September 2014 - tor-commits - lists.torproject.org

[tor/master] Fix configure script build with autoconf < 2.63
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit 883dc335e9ea3e0d944ce5cb3c6f140a6cad6ff1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 13 12:01:58 2014 -0400 Fix configure script build with autoconf < 2.63 We added some AS_VAR_IF-based checks to detect whether we have managed to compile (but not link) with stack-protector. On autoconf before 2.63, we don't have AS_VAR_IF, so we just have to let the user get a compile error rather than a helpful "find libssp" error. Fixes bug 12693; bugfix on 0.2.5.2-alpha (commit 21ac292820da578) --- changes/bug12693 | 3 +++ configure.ac | 3 ++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/changes/bug12693 b/changes/bug12693 new file mode 100644 index 0000000..11dfe78 --- /dev/null +++ b/changes/bug12693 @@ -0,0 +1,3 @@ + o Build fixes: + - Allow our configure script to build correctly with autoconf 2.62 + again. Fixes bug 12693; bugfix on 0.2.5.2-alpha. diff --git a/configure.ac b/configure.ac index c37f154..55777e7 100644 --- a/configure.ac +++ b/configure.ac @@ -626,11 +626,12 @@ if test x$enable_gcc_hardening != xno; then TOR_CHECK_CFLAGS(-fstack-protector-all, also_link) AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all]) AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all]) +m4_ifdef([AS_VAR_IF],[ AS_VAR_IF(can_compile, [yes], AS_VAR_IF(can_link, [yes], [], AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)])) - ) + )]) AS_VAR_POPDEF([can_link]) AS_VAR_POPDEF([can_compile]) TOR_CHECK_CFLAGS(-Wstack-protector)

1 0

[tor/master] Merge remote-tracking branch 'public/bug12693_025'
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit e6150c7fc079d7841bedd0df838b29aef0f497d7 Merge: 2b3822d 883dc33 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 22 14:45:38 2014 -0400 Merge remote-tracking branch 'public/bug12693_025' changes/bug12693 | 3 +++ configure.ac | 3 ++- 2 files changed, 5 insertions(+), 1 deletion(-)

1 0

[tor/master] Using the new API in unit-test.
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit 0eaf82947d862852e59b17a1763e49d57de03873 Author: rl1987 <rl1987(a)sdf.lonestar.org> Date: Sat Sep 13 19:32:35 2014 +0300 Using the new API in unit-test. --- src/test/test_policy.c | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/src/test/test_policy.c b/src/test/test_policy.c index 4cdcd03..5f044d0 100644 --- a/src/test/test_policy.c +++ b/src/test/test_policy.c @@ -47,7 +47,9 @@ test_policy_summary_helper(const char *policy_str, line.value = (char *)policy_str; line.next = NULL; - r = policies_parse_exit_policy(&line, &policy, 1, 0, 0, 1); + r = policies_parse_exit_policy(&line, &policy, + EXIT_POLICY_IPV6_ENABLED | + EXIT_POLICY_ADD_DEFAULT ,0); test_eq(r, 0); summary = policy_summarize(policy, AF_INET); @@ -106,7 +108,11 @@ test_policies_general(void *arg) test_assert(ADDR_POLICY_REJECTED == compare_tor_addr_to_addr_policy(&tar, 2, policy)); - test_assert(0 == policies_parse_exit_policy(NULL, &policy2, 1, 1, 0, 1)); + test_assert(0 == policies_parse_exit_policy(NULL, &policy2, + EXIT_POLICY_IPV6_ENABLED | + EXIT_POLICY_REJECT_PRIVATE | + EXIT_POLICY_ADD_DEFAULT, 0)); + test_assert(policy2); policy3 = smartlist_new(); @@ -193,7 +199,10 @@ test_policies_general(void *arg) line.key = (char*)"foo"; line.value = (char*)"accept *:80,reject private:*,reject *:*"; line.next = NULL; - test_assert(0 == policies_parse_exit_policy(&line, &policy, 1, 0, 0, 1)); + + test_assert(0 == policies_parse_exit_policy(&line,&policy, + EXIT_POLICY_IPV6_ENABLED | + EXIT_POLICY_ADD_DEFAULT,0)); test_assert(policy); //test_streq(policy->string, "accept *:80"); //test_streq(policy->next->string, "reject *:*");

