnings previously, mostly produced
- by forgetting to free things in the unit test code. Fixes bug
- 11618, bugfixes on many versions of Tor.
diff --git a/changes/bug11623 b/changes/bug11623
deleted file mode 100644
index 58ff06d..0000000
--- a/changes/bug11623
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes:
- - Make Tor compile correctly with --disable-buf-freelists.
- Fixes bug 11623; bugfix on 0.2.5.3-alpha.
diff --git a/changes/bug11628 b/changes/bug11628
deleted file mode 100644
index b93e1f4..0000000
--- a/changes/bug11628
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features:
- - The configure script has a --disable-seccomp option to turn off
- support for libseccomp on systems that have it, in case it (or
- Tor's use of it) is broken. Resolves ticket 11628.
diff --git a/changes/bug11632 b/changes/bug11632
deleted file mode 100644
index 0dc7f8f..0000000
--- a/changes/bug11632
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (testing):
- - When looking for versions of python that we could run the tests
- with, check for "python2.7" and "python3.3"; previously we were
- only looking for "python", "python2", and "python3". Patch from
- Dana Koch. Fixes bug 11632; bugfix on 0.2.5.2-alpha.
diff --git a/changes/bug11633_part1 b/changes/bug11633_part1
deleted file mode 100644
index fb281bd..0000000
--- a/changes/bug11633_part1
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (build):
- - Resolve GCC complaints on OpenBSD about discarding constness in
- TO_{ORIGIN,OR}_CIRCUIT functions. Fixes part of bug 11633; bugfix on
- 0.1.1.23. Patch from Dana Koch.
diff --git a/changes/bug11633_part2 b/changes/bug11633_part2
deleted file mode 100644
index 574660d..0000000
--- a/changes/bug11633_part2
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (build):
- - Resolve clang complaints on OpenBSD with -Wshorten-64-to-32 due to
- treatment of long and time_t as comparable types. Fixes part of bug 11633.
- Patch from Dana Koch.
diff --git a/changes/bug11634 b/changes/bug11634
deleted file mode 100644
index 2a52b3fcf..0000000
--- a/changes/bug11634
+++ /dev/null
@@ -1,6 +0,0 @@
- o Documentation:
- - Clean up several option names in the manpage to match their real
- names, add the missing documentation for a couple of testing and
- directory authority options, remove the documentation for a
- V2-directory fetching option that no longer exists. Resolves
- ticket 11634.
diff --git a/changes/bug11635 b/changes/bug11635
deleted file mode 100644
index bb5ecee..0000000
--- a/changes/bug11635
+++ /dev/null
@@ -1,6 +0,0 @@
- o Minor bugfixes (pluggable transports):
- - Enable the ExtORPortCookieAuthFile option, to allow changing the
- default location of the authentication token for the extended OR Port
- as used by sever-side pluggable transports. We had implemented this
- option before, but the code to make it settable had been omitted.
- Fixes bug 11635; bugfix on 0.2.5.1-alpha.
diff --git a/changes/bug11648 b/changes/bug11648
deleted file mode 100644
index 0e89274..0000000
--- a/changes/bug11648
+++ /dev/null
@@ -1,8 +0,0 @@
- o Minor bugfixes (Directory server):
- - When sending a compressed set of descriptors or microdescriptors,
- make sure to finalize the zlib stream. Previously, we would write
- all the compressed data, but if the last descriptor we wanted to
- send was missing or too old, we would not mark the stream as
- finished. This caused problems for decompression tools. Fixes bug
- 11648; bugfix on 0.1.1.23.
