commit f09d03c384b85d64dfe2abca156cd63bf7597979 Author: Nick Mathewson nickm@torproject.org Date: Mon Feb 1 16:56:20 2016 -0500

use sortChanges to fold changes files into changelog. No additional editing or formatting yet. --- ChangeLog | 429 +++++++++++++++++++++++++++ changes/11150 | 6 - changes/17004 | 3 - changes/17075 | 3 - changes/17078 | 3 - changes/17082 | 3 - changes/17084 | 3 - changes/17573 | 4 - changes/17826 | 5 - changes/17926 | 3 - changes/17944 | 3 - changes/7419 | 6 - changes/bug15638 | 2 - changes/bug16382 | 3 - changes/bug16563 | 6 - changes/bug16651 | 6 - changes/bug16794_ed | 3 - changes/bug17003 | 3 - changes/bug17026 | 5 - changes/bug17027-reject-private-bind-port | 6 - changes/bug17194 | 7 - changes/bug17347 | 4 - changes/bug17419 | 3 - changes/bug17544 | 4 - changes/bug17549 | 3 - changes/bug17562-DataDirectoryGroupReadable | 5 - changes/bug17562-allow-root-group-read | 7 - changes/bug17562-defer-unix-socket-creation | 5 - changes/bug17572-fallback-by-digest | 5 - changes/bug17583 | 4 - changes/bug17589 | 7 - changes/bug17632-no-ipv4-no-localhost | 5 - changes/bug17638-ipv6-ersatz-socketpair | 5 - changes/bug17675 | 4 - changes/bug17683 | 3 - changes/bug17686 | 4 - changes/bug17694_strongest | 6 - changes/bug17753 | 4 - changes/bug17778 | 3 - changes/bug17791 | 4 - changes/bug17804 | 3 - changes/bug17818 | 3 - changes/bug17819 | 4 - changes/bug17827 | 3 - changes/bug17843 | 3 - changes/bug17876 | 5 - changes/bug17892 | 4 - changes/bug17893 | 4 - changes/bug17906 | 4 - changes/bug17923 | 4 - changes/bug17924 | 4 - changes/bug18050 | 7 - changes/bug18089 | 5 - changes/bug4483-multiple-consensus-downloads | 9 - changes/bug6027 | 4 - changes/check-crypto-errors | 4 - changes/cleanup_17587 | 3 - changes/decouple_circuit_mark | 6 - changes/decouple_conn_attach | 6 - changes/doc17392 | 4 - changes/feature12538 | 6 - changes/feature13696 | 3 - changes/feature14846 | 4 - changes/feature15775-fallback | 19 -- changes/feature16774 | 3 - changes/feature17076 | 3 - changes/feature17327 | 5 - changes/feature17576-UseDefaultFallbackDirs | 4 - changes/feature17608 | 4 - changes/feature17663 | 3 - changes/feature17796 | 6 - changes/feature17863 | 6 - changes/feature17864 | 5 - changes/feature17950 | 5 - changes/feature17951 | 6 - changes/feature17986 | 3 - changes/feature8195 | 6 - changes/feature8961-replaycache-sha256 | 4 - changes/first-hop-no-private | 6 - changes/geoip-january2016 | 4 - changes/getinfo-private-exitpolicy | 6 - changes/laplace-edge-cases | 9 - changes/log_heartbeat_test | 6 - changes/rand-failure-modes | 5 - changes/routerset-parse-IPv6-literals | 3 - changes/sha-unit-tests | 3 - changes/test16831 | 3 - changes/ticket15989 | 9 - changes/ticket17158 | 4 - changes/warn-when-time-goes-backwards | 5 - scripts/maint/sortChanges.py | 28 +- 91 files changed, 456 insertions(+), 416 deletions(-)

diff --git a/ChangeLog b/ChangeLog index b59ec43..d76d134 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,432 @@ +Changes in version 0.2.8.1-alpha - 2016-02-0? + XXXX Blurb goes here XXXX + + o Major features (consensus downloads): + - Schedule multiple in-progress consensus downloads during client + bootstrap. Use the first one that starts downloading, close the + rest. This reduces failures when authorities are slow or down. + Together with the code for feature 15775, it reduces failures due to fallback churn. + Implements ticket 4483 (reduce failures when authorities are down). + Patch by "teor". + Implements IPv4 portions of proposal 210 by "mikeperry" and + "teor". + + o Major features (controller): + - New "GETINFO hs/service/desc/id/" command to retrieve a hidden service + descriptor from a service's local hidden service descriptor cache. + Closes ticket 14846. + + o Major features (directory mirrors): + - Include an opt-in trial list of Default Fallback Directories in + add_default_fallback_dir_servers(). + "Tor has included a feature to fetch the initial consensus from nodes + other than the authorities for a while now. We just haven't shipped a + list of alternate locations for clients to go to yet. + Reasons why we might want to ship tor with a list of additional places + where clients can find the consensus is that it makes authority + reachability and BW less important. + We want them to have been around and using their current key, address, + and port for a while now (120 days), and have been running, a guard, + and a v2 directory mirror for most of that time." + We exclude BadExits and tor versions that aren't recommended. + We include an IPv6 address for each FallbackDir (see ticket 8374). + (Tor might not use IPv6 fallbacks until ticket the code for ticket6027 is merged.) + The unit test ensures that we successfully load all included + default fallback directories. + Closes ticket 15775. Patch by "teor". + OnionOO script by "weasel", "teor", "gsathya", and "karsten". + + o Major features (relay): + - When Tor is started as root on Linux and told to switch user ID, it + can now retain the capabilitity to bind to low ports. By default, + Tor will do this only when it's switching user ID and some low + ports have been configured. You can change this behavior with + the new option KeepBindCapabilities. Closes ticket 8195. + + o Minor feature (crypto): + - Add SHA512 support to crypto.c. Closes ticket 17663; patch from + George Tankersley. + + o Minor feature (directory downloads): + - Wait for busy authorities and fallbacks to become non-busy when + bootstrapping. (A similar change was made in 6c443e987d for + directory servers chosen from the consensus.) + Closes ticket 17864; patch by "teor". + + o Minor feature (fallback directories): + - Add UseDefaultFallbackDirs, which enables any hard-coded fallback + directory mirrors. Default is 1, set it to 0 to disable fallbacks. + Implements ticket 17576. Patch by "teor". + + o Minor feature (IPv6): + - Add a flag ipv6=address:orport to the DirAuthority and FallbackDir torrc + options. Add hard-coded ipv6 