October 2020 - tor-commits - lists.torproject.org

[tor/release-0.4.4] Merge branch 'maint-0.4.4' into release-0.4.4
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit e3ba769271406ed0e5a3383c7497fec657d0f6b0 Merge: 571253e7ac faac186075 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:29:32 2020 -0400 Merge branch 'maint-0.4.4' into release-0.4.4

1 0

[tor/release-0.4.3] Merge branch 'maint-0.3.5' into maint-0.4.3
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit 3e9fa5a029af55a0175b106199a5371fd87c8e4a Merge: 701a1936fa 5f5587ee50 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:29:31 2020 -0400 Merge branch 'maint-0.3.5' into maint-0.4.3 changes/ticket33880 | 6 ++++++ src/core/or/channel.c | 32 +++++++++++++++++++++++++++++--- 2 files changed, 35 insertions(+), 3 deletions(-)

1 0

[tor/release-0.4.4] Merge branch 'maint-0.4.3' into maint-0.4.4
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit faac18607521380ff330a6e0b207e7b1d3d35384 Merge: ad62cf2ac9 3e9fa5a029 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:29:32 2020 -0400 Merge branch 'maint-0.4.3' into maint-0.4.4

1 0

[tor/master] Merge branch 'maint-0.4.3' into maint-0.4.4
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit ad62cf2ac9100c66dcd51f0adbb22ff4bc64faa4 Merge: a44bcc309d 701a1936fa Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:26:04 2020 -0400 Merge branch 'maint-0.4.3' into maint-0.4.4

1 0

[tor/master] Merge remote-tracking branch 'tor-gitlab/mr/79' into maint-0.3.5
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit ad7ffa5240c4b3a9b675a12f0705d9cbe0bc8beb Merge: 98e14720b5 ceb6585a4b Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:25:55 2020 -0400 Merge remote-tracking branch 'tor-gitlab/mr/79' into maint-0.3.5 changes/ticket33747 | 7 +++++++ src/core/mainloop/connection.c | 7 ++++++- src/core/or/connection_st.h | 3 +++ src/feature/relay/ext_orport.c | 5 ++++- 4 files changed, 20 insertions(+), 2 deletions(-)

1 0

[tor/release-0.3.5] Treat all extorport connections with un-set addresses as remote
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit ceb6585a4bc2beadde2fb194395711e72ee8559d Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Jul 22 15:20:41 2020 -0400 Treat all extorport connections with un-set addresses as remote Without this fix, if an PT forgets to send a USERADDR command, that results in a connection getting treated as local for the purposes of rate-limiting. If the PT _does_ use USERADDR, we still believe it. Closes ticket 33747. --- changes/ticket33747 | 7 +++++++ src/core/mainloop/connection.c | 7 ++++++- src/core/or/connection_st.h | 3 +++ src/feature/relay/ext_orport.c | 5 ++++- 4 files changed, 20 insertions(+), 2 deletions(-) diff --git a/changes/ticket33747 b/changes/ticket33747 new file mode 100644 index 0000000000..57c72e9d0a --- /dev/null +++ b/changes/ticket33747 @@ -0,0 +1,7 @@ + o Minor bugfixes (rate limiting, bridges, pluggable transports): + - On a bridge, treat all connections from an ExtORPort as remote + by default for the purposes of rate-limiting. Previously, + bridges would treat the connection as local unless they explicitly + received a "USERADDR" command. ExtORPort connections still + count as local if there is a USERADDR command with an explicit local + address. Fixes bug 33747; bugfix on 0.2.5.1-alpha. diff --git a/src/core/mainloop/connection.c b/src/core/mainloop/connection.c index 3595bba85c..e895f8a73d 100644 --- a/src/core/mainloop/connection.c +++ b/src/core/mainloop/connection.c @@ -379,8 +379,12 @@ or_connection_new(int type, int socket_family) connection_or_set_canonical(or_conn, 0); - if (type == CONN_TYPE_EXT_OR) + if (type == CONN_TYPE_EXT_OR) { + /* If we aren't told an address for this connection, we should + * presume it isn't local, and should be rate-limited. */ + TO_CONN(or_conn)->always_rate_limit_as_remote = 1; connection_or_set_ext_or_identifier(or_conn); + } return or_conn; } @@ -3025,6 +3029,7 @@ connection_is_rate_limited(connection_t *conn) if (conn->linked) return 0; /* Internal connection */ else if (! options->CountPrivateBandwidth && + ! conn->always_rate_limit_as_remote && (tor_addr_family(&conn->addr) == AF_UNSPEC || /* no address */ tor_addr_family(&conn->addr) == AF_UNIX || /* no address */ tor_addr_is_internal(&conn->addr, 0))) diff --git a/src/core/or/connection_st.h b/src/core/or/connection_st.h index d1430eda14..c197a81340 100644 --- a/src/core/or/connection_st.h +++ b/src/core/or/connection_st.h @@ -64,6 +64,9 @@ struct connection_t { /** True if connection_handle_write is currently running on this connection. */ unsigned int in_connection_handle_write:1; + /** If true, then we treat this connection as remote for the purpose of + * rate-limiting, no matter what its address is. */ + unsigned int always_rate_limit_as_remote:1; /* For linked connections: */ diff --git a/src/feature/relay/ext_orport.c b/src/feature/relay/ext_orport.c index 56c5bb96f5..136aee3084 100644 --- a/src/feature/relay/ext_orport.c +++ b/src/feature/relay/ext_orport.c @@ -494,6 +494,10 @@ connection_ext_or_handle_cmd_useraddr(connection_t *conn, } conn->address = tor_addr_to_str_dup(&addr); + /* Now that we know the address, we don't have to manually override rate + * limiting. */ + conn->always_rate_limit_as_remote = 0; + return 0; } @@ -659,4 +663,3 @@ ext_orport_free_all(void) if (ext_or_auth_cookie) /* Free the auth cookie */ tor_free(ext_or_auth_cookie); } -