-
diff --git a/changes/bug11654 b/changes/bug11654
deleted file mode 100644
index 97c70b2..0000000
--- a/changes/bug11654
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes:
- - Fix a broken log message about delayed directory fetches that
- was caused by a misuse of strlcpy(). Fixes bug 11654; bugfix on
- 0.2.5.3-alpha.
diff --git a/changes/bug11729 b/changes/bug11729
deleted file mode 100644
index 93751cf..0000000
--- a/changes/bug11729
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (build):
- - When deciding whether to build the 64-bit curve25519 implementation,
- detect platforms where we can compile 128-bit arithmetic but cannot
- link it. Fixes bug 11729; bugfix on 0.2.4.8-alpha. Patch
- from "conradev".
diff --git a/changes/bug11737_diagnostic b/changes/bug11737_diagnostic
deleted file mode 100644
index 62e7a4a..0000000
--- a/changes/bug11737_diagnostic
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor features (diagnostic):
- - When logging a warning because of bug #7164, additionally check the
- hash table for consistency (as proposed on ticket #11737). This may
- help diagnose bug #7164.
-
diff --git a/changes/bug11742 b/changes/bug11742
deleted file mode 100644
index 0004871..0000000
--- a/changes/bug11742
+++ /dev/null
@@ -1,4 +0,0 @@
- o Removed code:
- - Remove /tor/dbg-stability.txt URL that was meant to help debug WFU
- and MTBF calculations, but that nobody was using. Fixes #11742.
-
diff --git a/changes/bug11743 b/changes/bug11743
deleted file mode 100644
index 8435179..0000000
--- a/changes/bug11743
+++ /dev/null
@@ -1,16 +0,0 @@
- o Major security fixes (directory authorities):
-
- - Directory authorities now include a digest of each relay's
- identity key as a part of its microdescriptor.
-
- This is a workaround for bug #11743 (reported by "cypherpunks"),
- where Tor clients do not
- support receiving multiple microdescriptors with the same SHA256
- digest in the same consensus. When clients receive a consensus
- like this, they only use one of the relays. Without this fix, a
- hostile relay could selectively disable some client use of target
- relays by constucting a router descriptor with a different
- identity and the same microdescriptor parameters and getting the
- authorities to list it in a microdescriptor consensus. This fix
- prevents an attacker from causing a microdescriptor collision,
- because the router's identity is not forgeable.
diff --git a/changes/bug11750 b/changes/bug11750
deleted file mode 100644
index f779ac8..0000000
--- a/changes/bug11750
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor features (security):
- - Apply the secure SipHash-2-4 function to the hash table mapping
- circuit IDs and channels to circuits. We missed this one when we
- were converting all the other hash functions to use SipHash back
- in 0.2.5.3-alpha. Resolves ticket 11750.
diff --git a/changes/bug11761 b/changes/bug11761
deleted file mode 100644
index ffcae5a..0000000
--- a/changes/bug11761
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes:
- - Fix compilation when DNS_CACHE_DEBUG is enabled. Fixes bug 11761;
- bugfix on 0.2.3.13-alpha. Found by "cypherpunks".
-
diff --git a/changes/bug11805 b/changes/bug11805
deleted file mode 100644
index 02a5538..0000000
--- a/changes/bug11805
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes:
- - Correctly detect the total available system memory. We tried to do this
- in 0.2.5.4-alpha, but the code was set up to always return an error
- value, even on success.
- Fixes bug 11805; bugfix on 0.2.5.4-alpha.
diff --git a/changes/bug11946 b/changes/bug11946
deleted file mode 100644
index 9ea4831..0000000
--- a/changes/bug11946
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (sandbox):
-
- - Handle failures in getpwnam()/getpwuid() when running with the
- User option set and the Linux syscall sandbox enabled. Fixes bug
- 11946; bugfix on 0.2.5.1-alpha.
diff --git a/changes/bug11965 b/changes/bug11965
deleted file mode 100644
index a3bfd87..0000000
--- a/changes/bug11965
+++ /dev/null
@@ -1,6 +0,0 @@
- o Minor bugfixes:
-
- - Avoid another 60-second delay when starting Tor in a
- pluggable-transport-using configuration when we already have
- cached descriptors for our bridges. Fixes bug 11965; bugfix on
- 0.2.3.6-alpha.
diff --git a/changes/bug12028 b/changes/bug12028
deleted file mode 100644
index f88d4e5..0000000
--- a/changes/bug12028
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (linux syscall sandbox):
- - When running with DirPortFrontPage and Sandbox both enabled, reload
- the DirPortFrontPage correctly when restarting. Fixes bug 12028;
- bugfix on 0.2.5.1-alpha.