1 0

[tor/master] Writing comments for newly added functions.
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit 80622c0664741e7947ace3972d106d94340aaf7c Author: rl1987 <rl1987(a)sdf.lonestar.org> Date: Sun Sep 21 14:35:48 2014 +0300 Writing comments for newly added functions. --- src/or/policies.c | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/src/or/policies.c b/src/or/policies.c index ffeda1f..7090eda 100644 --- a/src/or/policies.c +++ b/src/or/policies.c @@ -984,6 +984,18 @@ policies_parse_exit_policy_internal(config_line_t *cfg, smartlist_t **dest, return 0; } +/** Parse exit policy in cfg into dest smartlist. + * + * Add entry that rejects all IPv6 destinations unless + * EXIT_POLICY_IPV6_ENABLED bit is set in options bitmask. + * + * If EXIT_POLICY_REJECT_PRIVATE bit is set in options, + * do add entry that rejects all destinations in private subnetwork + * Tor is running in. + * + * Respectively, if EXIT_POLICY_ADD_DEFAULT bit is set, add + * default exit policy entries to result smartlist. + */ int policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, exit_policy_parser_cfg_t options, @@ -999,6 +1011,18 @@ policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, add_default); } +/** Parse ExitPolicy member of or_options into result + * smartlist. + * If or_options->IPv6Exit is false, add an entry that + * rejects all IPv6 destinations. + * + * If or_options->ExitPolicyRejectPrivate is true, add entry that + * rejects all destinations in the private subnetwork of machine Tor + * instance is running in. + * + * If or_options->BridgeRelay is false, add entries of default + * Tor exit policy into result smartlist. + */ int policies_parse_exit_policy_from_options(const or_options_t *or_options, uint32_t local_address,

1 0

[tor/master] Whitespace fixes
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit 2e951f8dda4046d940b9268a8f02fe221098ab58 Author: rl1987 <rl1987(a)sdf.lonestar.org> Date: Sun Sep 14 17:07:05 2014 +0300 Whitespace fixes --- src/or/policies.c | 9 ++++----- src/test/test_policy.c | 8 ++++---- 2 files changed, 8 insertions(+), 9 deletions(-) diff --git a/src/or/policies.c b/src/or/policies.c index 9739fd5..ffeda1f 100644 --- a/src/or/policies.c +++ b/src/or/policies.c @@ -62,11 +62,10 @@ static const char *private_nets[] = { NULL }; - -static int policies_parse_exit_policy_internal(config_line_t *cfg, +static int policies_parse_exit_policy_internal(config_line_t *cfg, smartlist_t **dest, int ipv6_exit, - int rejectprivate, + int rejectprivate, uint32_t local_address, int add_default_policy); @@ -957,7 +956,7 @@ exit_policy_remove_redundancies(smartlist_t *dest) static int policies_parse_exit_policy_internal(config_line_t *cfg, smartlist_t **dest, int ipv6_exit, - int rejectprivate, + int rejectprivate, uint32_t local_address, int add_default_policy) { @@ -985,7 +984,7 @@ policies_parse_exit_policy_internal(config_line_t *cfg, smartlist_t **dest, return 0; } -int +int policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, exit_policy_parser_cfg_t options, uint32_t local_address) diff --git a/src/test/test_policy.c b/src/test/test_policy.c index 5f044d0..f1196c2 100644 --- a/src/test/test_policy.c +++ b/src/test/test_policy.c @@ -47,8 +47,8 @@ test_policy_summary_helper(const char *policy_str, line.value = (char *)policy_str; line.next = NULL; - r = policies_parse_exit_policy(&line, &policy, - EXIT_POLICY_IPV6_ENABLED | + r = policies_parse_exit_policy(&line, &policy, + EXIT_POLICY_IPV6_ENABLED | EXIT_POLICY_ADD_DEFAULT ,0); test_eq(r, 0); summary = policy_summarize(policy, AF_INET); @@ -199,10 +199,10 @@ test_policies_general(void *arg) line.key = (char*)"foo"; line.value = (char*)"accept *:80,reject private:*,reject *:*"; line.next = NULL; - + test_assert(0 == policies_parse_exit_policy(&line,&policy, EXIT_POLICY_IPV6_ENABLED | - EXIT_POLICY_ADD_DEFAULT,0)); + EXIT_POLICY_ADD_DEFAULT,0)); test_assert(policy); //test_streq(policy->string, "accept *:80"); //test_streq(policy->next->string, "reject *:*");