1 0

[tor/master] Merge branch 'maint-0.4.4'
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit a5c5c0d2f5274d967cd48c5b8773dad59ce98851 Merge: 2617987c88 ad62cf2ac9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:26:04 2020 -0400 Merge branch 'maint-0.4.4'

1 0

[tor/master] Merge branch 'maint-0.3.5' into maint-0.4.3
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit 701a1936fae48c6887cadd90dbe50ae84a00a29f Merge: a49373844c ad7ffa5240 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:26:04 2020 -0400 Merge branch 'maint-0.3.5' into maint-0.4.3 changes/ticket33747 | 7 +++++++ src/core/mainloop/connection.c | 7 ++++++- src/core/or/connection_st.h | 3 +++ src/feature/relay/ext_orport.c | 4 ++++ 4 files changed, 20 insertions(+), 1 deletion(-)

1 0

[tor/release-0.3.5] Merge branch 'maint-0.3.5' into release-0.3.5
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit 0343ec056e14a655fe9003024d2cd5e1fc806d51 Merge: 3fe253e6e1 ad7ffa5240 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:26:04 2020 -0400 Merge branch 'maint-0.3.5' into release-0.3.5 changes/ticket33747 | 7 +++++++ src/core/mainloop/connection.c | 7 ++++++- src/core/or/connection_st.h | 3 +++ src/feature/relay/ext_orport.c | 5 ++++- 4 files changed, 20 insertions(+), 2 deletions(-)

1 0

[tor/release-0.3.5] Merge remote-tracking branch 'tor-gitlab/mr/79' into maint-0.3.5
by nickm＠torproject.org 07 Oct '20

07 Oct '20

commit ad7ffa5240c4b3a9b675a12f0705d9cbe0bc8beb Merge: 98e14720b5 ceb6585a4b Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 7 08:25:55 2020 -0400 Merge remote-tracking branch 'tor-gitlab/mr/79' into maint-0.3.5 changes/ticket33747 | 7 +++++++ src/core/mainloop/connection.c | 7 ++++++- src/core/or/connection_st.h | 3 +++ src/feature/relay/ext_orport.c | 5 ++++- 4 files changed, 20 insertions(+), 2 deletions(-)

1 0