addresses for directory authorities with + ipv6 lines in their descriptors. + Closes ticket 17327; patch from Nick Mathewson / "teor". + - Add address policy assume_action support for IPv6 addresses. + - Limit IPv6 mask bits to 128. + - Warn when comparing against an AF_UNSPEC address in a policy, + it's almost always a bug. + Closes ticket 17863; patch by "teor". + + o Minor feature (logging): + - When logging to syslog, allow a tag to be added to the syslog + identity ("Tor"), i.e. the string prepended to every log message. + The tag can be configured by setting SyslogIdentityTag and defaults + to none. Setting it to "foo" will cause logs to be tagged as + "Tor-foo". Closes ticket 17194. + + o Minor feature (refactoring): + - Move logging of redundant policy entries in + policies_parse_exit_policy_internal into its own function. + Closes ticket 17608; patch from "juce". + + o Minor features (accounting): + - Added two modes to AccountingRule in torrc for + limiting just input or just output. + Closes ticket 15989; patch from "unixninja92". + + o Minor features (authorities): + - Update the V3 identity key for dannenberg: it was changed on + 18 November 2015. + Closes task 17906. Patch by "teor". + + o Minor features (build): + - Since our build process now uses 'make distcheck', we no longer force + "make dist" to depend on "make check". Closes ticket 17893; + patch from "cypherpunks." + + o Minor features (compilation): + - Repair some compilation issues with some recent (unreleased, alpha) + vesions of OpenSSL 1.1. Closes ticket 17549. + + o Minor features (controller): + - Adds FallbackDir entries to 'GETINFO config/defaults'. Closes tickets + 16774 and 17817. Patch by George Tankersley. + + o Minor features (crypto): + - When allocating a digest state object, allocate no more space than we + actually need. Previously, we were allocating as much space as the + state for the largest algorithm would need. This change saves up to + 672 bytes per circuit. Closes ticket 17796. + + o Minor features (directory system): + Previously only relays who explicitly opened a directory port (DirPort) + accepted directory requests from clients. Now all relays, with and without + a DirPort, who do not disable the DirCache option accept and serve + directory requests sent (tunnelled) through their ORPort. + Closes ticket 12538. + + o Minor features (exit policies, controllers): + - Add controller getinfo exit-policy/reject-private/[default,relay] + for the reject rules added by ExitPolicyRejectPrivate. This makes + it easier for stem to display exit policies. + - Add unit tests for getinfo exit-policy/*. + Finishes implementation for ticket 17183. Patch by "teor". + + o Minor features (fallback directories): + - Add a set of default fallback directories for the 0.2.8 alpha releases. + Closes ticket 17158. + Patch by "teor". + + o Minor features (geoip): + - Update geoip and geoip6 to the January 5 2016 Maxmind GeoLite2 + Country database. + + o Minor features (IPv6 support): + - Allow users to configure directory authorities and fallback + directory servers with IPv6 addresses and ORPorts. Resolves + ticket 6027. + + o Minor features (portability): + - Use timingsafe_memcmp() where available. Closes ticket 17944; + patch from logan@hackers.mu. + + o Minor features (relay, address discovery): + - Add a family argument to get_interface_addresses_raw() and + subfunctions to make network interface address interogation more + efficient. Now Tor can specifically ask for IPv4, IPv6 or both + types of interfaces from the operating system. Resolves ticket 17950. + - When get_interface_address6_list(.,AF_UNSPEC,.) is called and fails + to enumerate interface addresses using the platform-specific API, + have it rely on the UDP socket fallback technique to try and find + out what IP addresses (both IPv4 and IPv6) our machine has. Resolves + ticket 17951. + + o Minor features (replaycache): + - The replay cache now uses SHA256 instead of SHA1. + Implements feature 8961. + Patch by "teor", issue reported by "rransom". + + o Minor features (security): + - Adjust Tor's use of OpenSSL's RNG APIs so that they absolutely, + positively are not allowed to fail. Previously we depended on + internals about OpenSSL behavior. Closes ticket 17686. + - Never use the system entropy output directly for anything besides + seeding the PRNG. When we want to generate important keys, instead + of using system entropy directly, hash it with the PRNG stream. + This may help resist certain attacks based on broken OS entropy + implementations. Closes part of ticket 17694. + - Set unused entires in a smartlist to NULL. This helped catch a + (harmless) bug, and shouldn't affect performance too much. + Implements ticket 17026. + - Use SecureMemoryWipe() function to securely clean memory on + Windows. Implements feature 17986. + - Use explicit_bzero or memset_s when present. Previously, we'd use + OpenSSL's OPENSSL_cleanse() function. + Closes ticket 7419; patches from logan@hackers.mu and selven@hackers.mu. + + o Minor features (security, clock): + - Warn when the system clock is set back in time (when the + state file was last written in the future). Tor doesn't know + that consensuses have expired if the clock is in the past. + Patch by "teor". Implements ticket 17188. + + o Minor features (security, cryptography): + - Use modern system calls to generate strong entropy on platforms that + provide them. Closes ticket 13696. + + o Minor features (testing): + - Log more information when the backtrace tests fail. + Closes ticket 17892. Patch from "cypherpunks." + + o Minor features (unit tests, random number generation): + - Add unit tests that check for common RNG failure modes, such as + returning all zeroes, identical values, or incrementing values + (OpenSSL's rand_predictable feature). + Patch by "teor". + + o Minor features (unix permissions): + - Defer creation of Unix sockets until after setuid. This avoids needing + CAP_CHOWN and