-
diff --git a/changes/bug12032 b/changes/bug12032
deleted file mode 100644
index 44fc6c7..0000000
--- a/changes/bug12032
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (Linux syscall sandbox):
- - When we receive a SIGHUP with the sandbox enabled, correctly
- support rotating our log files. Fixes bug 12032; bugfix on
- 0.2.5.1-alpha.
diff --git a/changes/bug12041 b/changes/bug12041
deleted file mode 100644
index ddbc7de..0000000
--- a/changes/bug12041
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (linux syscall sandbox):
- - Fix a "BUG" warning when trying to write bridge-stats files with
- the Linux syscall sandbox filter enabled. Fixes bug 12041;
- bugfix on 0.2.5.1-alpha.
-
diff --git a/changes/bug12043 b/changes/bug12043
deleted file mode 100644
index 4ec735c..0000000
--- a/changes/bug12043
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (linux syscall sandboxing):
- - Do not allow options which would require us to call exec to be
- enabled along with the seccomp2 sandbox: they will inevitably
- crash. Fix for bug 12043; bugfix on 0.2.5.1-alpha.
diff --git a/changes/bug12064_part1 b/changes/bug12064_part1
deleted file mode 100644
index b40b64a..0000000
--- a/changes/bug12064_part1
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (seccomp sandbox):
- - Avoid warnings when running with sandboxing and node statistics
- enabled at the same time.
- Fixes part of 12064; bugfix on 0.2.5.1-alpha. Patch from Michael Wolf.
diff --git a/changes/bug12064_part2 b/changes/bug12064_part2
deleted file mode 100644
index 4fa86a6..0000000
--- a/changes/bug12064_part2
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (seccomp sandbox):
- - Avoid warnings when running with sandboxing enabled at the same
- time as cookie authentication, hidden services or directory
- authority voting. Fixes part of 12064; bugfix on 0.2.5.1-alpha.
-
diff --git a/changes/bug12115 b/changes/bug12115
deleted file mode 100644
index 7b84649..0000000
--- a/changes/bug12115
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (linux seccomp sandbox):
- - Avoid crashing when re-opening listener ports with the seccomp
- sandbox active. Fixes bug 12115; bugfix on 0.2.5.1-alpha.
diff --git a/changes/bug12139 b/changes/bug12139
deleted file mode 100644
index 8d31dab..0000000
--- a/changes/bug12139
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (linux seccomp sandbox):
- - Avoid crashing with the seccomp sandbox enabled along with
- ConstrainedSockets. Fixes bug 12139; bugfix on 0.2.5.1-alpha.
-
diff --git a/changes/bug4345 b/changes/bug4345
deleted file mode 100644
index 5e650fc..0000000
--- a/changes/bug4345
+++ /dev/null
@@ -1,10 +0,0 @@
- o Minor bugfixes:
- - Check return code on spawn_func() in cpuworker code, so that we don't
- think we've spawned a nonworking cpuworker and write junk to it
- forever. Fix related to bug 4345; bugfix on all released Tor versions.
- Found by "skruffy".
-
- - Use a pthread_attr to make sure that spawn_func() cannot return
- an error while at the same time launching a thread. Fix related
- to bug 4345; bugfix on all released Tor versions. Reported by
- "cypherpunks".
diff --git a/changes/bug8368 b/changes/bug8368
deleted file mode 100644
index fa3991c..0000000
--- a/changes/bug8368
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features:
- - Add a systemd service file (tor.service) that can be installed by
- Linux distributions that make use of the systemd init daemon.
- Fixes bug 8368.
diff --git a/changes/bug9635 b/changes/bug9635
deleted file mode 100644
index 042da7b..0000000
--- a/changes/bug9635
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor features:
- - Give more specific warnings when we notice at the client side that
- an onion handshake has failed. Fixes ticket 9635.
diff --git a/changes/bug9781 b/changes/bug9781
deleted file mode 100644
index 0a3c557..0000000
--- a/changes/bug9781
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (tor-fw-helper):
-
- - Give a correct log message when tor-fw-helper fails to launch.