1 0

[tor/master] Adding changes file for 8197.
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit 45fc0612d3c496c33c33bdfc9d6c0c754a785d9a Author: rl1987 <rl1987(a)sdf.lonestar.org> Date: Sun Sep 14 17:35:13 2014 +0300 Adding changes file for 8197. --- changes/bug8197 | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/changes/bug8197 b/changes/bug8197 new file mode 100644 index 0000000..b8e467d --- /dev/null +++ b/changes/bug8197 @@ -0,0 +1,6 @@ + o Minor refactoring: + - Reworking API of policies_parse_exit_policy() function to use a + bitmask to represent parsing options instead of a confusing mess + of booleans. Resolves ticket 8197. + - Introducing helper function to parse ExitPolicy in or_options_t + structure.

1 0

[tor/master] New API for policies_parse_exit_policy().
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit c735b60e4ce2d2806d8cc285d7b9b2795f9732b4 Author: rl1987 <rl1987(a)sdf.lonestar.org> Date: Sat Sep 13 16:25:48 2014 +0300 New API for policies_parse_exit_policy(). --- src/or/policies.c | 63 +++++++++++++++++++++++++++++++++++++++++++++-------- src/or/policies.h | 14 ++++++++++++ src/or/router.c | 6 ++--- 3 files changed, 70 insertions(+), 13 deletions(-) diff --git a/src/or/policies.c b/src/or/policies.c index 535271b..9739fd5 100644 --- a/src/or/policies.c +++ b/src/or/policies.c @@ -62,6 +62,14 @@ static const char *private_nets[] = { NULL }; + +static int policies_parse_exit_policy_internal(config_line_t *cfg, + smartlist_t **dest, + int ipv6_exit, + int rejectprivate, + uint32_t local_address, + int add_default_policy); + /** Replace all "private" entries in *policy with their expanded * equivalents. */ void @@ -423,11 +431,9 @@ validate_addr_policies(const or_options_t *options, char **msg) smartlist_t *addr_policy=NULL; *msg = NULL; - if (policies_parse_exit_policy(options->ExitPolicy, &addr_policy, - options->IPv6Exit, - options->ExitPolicyRejectPrivate, 0, - !options->BridgeRelay)) + if (policies_parse_exit_policy_from_options(options,0,&addr_policy)) { REJECT("Error in ExitPolicy entry."); + } /* The rest of these calls *append* to addr_policy. So don't actually * use the results for anything other than checking if they parse! */ @@ -948,11 +954,12 @@ exit_policy_remove_redundancies(smartlist_t *dest) * the functions used to parse the exit policy from a router descriptor, * see router_add_exit_policy. */ -int -policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, - int ipv6_exit, - int rejectprivate, uint32_t local_address, - int add_default_policy) +static int +policies_parse_exit_policy_internal(config_line_t *cfg, smartlist_t **dest, + int ipv6_exit, + int rejectprivate, + uint32_t local_address, + int add_default_policy) { if (!ipv6_exit) { append_exit_policy_string(dest, "reject *6:*"); @@ -978,6 +985,44 @@ policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, return 0; } +int +policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, + exit_policy_parser_cfg_t options, + uint32_t local_address) +{ + int ipv6_enabled = (options & EXIT_POLICY_IPV6_ENABLED) ? 1 : 0; + int reject_private = (options & EXIT_POLICY_REJECT_PRIVATE) ? 