CAP_FOWNER when using systemd's CapabilityBoundingSet, or + chown and fowner when using SELinux. + Implements part of ticket 17562. Patch from Jamie Nguyen. + - If any directory created by Tor is marked as group readable, the + filesystem group is allowed to be either the default GID or the root + user. Allowing root to read the DataDirectory prevents the need for + CAP_READ_SEARCH when using systemd's CapabilityBoundingSet, or + dac_read_search when using SELinux. + Implements part of ticket 17562. Patch from Jamie Nguyen. + - Introduce DataDirectoryGroupReadable boolean. If set to 1, the + DataDirectory will be made readable by the default GID. + Implements part of ticket 17562. Patch from Jamie Nguyen. + + o Minor bugfix (crypto): + - Check the return value of HMAC and assert on failure. + Fixes bug 17658; bugfix on 0.2.3.6-alpha. + Patch by "teor". + + o Minor bugfix (fallback directories): + - Mark fallbacks as "too busy" when they return a 503 response, + rather than just marking authorities. + Fixes bug 17572; bugfix on 5c51b3f1f0d4 released in 0.2.4.7-alpha. + Patch by "teor". + + o Minor bugfix (IPv6 compatibility, unit tests): + - Make tor_ersatz_socketpair work on IPv6-only systems. + Fixes bug 17638; bugfix on 0.0.2pre8. + Patch by "teor". + + o Minor bugfix (relays, hidden services): + - Refuse connection requests to private OR addresses unless + ExtendAllowPrivateAddresses is set. Previously, tor would + connect, then refuse to send any cells to a private address. + Fixes bugs 17674 and 8976; bugfix on 0.2.3.21-rc. + Patch by "teor". + + o Minor bugfix (SipHash-2-4 performance): + - Improve performance when hashing non-multiple of 8 sized buffers, + based on Andrew Moon's Public Domain SipHash-2-4 implementation. + Fixes bug 17544; bugfix on 0.2.5.3-alpha. + + o Minor bugfix (testing): + - The test for log_heartbeat was incorrectly failing in timezones + with non-integer offsets. Instead of comparing the end of the + time string against a constant, compare it to the output of + format_local_iso_time when given the correct input. + Fixes bug 18039; bugfix on 0.2.5.4-alpha. + + o Minor bugfix (unit tests): + - Make unit tests pass on IPv6-only systems, and systems without + localhost addresses (like some FreeBSD jails). + Fixes bug 17632; bugfix on 0.2.7.3-rc. + Patch by "teor". + + o Minor bugfixes (accounting): + - The max bandwidth when using AccountRule sum + is now correctly logged. Fixes bug 18024; bugfix on 0.2.6.1-alpha. + Patch from "unixninja92". + + o Minor bugfixes (build): + - Mark all object files that include micro-revision.i as depending on + it, so as to make our build more reliable with parallel builds. + Fixes bug 17826; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (client, correctness): + - When closing an entry connection, generate a warning if we should + have sent an end cell for it but we haven't. Fixes bug 17876; + bugfix on 0.2.3.2-alpha. + + o Minor bugfixes (code correctness): + - Assert that allocated memory held by the reputation code is freed + according to its internal counters. Fixes bug 17753; bugfix on + tor-0.1.1.1-alpha. + + o Minor bugfixes (compilation): + - Don't try to use the pthrad_condattr_setclock() function unless + it actually exists. Fixes compilation on NetBSD-6.x. Fixes bug + 17819; bugfix on 0.2.6.3-alpha. + - Fix backtrace compilation on FreeBSD. Fixes bug 17827; bugfix on + tor-0.2.5.2-alpha. + - Fix compilation of sandbox.c with musl-libc. + Fixes bug 17347; bugfix on 0.2.5.1-alpha. + Patch from 'jamestk'. + - Fix search for libevent libraries on OpenBSD (and similar systems + which install libevent 1 and libevent 2 in parallel). Fixes bug + 16651; bugfix on 0.1.0.7-rc. + Patch from "rubiate". + - Isolate environment variables meant for tests from the rest of the + build system. Fixes bug 17818; bugfix on tor-0.2.7.3-rc. + - Replace usage of 'INLINE' with 'inline'. Fixes bug 17804; bugfix + on tor-0.0.2pre8. + + o Minor bugfixes (IPv6): + - Update the limits in max_dl_per_request for IPv6 address + length. Fixes bug 17573; bugfix on 0.2.1.5-alpha. + + o Minor bugfixes (linux seccomp2 sandbox): + - Fix a crash when using offline master ed25519 keys with the + Linux seccomp2 sandbox enabled. Fixes bug 17675; bugfix on + 0.2.7.3-alpha. + + o Minor bugfixes (logging): + - In log messages that include a function name, use __FUNCTION__ instead + of __PRETTY_FUNCTION__. In GCC, these are synonymous, but with clang + __PRETTY_FUNCTION__ has extra information we don't need. + Fixes bug 16563; bugfix on 0.0.2pre8. Fix by Tom van der Woerdt. + - Remove needless quotes from a log message about unparseable addresses. + Fixes bug 17843; bugfix on 0.2.3.3-alpha. + + o Minor bugfixes (makefile): + - Remove config.log only from make distclean, not from + make clean. Fixes bug 17924; bugfix on 0.2.4.1-alpha. + + o Minor bugfixes (portability): + - Remove an #endif from configure.ac so that we correctly detect + the presence of in6_addr.s6_addr32. Fixes bug 17923; bugfix on + 0.2.0.13-alpha. + + o Minor bugfixes (relays): + - Check that both the ORPort and DirPort (if present) are reachable + before publishing a relay descriptor. Otherwise, relays publish a + descriptor with DirPort 0 when the DirPort reachability test takes + longer than the ORPort reachability test. + Fixes bug 18050; bugfix on 0.1.0.1-rc. + Reported by "starlight", patch by "teor". + + o Minor bugfixes (routersets, IPv6): + - routerset_parse now accepts IPv6 literal addresses. + Fixes bug 17060; bugfix on 0.2.1.3-alpha. Patch by "teor". + + o Minor bugfixes (safe logging): + - When logging a malformed hostname received through socks4, scrub it + if SafeLogging says we should. Fixes bug 17419; bugfix on 0.1.1.16-rc. + + o Minor bugfixes (security): + - Make memwipe() do nothing when passed a NULL pointer + or zero size. Check size argument to memwipe() for underflow. + Fixes bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. + Reported by "gk", patch by "teor". + + o Minor bugfixes (security, exit policies): + - ExitPolicyRejectPrivate rejects more private addresses by default. + Specifically, it rejects + the relay's outbound bind addresses (if configured), and + the relay's configured port addresses (such as ORPort and DirPort). + Fixes bug 17027; bugfix on 0.2.0.11-alpha. Patch by "teor". + + o Minor bugfixes (statistics code): + - Consistently check for overflow in round_*_to_next_multiple_of + functions, and add unit tests with additional and maximal values. + Fixes part of bug 13192; bugfix on 0.2.2.1-alpha. + - Handle edge cases in the laplace functions: avoid division by zero, + avoid taking the log of zero, and silence clang type conversion + warnings using round and trunc. Add unit tests for edge cases with + maximal values. Fixes part of bug 13192; bugfix on 0.2.6.2-alpha. + + o Minor bugfixes (tests): + - Fix a memory leak in the ntor test. Fixes bug 17778; bugfix on + 0.2.4.8-alpha. + + o Minor bugfixes (TLS context): + - Assert when the TLS contexts fail to initialize. Fixes bug 17683; + bugfix on 0.0.6. + + o Minor bugfixes (unit tests): + - Check the full results of SHA256 and SHA512 digests in the + unit tests. Bugfix on 0.2.2.4-alpha. Patch by "teor". + + o Code simplification and refactoring: + - Extract the more complicated parts of circuit_mark_for_close into + a new function run periodically before connections are freed. + This change removes more than half of the functions currently + in the "blob". + Closes ticket 17218. + - Clean up a little duplicated code in crypto_expand_key_material_TAP. + Closes ticket 17587; patch from "pfrankw". + - Decouple the list of streams needing to be attached to circuits + from the overall connection list. This change makes it possible to + attach streams quickly while both simplifying Tor's callgraph and + avoiding O(N) scans of the entire connection list. Closes ticket + 17590. + - When a direct directory request fails immediately on launch, + instead of relaunching that request from inside the code that + launches it, instead mark the connection for teardown. This + change simplifies Tor's callback and prevents the directory- + request launching code from invoking itself recursively. + Closes ticket 17589. + + o Documentation: + - Add a description of the correct use of the '--keygen' command-line + option. Closes ticket 17583; based on text by 's7r'. + - Document the minimum HeartbeatPeriod value. Closes ticket 15638. + - Explain actual minima for BandwidthRate. Closes ticket 16382. + - Fix a minor formatting typo in the manpage. Closes ticket + 17791. + - Mention torspec URL in the manpage and point the reader to it + whenever we mention a document that belongs in torspce. + Fixes issue 17392. + + o Removed features: + - Remove client-side support for connecting to Tor servers running + versions of Tor before 0.2.3.6-alpha. These servers didn't + support the v3 TLS handshake protocol, and are no longer allowed + on the Tor network. Implements the client side of ticket + 11150. Based on patches by Tom van der Woerdt. + - Remove code for OpenSSL dynamic locks; OpenSSL doesn't use them. + Closes ticket 17926. + + o Testing: + - Always test both ed25519 backends, so that we can be sure that + our batch-open replacement code works. Part of ticket 16794. + - Cover dns_resolve_impl() in dns.c with unit tests. Implements a + portion of ticket 16831. + - More unit tests for compat_libevent.c. Closes ticket 17075. + Patch from Ola Bini. + - More unit tests for procmon.c. Closes ticket 17078. + Patch from Ola Bini. + - More unit tests for tortls.c. Closes ticket 17082. + Patch from Ola Bini. + - More unit tests for util_format.c. Closes ticket 17084. + Patch from Ola Bini. + - New tests for directory.c functions. Closes ticket 17003. Patch + from Ola Bini. + - New tests for options_validate. Closes ticket 17076. Patch from + Ola Bini. + - Unit tests for directory_handle_command_get. Closes ticket 17004. + Patch from Reinaldo de Souza Jr. + + Changes in version 0.2.7.6 - 2015-12-10 Tor version 0.2.7.6 fixes a major bug in entry guard selection, as well as a minor bug in hidden service reliability. diff --git a/changes/11150 b/changes/11150 deleted file mode 100644 index b4d40ed..0000000 --- a/changes/11150 +++ /dev/null @@ -1,6 +0,0 @@ - o Removed features: - - Remove client-side support for connecting to Tor servers running - versions of Tor before 0.2.3.6-alpha. These servers didn't - support the v3 TLS handshake protocol, and are no longer allowed - on the Tor network. Implements the client side of ticket - 11150. Based on patches by Tom van der Woerdt. diff --git a/changes/17004 b/changes/17004 deleted file mode 100644 index 1dc9a23..0000000 --- a/changes/17004 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - Unit tests for directory_handle_command_get. Closes ticket 17004. - Patch from Reinaldo de Souza Jr. diff --git a/changes/17075 b/changes/17075 deleted file mode 100644 index a91ac67..0000000 --- a/changes/17075 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - More unit tests for compat_libevent.c. Closes ticket 17075. - Patch from Ola Bini. diff --git a/changes/17078 b/changes/17078 deleted file mode 100644 index af02877..0000000 --- a/changes/17078 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - More unit tests for procmon.c. Closes ticket 17078. - Patch from Ola Bini. diff --git a/changes/17082 b/changes/17082 deleted file mode 100644 index 30ed014..0000000 --- a/changes/17082 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - More unit tests for tortls.c. Closes ticket 17082. - Patch from Ola Bini. diff --git a/changes/17084 b/changes/17084 deleted file mode 100644 index 361e26f..0000000 --- a/changes/17084 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - More unit tests for util_format.c. Closes ticket 17084. - Patch from Ola Bini. diff --git a/changes/17573 b/changes/17573 deleted file mode 100644 index 95ef15a..0000000 --- a/changes/17573 