- (Previously, we would say something like "tor-fw-helper sent us a
- string we could not parse".) Fixes bug 9781; bugfix on 0.2.4.2-alpha.
diff --git a/changes/diagnose_8387 b/changes/diagnose_8387
deleted file mode 100644
index 3dfc845..0000000
--- a/changes/diagnose_8387
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (diagnostic):
- - When we log a heartbeat, log how many one-hop circuits we have that
- are at least 30 minutes old, and log status information about a
- few of them. This is an attempt to track down bug 8387.
diff --git a/changes/md_leak_bug b/changes/md_leak_bug
deleted file mode 100644
index 26270aa..0000000
--- a/changes/md_leak_bug
+++ /dev/null
@@ -1,5 +0,0 @@
- o Major bugfixes (security, OOM)
- - Fix a memory leak that could occur if a microdescriptor parse
- fails during the tokenizing step. This could enable a memory
- exhaustion attack by directory servers. Fixes bug #11649; bugfix
- on 0.2.2.6-alpha.
diff --git a/changes/msvc_fix b/changes/msvc_fix
deleted file mode 100644
index 6d4531b..0000000
--- a/changes/msvc_fix
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (build):
- - Fix compilation of test_status.c when building with MVSC.
- Bugfix on 0.2.5.4-alpha. Patch from Gisle Vanem.
diff --git a/changes/stats_not_status b/changes/stats_not_status
deleted file mode 100644
index e2bc37e..0000000
--- a/changes/stats_not_status
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (documentation):
- - Correct the documenation so that it lists the correct directories
- for the stats files. (They are in a subdirectory called "stats",
- not "status".)
diff --git a/changes/ticket8368 b/changes/ticket8368
deleted file mode 100644
index 206a766..0000000
--- a/changes/ticket8368
+++ /dev/null
@@ -1,5 +0,0 @@
- o Distribution:
- - Include a tor.service file in contrib.dist for use with
- systemd. Some distributions will be able to use this file unmodified;
- others will need to tweak it, or write their own. Patch from
- Jamie Nguyen; resolves ticket 8368.
diff --git a/changes/ticket8966 b/changes/ticket8966
deleted file mode 100644
index d6967a4..0000000
--- a/changes/ticket8966
+++ /dev/null
@@ -1,7 +0,0 @@
- o Package cleanup:
- - The contrib directory has been sorted and tidy. Before, it was an
- unsorted dumping ground for useful and not-so-useful things. Now,
- it has been divided based on functionality, and the items which
- seemed to be nonfunctional or useless have been removed. Resolves
- ticket 8966; based on patches from "rl1987".
-
diff --git a/scripts/maint/sortChanges.py b/scripts/maint/sortChanges.py
new file mode 100755
index 0000000..f70490b
--- /dev/null
+++ b/scripts/maint/sortChanges.py
@@ -0,0 +1,40 @@
+#!/usr/bin/python
+
+import re
+import sys
+
+def fetch(fn):
+ with open(fn) as f:
+ s = f.read()
+ s = "%s\n" % s.rstrip()
+ return s
+
+def score(s):
+ m = re.match(r'^ +o (.*)', s)
+ if not m:
+ print >>sys.stderr, "Can't score %r"%s
+ lw = m.group(1).lower()
+ if lw.startswith("major feature"):
+ score = 0
+ elif lw.startswith("major bug"):
+ score = 1
+ elif lw.startswith("major"):
+ score = 2
+ elif lw.startswith("minor feature"):
+ score = 10
+ elif lw.startswith("minor bug"):
+ score = 11
+ elif lw.startswith("minor"):
+ score = 12
+ else:
+ score = 100
+
+ return (score, lw, s)
+
+
+changes = [ score(fetch(fn)) for fn in sys.argv[1:] if not fn.endswith('~') ]
+
+changes.sort()
+
+for _, _, s in changes:
+ print s