1 : 0; + int add_default = (options & EXIT_POLICY_ADD_DEFAULT) ? 1 : 0; + + return policies_parse_exit_policy_internal(cfg,dest,ipv6_enabled, + reject_private, + local_address, + add_default); +} + +int +policies_parse_exit_policy_from_options(const or_options_t *or_options, + uint32_t local_address, + smartlist_t **result) +{ + exit_policy_parser_cfg_t parser_cfg = 0; + + if (or_options->IPv6Exit) { + parser_cfg |= EXIT_POLICY_IPV6_ENABLED; + } + + if (or_options->ExitPolicyRejectPrivate) { + parser_cfg |= EXIT_POLICY_REJECT_PRIVATE; + } + + if (!or_options->BridgeRelay) { + parser_cfg |= EXIT_POLICY_ADD_DEFAULT; + } + + return policies_parse_exit_policy(or_options->ExitPolicy,result, + parser_cfg,local_address); +} + /** Add "reject *:*" to the end of the policy in *dest, allocating * *dest as needed. */ void diff --git a/src/or/policies.h b/src/or/policies.h index da1feaf..0b47b76 100644 --- a/src/or/policies.h +++ b/src/or/policies.h @@ -18,6 +18,12 @@ */ #define POLICY_BUF_LEN 72 +#define EXIT_POLICY_IPV6_ENABLED (1 << 0) +#define EXIT_POLICY_REJECT_PRIVATE (1 << 1) +#define EXIT_POLICY_ADD_DEFAULT (1 << 2) + +typedef int exit_policy_parser_cfg_t; + int firewall_is_fascist_or(void); int fascist_firewall_allows_address_or(const tor_addr_t *addr, uint16_t port); int fascist_firewall_allows_or(const routerinfo_t *ri); @@ -42,10 +48,18 @@ MOCK_DECL(addr_policy_result_t, compare_tor_addr_to_addr_policy, addr_policy_result_t compare_tor_addr_to_node_policy(const tor_addr_t *addr, uint16_t port, const node_t *node); +/* int policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, int ipv6exit, int rejectprivate, uint32_t local_address, int add_default_policy); +*/ +int policies_parse_exit_policy_from_options(const or_options_t *or_options, + uint32_t local_address, + smartlist_t **result); +int policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, + exit_policy_parser_cfg_t options, + uint32_t local_address); void policies_exit_policy_append_reject_star(smartlist_t **dest); void addr_policy_append_reject_addr(smartlist_t **dest, const tor_addr_t *addr); diff --git a/src/or/router.c b/src/or/router.c index 7bcc02e..4af8d26 100644 --- a/src/or/router.c +++ b/src/or/router.c @@ -1855,10 +1855,8 @@ router_rebuild_descriptor(int force) /* DNS is screwed up; don't claim to be an exit. */ policies_exit_policy_append_reject_star(&ri->exit_policy); } else { - policies_parse_exit_policy(options->ExitPolicy, &ri->exit_policy, - options->IPv6Exit, - options->ExitPolicyRejectPrivate, - ri->addr, !options->BridgeRelay); + policies_parse_exit_policy_from_options(options,ri->addr, + &ri->exit_policy); } ri->policy_is_reject_star = policy_is_reject_star(ri->exit_policy, AF_INET) &&

1 0

[tor/master] Merge branch 'master' of git-rw.torproject.org:/tor
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit 2b3822d2daf884b39f2405d3bb1d1eb073557a28 Merge: bdd0c77 00fafe9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 22 14:35:14 2014 -0400 Merge branch 'master' of git-rw.torproject.org:/tor ChangeLog | 51 +++++++++++++++++++++++++++++++++++++++++++++++++++ ReleaseNotes | 27 +++++++++++++++++++++++++++ 2 files changed, 78 insertions(+)