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (IPv6): - - Update the limits in max_dl_per_request for IPv6 address - length. Fixes bug 17573; bugfix on 0.2.1.5-alpha. - diff --git a/changes/17826 b/changes/17826 deleted file mode 100644 index 7d0a17a..0000000 --- a/changes/17826 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (build): - - Mark all object files that include micro-revision.i as depending on - it, so as to make our build more reliable with parallel builds. - Fixes bug 17826; bugfix on 0.2.5.1-alpha. - diff --git a/changes/17926 b/changes/17926 deleted file mode 100644 index ee47db6..0000000 --- a/changes/17926 +++ /dev/null @@ -1,3 +0,0 @@ - o Removed features: - - Remove code for OpenSSL dynamic locks; OpenSSL doesn't use them. - Closes ticket 17926. diff --git a/changes/17944 b/changes/17944 deleted file mode 100644 index 0d8ed0a..0000000 --- a/changes/17944 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (portability): - - Use timingsafe_memcmp() where available. Closes ticket 17944; - patch from logan@hackers.mu. diff --git a/changes/7419 b/changes/7419 deleted file mode 100644 index 1073d95..0000000 --- a/changes/7419 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (security): - - Use explicit_bzero or memset_s when present. Previously, we'd use - OpenSSL's OPENSSL_cleanse() function. - Closes ticket 7419; patches from logan@hackers.mu and selven@hackers.mu. - - diff --git a/changes/bug15638 b/changes/bug15638 deleted file mode 100644 index cf5d469..0000000 --- a/changes/bug15638 +++ /dev/null @@ -1,2 +0,0 @@ - o Documentation: - - Document the minimum HeartbeatPeriod value. Closes ticket 15638. diff --git a/changes/bug16382 b/changes/bug16382 deleted file mode 100644 index 8faee98..0000000 --- a/changes/bug16382 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Explain actual minima for BandwidthRate. Closes ticket 16382. - diff --git a/changes/bug16563 b/changes/bug16563 deleted file mode 100644 index 19e59b3..0000000 --- a/changes/bug16563 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (logging): - - In log messages that include a function name, use __FUNCTION__ instead - of __PRETTY_FUNCTION__. In GCC, these are synonymous, but with clang - __PRETTY_FUNCTION__ has extra information we don't need. - Fixes bug 16563; bugfix on 0.0.2pre8. Fix by Tom van der Woerdt. - \ No newline at end of file diff --git a/changes/bug16651 b/changes/bug16651 deleted file mode 100644 index 1b8bd03..0000000 --- a/changes/bug16651 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (compilation): - - - Fix search for libevent libraries on OpenBSD (and similar systems - which install libevent 1 and libevent 2 in parallel). Fixes bug - 16651; bugfix on 0.1.0.7-rc. - Patch from "rubiate". diff --git a/changes/bug16794_ed b/changes/bug16794_ed deleted file mode 100644 index a43c401..0000000 --- a/changes/bug16794_ed +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - Always test both ed25519 backends, so that we can be sure that - our batch-open replacement code works. Part of ticket 16794. diff --git a/changes/bug17003 b/changes/bug17003 deleted file mode 100644 index 8125f0e..0000000 --- a/changes/bug17003 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - New tests for directory.c functions. Closes ticket 17003. Patch - from Ola Bini. diff --git a/changes/bug17026 b/changes/bug17026 deleted file mode 100644 index 30e75c2..0000000 --- a/changes/bug17026 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (security): - - Set unused entires in a smartlist to NULL. This helped catch a - (harmless) bug, and shouldn't affect performance too much. - Implements ticket 17026. - diff --git a/changes/bug17027-reject-private-bind-port b/changes/bug17027-reject-private-bind-port deleted file mode 100644 index e0c222a..0000000 --- a/changes/bug17027-reject-private-bind-port +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (security, exit policies): - - ExitPolicyRejectPrivate rejects more private addresses by default. - Specifically, it rejects - the relay's outbound bind addresses (if configured), and - the relay's configured port addresses (such as ORPort and DirPort). - Fixes bug 17027; bugfix on 0.2.0.11-alpha. Patch by "teor". diff --git a/changes/bug17194 b/changes/bug17194 deleted file mode 100644 index d717489..0000000 --- a/changes/bug17194 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor feature (logging): - - When logging to syslog, allow a tag to be added to the syslog - identity ("Tor"), i.e. the string prepended to every log message. - The tag can be configured by setting SyslogIdentityTag and defaults - to none. Setting it to "foo" will cause logs to be tagged as - "Tor-foo". Closes ticket 17194. - diff --git a/changes/bug17347 b/changes/bug17347 deleted file mode 100644 index 487b132..0000000 --- a/changes/bug17347 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (compilation): - - Fix compilation of sandbox.c with musl-libc. - Fixes bug 17347; bugfix on 0.2.5.1-alpha. - Patch from 'jamestk'. diff --git a/changes/bug17419 b/changes/bug17419 deleted file mode 100644 index 00fde90..0000000 --- a/changes/bug17419 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (safe logging): - - When logging a malformed hostname received through socks4, scrub it - if SafeLogging says we should. Fixes bug 17419; bugfix on 0.1.1.16-rc. diff --git a/changes/bug17544 b/changes/bug17544 deleted file mode 100644 index 4316d07..0000000 --- a/changes/bug17544 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfix (SipHash-2-4 performance): - - Improve performance when hashing non-multiple of 8 sized buffers, - based on Andrew Moon's Public Domain SipHash-2-4 implementation. - Fixes bug 17544; bugfix on 0.2.5.3-alpha. diff --git a/changes/bug17549 b/changes/bug17549 deleted file mode 100644 index f0bb690..0000000 --- a/changes/bug17549 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (compilation): - - Repair some compilation issues with some recent (unreleased, alpha) - vesions of OpenSSL 1.1. Closes ticket 17549. diff --git a/changes/bug17562-DataDirectoryGroupReadable b/changes/bug17562-DataDirectoryGroupReadable deleted file mode 100644 index 2299148..0000000 --- a/changes/bug17562-DataDirectoryGroupReadable +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (unix permissions): - - Introduce DataDirectoryGroupReadable boolean. If set to 1, the - DataDirectory will be made readable by the default GID. - Implements part of ticket 17562. Patch from Jamie Nguyen. - diff --git a/changes/bug17562-allow-root-group-read b/changes/bug17562-allow-root-group-read deleted file mode 100644 index 29978fa..0000000 --- a/changes/bug17562-allow-root-group-read +++ /dev/null @@ -1,7 +0,0 @@ - o Minor features (unix permissions): - - If any directory created by Tor is marked as group readable, the - filesystem group is allowed to be either the default GID or the root - user. Allowing root to read the DataDirectory prevents the need for - CAP_READ_SEARCH when using systemd's CapabilityBoundingSet, or - dac_read_search when using SELinux. - Implements part of ticket 17562. Patch from Jamie Nguyen. diff --git a/changes/bug17562-defer-unix-socket-creation b/changes/bug17562-defer-unix-socket-creation deleted file mode 100644 index 3e21d35..0000000 --- a/changes/bug17562-defer-unix-socket-creation +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (unix permissions): - - Defer creation of Unix sockets until after setuid. This avoids needing - CAP_CHOWN and CAP_FOWNER when using systemd's CapabilityBoundingSet, or - chown and fowner when using SELinux. - Implements part of ticket 17562. Patch from Jamie Nguyen. diff --git a/changes/bug17572-fallback-by-digest b/changes/bug17572-fallback-by-digest deleted file mode 100644 index 3fba123..0000000 --- a/changes/bug17572-fallback-by-digest +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfix (fallback directories): - - Mark fallbacks as "too busy" when they return a 503 response, - rather than just marking authorities. - Fixes bug 17572; bugfix on 5c51b3f1f0d4 released in 0.2.4.7-alpha. - Patch by "teor". diff --git a/changes/bug17583 b/changes/bug17583 deleted file mode 100644 index d77d467..0000000 --- a/changes/bug17583 +++ /dev/null @@ -1,4 +0,0 @@ - o Documentation: - - Add a description of the correct use of the '--keygen' command-line - option. Closes ticket 17583; based on text by 's7r'. - diff --git a/changes/bug17589 b/changes/bug17589 deleted file mode 100644 index 4144af7..0000000 --- a/changes/bug17589 +++ /dev/null @@ -1,7 +0,0 @@ - o Code simplification and refactoring: - - When a direct directory request fails immediately on launch, - instead of relaunching that request from inside the code that - launches it, instead mark the connection for teardown. This - change simplifies Tor's callback and prevents the directory- - request launching code from invoking itself recursively. - Closes ticket 17589. \ No newline at end of file diff --git a/changes/bug17632-no-ipv4-no-localhost b/changes/bug17632-no-ipv4-no-localhost deleted file mode 100644 index 99a2e2c..0000000 --- a/changes/bug17632-no-ipv4-no-localhost +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfix (unit tests): - - Make unit tests pass on IPv6-only systems, and systems without - localhost addresses (like some FreeBSD jails). - Fixes bug 17632; bugfix on 0.2.7.3-rc. - Patch by "teor". diff --git a/changes/bug17638-ipv6-ersatz-socketpair b/changes/bug17638-ipv6-ersatz-socketpair deleted file mode 100644 index 90a74f4..0000000 --- a/changes/bug17638-ipv6-ersatz-socketpair +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfix (IPv6 compatibility, unit tests): - - Make tor_ersatz_socketpair work on IPv6-only systems. - Fixes bug 17638; bugfix on 0.0.2pre8. - Patch by "teor". - diff --git a/changes/bug17675 b/changes/bug17675 deleted file mode 100644 index 8326a0b..0000000 --- a/changes/bug17675 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (linux seccomp2 sandbox): - - Fix a crash when using offline master ed25519 keys with the - Linux seccomp2 sandbox enabled. Fixes bug 17675; bugfix on - 0.2.7.3-alpha. diff --git a/changes/bug17683 b/changes/bug17683 deleted file mode 100644 index e9d4751..0000000 --- a/changes/bug17683 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (TLS context): - - Assert when the TLS contexts fail to initialize. Fixes bug 17683; - bugfix on 0.0.6. diff --git a/changes/bug17686 b/changes/bug17686 deleted file mode 100644 index 78e6c8f..0000000 --- a/changes/bug17686 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (security): - - Adjust Tor's use of OpenSSL's RNG APIs so that they absolutely, - positively are not allowed to fail. Previously we depended on - internals about OpenSSL behavior. Closes ticket 17686. diff --git a/changes/bug17694_strongest b/changes/bug17694_strongest deleted file mode 100644 index 0a8954a..0000000 --- a/changes/bug17694_strongest +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (security): - - Never use the system entropy output directly for anything besides - seeding the PRNG. When we want to generate important keys, instead - of using system entropy directly, hash it with the PRNG stream. - This may help resist certain attacks based on broken OS entropy - implementations. Closes part of ticket 17694. \ No newline at end of file diff --git a/changes/bug17753 b/changes/bug17753 deleted file mode 100644 index 918712f..0000000 --- a/changes/bug17753 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (code correctness): - - Assert that allocated memory held by the reputation code is freed - according to its internal counters. Fixes bug 17753; bugfix on - tor-0.1.1.1-alpha. diff --git a/changes/bug17778 b/changes/bug17778 deleted file mode 100644 index 9844969..0000000 --- a/changes/bug17778 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (tests): - - Fix a memory leak in the ntor test. Fixes bug 17778; bugfix on - 0.2.4.8-alpha. diff --git a/changes/bug17791 b/changes/bug17791 deleted file mode 100644 index f191012..0000000 --- a/changes/bug17791 +++ /dev/null @@ -1,4 +0,0 @@ - o Documentation: - - Fix a minor formatting typo in the manpage. Closes ticket - 17791. - diff --git a/changes/bug17804 b/changes/bug17804 deleted file mode 100644 index bd2a3cb..0000000 --- a/changes/bug17804 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (compilation): - - Replace usage of 'INLINE' with 'inline'. Fixes bug 17804; bugfix - on tor-0.0.2pre8. diff --git a/changes/bug17818 b/changes/bug17818 deleted file mode 100644 index 3d9afe3..0000000 --- a/changes/bug17818 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (compilation): - - Isolate environment variables meant for tests from the rest of the - build system. Fixes bug 17818; bugfix on tor-0.2.7.3-rc. diff --git a/changes/bug17819 b/changes/bug17819 deleted file mode 100644 index 45c55f7..0000000 --- a/changes/bug17819 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (compilation): - - Don't try to use the pthrad_condattr_setclock() function unless - it actually exists. Fixes compilation on NetBSD-6.x. Fixes bug - 17819; bugfix on 0.2.6.3-alpha. diff --git a/changes/bug17827 b/changes/bug17827 deleted file mode 100644 index 04cd3b5..0000000 --- a/changes/bug17827 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (compilation): - - Fix backtrace compilation on FreeBSD. Fixes bug 17827; bugfix on - tor-0.2.5.2-alpha. diff --git a/changes/bug17843 b/changes/bug17843 deleted file mode 100644 index 6cb16a0..0000000 --- a/changes/bug17843 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (logging): - - Remove needless quotes from a log message about unparseable addresses. - Fixes bug 17843; bugfix on 0.2.3.3-alpha. diff --git a/changes/bug17876 b/changes/bug17876 deleted file mode 100644 index 7446336..0000000 --- a/changes/bug17876 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (client, correctness): - - When closing an entry connection, generate a warning if we should - have sent an end cell for it but we haven't. Fixes bug 17876; - bugfix on 0.2.3.2-alpha. - diff --git a/changes/bug17892 b/changes/bug17892 deleted file mode 100644 index 73c26e9..0000000 --- a/changes/bug17892 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (testing): - - Log more information when the backtrace tests fail. - Closes ticket 17892. Patch from "cypherpunks." - diff --git a/changes/bug17893 b/changes/bug17893 deleted file mode 100644 index 06808c0..0000000 --- a/changes/bug17893 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (build): - - Since our build process now uses 'make distcheck', we no longer force - "make dist" to depend on "make check". Closes ticket 17893; - patch from "cypherpunks." diff --git a/changes/bug17906 b/changes/bug17906 deleted file mode 100644 index b9174c3..0000000 --- a/changes/bug17906 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (authorities): - - Update the V3 identity key for dannenberg: it was changed on - 18 November 2015. - Closes task 17906. Patch by "teor". diff --git a/changes/bug17923 b/changes/bug17923 deleted file mode 100644 index d828520..0000000 --- a/changes/bug17923 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (portability): - - Remove an #endif from configure.ac so that we correctly detect - the presence of in6_addr.s6_addr32. Fixes bug 17923; bugfix on - 0.2.0.13-alpha. diff --git a/changes/bug17924 b/changes/bug17924 deleted file mode 100644 index aa5cf58..0000000 --- a/changes/bug17924 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (makefile): - - Remove config.log only from make distclean, not from - make clean. Fixes bug 17924; bugfix on 0.2.4.1-alpha. - diff --git a/changes/bug18050 b/changes/bug18050 deleted file mode 100644 index 4457ed2..0000000 --- a/changes/bug18050 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor bugfixes (relays): - - Check that both the ORPort and DirPort (if present) are reachable - before publishing a relay descriptor. Otherwise, relays publish a - descriptor with DirPort 0 when the DirPort reachability test takes - longer than the ORPort reachability test. - Fixes bug 18050; bugfix on 0.1.0.1-rc. - Reported by "starlight", patch by "teor". diff --git a/changes/bug18089 b/changes/bug18089 deleted file mode 100644 index b1ebd45..0000000 --- a/changes/bug18089 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (security): - - Make memwipe() do nothing when passed a NULL pointer - or zero size. Check size argument to memwipe() for underflow. - Fixes bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. - Reported by "gk", patch by "teor". diff --git a/changes/bug4483-multiple-consensus-downloads b/changes/bug4483-multiple-consensus-downloads deleted file mode 100644 index 7e8bcc2..0000000 --- a/changes/bug4483-multiple-consensus-downloads +++ /dev/null @@ -1,9 +0,0 @@ - o Major features (consensus downloads): - - Schedule multiple in-progress consensus downloads during client - bootstrap. Use the first one that starts downloading, close the - rest. This reduces failures when authorities are slow or down. - Together with the code for feature 15775, it reduces failures due to fallback churn. - Implements ticket 4483 (reduce failures when authorities are down). - Patch by "teor". - Implements IPv4 portions of proposal 210 by "mikeperry" and - "teor". diff --git a/changes/bug6027 b/changes/bug6027 deleted file mode 100644 index 65be544..0000000 --- a/changes/bug6027 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (IPv6 support): - - Allow users to configure directory authorities and fallback - directory servers with IPv6 addresses and ORPorts. Resolves - ticket 6027. diff --git a/changes/check-crypto-errors b/changes/check-crypto-errors deleted file mode 100644 index b3da7a1..0000000 --- a/changes/check-crypto-errors +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfix (crypto): - - Check the return value of HMAC and assert on failure. - Fixes bug 17658; bugfix