1 0

[tor/master] Merge branch 'bug8197_squashed'
by nickm＠torproject.org 22 Sep '14

22 Sep '14

commit bdd0c77643dfc5b3c5084a0f4dc53de393362796 Merge: c8d927b 80622c0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 22 14:34:52 2014 -0400 Merge branch 'bug8197_squashed' Conflicts: src/test/test_policy.c changes/bug8197 | 6 ++++ src/or/policies.c | 86 +++++++++++++++++++++++++++++++++++++++++++----- src/or/policies.h | 14 ++++++++ src/or/router.c | 6 ++-- src/test/test_policy.c | 16 +++++++-- 5 files changed, 112 insertions(+), 16 deletions(-) diff --cc src/test/test_policy.c index 61a5449,f1196c2..388251a --- a/src/test/test_policy.c +++ b/src/test/test_policy.c @@@ -47,12 -47,14 +47,15 @@@ test_policy_summary_helper(const char * line.value = (char *)policy_str; line.next = NULL; - r = policies_parse_exit_policy(&line, &policy, 1, 0, 0, 1); + r = policies_parse_exit_policy(&line, &policy, + EXIT_POLICY_IPV6_ENABLED | + EXIT_POLICY_ADD_DEFAULT ,0); - test_eq(r, 0); + tt_int_op(r,==, 0); ++ summary = policy_summarize(policy, AF_INET); - test_assert(summary != NULL); - test_streq(summary, expected_summary); + tt_assert(summary != NULL); + tt_str_op(summary,==, expected_summary); short_policy = parse_short_policy(summary); tt_assert(short_policy); @@@ -97,17 -99,21 +100,21 @@@ test_policies_general(void *arg smartlist_add(policy, p); tor_addr_from_ipv4h(&tar, 0x01020304u); - test_assert(ADDR_POLICY_ACCEPTED == + tt_assert(ADDR_POLICY_ACCEPTED == compare_tor_addr_to_addr_policy(&tar, 2, policy)); tor_addr_make_unspec(&tar); - test_assert(ADDR_POLICY_PROBABLY_ACCEPTED == + tt_assert(ADDR_POLICY_PROBABLY_ACCEPTED == compare_tor_addr_to_addr_policy(&tar, 2, policy)); tor_addr_from_ipv4h(&tar, 0xc0a80102); - test_assert(ADDR_POLICY_REJECTED == + tt_assert(ADDR_POLICY_REJECTED == compare_tor_addr_to_addr_policy(&tar, 2, policy)); - tt_assert(0 == policies_parse_exit_policy(NULL, &policy2, 1, 1, 0, 1)); - test_assert(0 == policies_parse_exit_policy(NULL, &policy2, ++ tt_int_op(0, ==, policies_parse_exit_policy(NULL, &policy2, + EXIT_POLICY_IPV6_ENABLED | + EXIT_POLICY_REJECT_PRIVATE | + EXIT_POLICY_ADD_DEFAULT, 0)); + - test_assert(policy2); + tt_assert(policy2); policy3 = smartlist_new(); p = router_parse_addr_policy_item_from_string("reject *:*",-1); @@@ -193,11 -199,14 +200,14 @@@ line.key = (char*)"foo"; line.value = (char*)"accept *:80,reject private:*,reject *:*"; line.next = NULL; - tt_assert(0 == policies_parse_exit_policy(&line, &policy, 1, 0, 0, 1)); - - test_assert(0 == policies_parse_exit_policy(&line,&policy, ++ tt_int_op(0, ==, policies_parse_exit_policy(&line,&policy, + EXIT_POLICY_IPV6_ENABLED | + EXIT_POLICY_ADD_DEFAULT,0)); - test_assert(policy); + tt_assert(policy); ++ //test_streq(policy->string, "accept *:80"); //test_streq(policy->next->string, "reject *:*"); - test_eq(smartlist_len(policy), 4); + tt_int_op(smartlist_len(policy),==, 4); /* test policy summaries */ /* check if we properly ignore private IP addresses */

1 0

[tor/master] and forward-port those changelogs too
by arma＠torproject.org 22 Sep '14

22 Sep '14

commit 00fafe9ab43a6ee8ca5d1338995f9c64b338bdc1 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Sep 22 14:21:26 2014 -0400 and forward-port those changelogs too --- ChangeLog | 51 +++++++++++++++++++++++++++++++++++++++++++++++++++ ReleaseNotes | 27 +++++++++++++++++++++++++++ 2 files changed, 78 insertions(+) diff --git a/ChangeLog b/ChangeLog index 34d9fec..df63c01 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,57 @@ Changes in version 0.2.6.1-alpha - 2014-??-?? +Changes in version 0.2.5.8-rc - 2014-09-22 + Tor 0.2.5.8-rc is the second release candidate for the Tor 0.2.5.x + series. It fixes a bug that affects consistency and speed when + connecting to hidden services, and it updates the location of one of + the directory authorities. + + o Major bugfixes: + - Clients now send the correct address for their chosen rendezvous + point when trying to access a hidden service. They used to send + the wrong address, which would still work some of the time because + they also sent the identity digest of the rendezvous point, and if + the hidden service happened to try connecting to the rendezvous + point from a relay that already had a connection open to it, + the relay would reuse that connection. Now connections to hidden + services should be more robust and faster. Also, this bug meant + that clients were leaking to the hidden service whether they were + on a little-endian (common) or big-endian (rare) system, which for + some users might have reduced their anonymity. Fixes bug 13151; + bugfix on 0.2.1.5-alpha. + + o Directory authority changes: + - Change IP address for gabelmoo (v3 directory authority). + + +Changes in version 0.2.4.24 - 2014-09-22 + Tor 0.2.4.24 fixes a bug that affects consistency and speed when + connecting to hidden services, and it updates the location of one of + the directory authorities. + + o Major bugfixes: + - Clients now send the correct address for their chosen rendezvous + point when trying to access a hidden service. They used to send + the wrong address, which would still work some of the time because + they also sent the identity digest of the rendezvous point, and if + the hidden service happened to try connecting to the rendezvous + point from a relay that already had a connection open to it, + the relay would reuse that connection. Now connections to hidden + services should be more robust and faster. Also, this bug meant + that clients were leaking to the hidden service whether they were + on a little-endian (common) or big-endian (rare) system, which for + some users might have reduced their anonymity. Fixes bug 13151; + bugfix on 0.2.1.5-alpha. + + o Directory authority changes: + - Change IP address for gabelmoo (v3 directory authority). + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2014 Maxmind GeoLite2 + Country database. + + Changes in version 0.2.5.7-rc - 2014-09-11 Tor 0.2.5.7-rc fixes several regressions from earlier in the 0.2.5.x release series, and some long-standing bugs related to ORPort reachability diff --git a/ReleaseNotes b/ReleaseNotes index 2ad0f1e..cbd6421 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -3,6 +3,33 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.2.4.24 - 2014-09-22 + Tor 0.2.4.24 fixes a bug that affects consistency and speed when + connecting to hidden services, and it updates the location of one of + the directory authorities. + + o Major bugfixes: + - Clients now send the correct address for their chosen rendezvous + point when trying to access a hidden service. They used to send + the wrong address, which would still work some of the time because + they also sent the identity digest of the rendezvous point, and if + the hidden service happened to try connecting to the rendezvous + point from a relay that already had a connection open to it, + the relay would reuse that connection. Now connections to hidden + services should be more robust and faster. Also, this bug meant + that clients were leaking to the hidden service whether they were + on a little-endian (common) or big-endian (rare) system, which for + some users might have reduced their anonymity. Fixes bug 13151; + bugfix on 0.2.1.5-alpha. + + o Directory authority changes: + - Change IP address for gabelmoo (v3 directory authority). + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2014 Maxmind GeoLite2 + Country database. + + Changes in version 0.2.4.23 - 2014-07-28 Tor 0.2.4.23 brings us a big step closer to slowing down the risk from guard rotation, and also backports several important fixes from the

1 0