on 0.2.3.6-alpha. - Patch by "teor". diff --git a/changes/cleanup_17587 b/changes/cleanup_17587 deleted file mode 100644 index a2cecdd..0000000 --- a/changes/cleanup_17587 +++ /dev/null @@ -1,3 +0,0 @@ - o Code simplification and refactoring: - - Clean up a little duplicated code in crypto_expand_key_material_TAP. - Closes ticket 17587; patch from "pfrankw". diff --git a/changes/decouple_circuit_mark b/changes/decouple_circuit_mark deleted file mode 100644 index a852f48..0000000 --- a/changes/decouple_circuit_mark +++ /dev/null @@ -1,6 +0,0 @@ - o Code simplification and refactoring: - - Extract the more complicated parts of circuit_mark_for_close into - a new function run periodically before connections are freed. - This change removes more than half of the functions currently - in the "blob". - Closes ticket 17218. diff --git a/changes/decouple_conn_attach b/changes/decouple_conn_attach deleted file mode 100644 index 8619c4d..0000000 --- a/changes/decouple_conn_attach +++ /dev/null @@ -1,6 +0,0 @@ - o Code simplification and refactoring: - - Decouple the list of streams needing to be attached to circuits - from the overall connection list. This change makes it possible to - attach streams quickly while both simplifying Tor's callgraph and - avoiding O(N) scans of the entire connection list. Closes ticket - 17590. diff --git a/changes/doc17392 b/changes/doc17392 deleted file mode 100644 index 3c93497..0000000 --- a/changes/doc17392 +++ /dev/null @@ -1,4 +0,0 @@ - o Documentation: - - Mention torspec URL in the manpage and point the reader to it - whenever we mention a document that belongs in torspce. - Fixes issue 17392. diff --git a/changes/feature12538 b/changes/feature12538 deleted file mode 100644 index 4e7ea9f..0000000 --- a/changes/feature12538 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (directory system): - Previously only relays who explicitly opened a directory port (DirPort) - accepted directory requests from clients. Now all relays, with and without - a DirPort, who do not disable the DirCache option accept and serve - directory requests sent (tunnelled) through their ORPort. - Closes ticket 12538. diff --git a/changes/feature13696 b/changes/feature13696 deleted file mode 100644 index 21c2188..0000000 --- a/changes/feature13696 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (security, cryptography): - - Use modern system calls to generate strong entropy on platforms that - provide them. Closes ticket 13696. diff --git a/changes/feature14846 b/changes/feature14846 deleted file mode 100644 index 4668761..0000000 --- a/changes/feature14846 +++ /dev/null @@ -1,4 +0,0 @@ - o Major features (controller): - - New "GETINFO hs/service/desc/id/" command to retrieve a hidden service - descriptor from a service's local hidden service descriptor cache. - Closes ticket 14846. diff --git a/changes/feature15775-fallback b/changes/feature15775-fallback deleted file mode 100644 index 3a0ff23..0000000 --- a/changes/feature15775-fallback +++ /dev/null @@ -1,19 +0,0 @@ - o Major features (directory mirrors): - - Include an opt-in trial list of Default Fallback Directories in - add_default_fallback_dir_servers(). - "Tor has included a feature to fetch the initial consensus from nodes - other than the authorities for a while now. We just haven't shipped a - list of alternate locations for clients to go to yet. - Reasons why we might want to ship tor with a list of additional places - where clients can find the consensus is that it makes authority - reachability and BW less important. - We want them to have been around and using their current key, address, - and port for a while now (120 days), and have been running, a guard, - and a v2 directory mirror for most of that time." - We exclude BadExits and tor versions that aren't recommended. - We include an IPv6 address for each FallbackDir (see ticket 8374). - (Tor might not use IPv6 fallbacks until ticket the code for ticket6027 is merged.) - The unit test ensures that we successfully load all included - default fallback directories. - Closes ticket 15775. Patch by "teor". - OnionOO script by "weasel", "teor", "gsathya", and "karsten". diff --git a/changes/feature16774 b/changes/feature16774 deleted file mode 100644 index dc9c329..0000000 --- a/changes/feature16774 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (controller): - - Adds FallbackDir entries to 'GETINFO config/defaults'. Closes tickets - 16774 and 17817. Patch by George Tankersley. diff --git a/changes/feature17076 b/changes/feature17076 deleted file mode 100644 index 50ebc96..0000000 --- a/changes/feature17076 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - New tests for options_validate. Closes ticket 17076. Patch from - Ola Bini. diff --git a/changes/feature17327 b/changes/feature17327 deleted file mode 100644 index 2fab099..0000000 --- a/changes/feature17327 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor feature (IPv6): - - Add a flag ipv6=address:orport to the DirAuthority and FallbackDir torrc - options. Add hard-coded ipv6 addresses for directory authorities with - ipv6 lines in their descriptors. - Closes ticket 17327; patch from Nick Mathewson / "teor". diff --git a/changes/feature17576-UseDefaultFallbackDirs b/changes/feature17576-UseDefaultFallbackDirs deleted file mode 100644 index 68843c4..0000000 --- a/changes/feature17576-UseDefaultFallbackDirs +++ /dev/null @@ -1,4 +0,0 @@ - o Minor feature (fallback directories): - - Add UseDefaultFallbackDirs, which enables any hard-coded fallback - directory mirrors. Default is 1, set it to 0 to disable fallbacks. - Implements ticket 17576. Patch by "teor". diff --git a/changes/feature17608 b/changes/feature17608 deleted file mode 100644 index d56bb7d..0000000 --- a/changes/feature17608 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor feature (refactoring): - - Move logging of redundant policy entries in - policies_parse_exit_policy_internal into its own function. - Closes ticket 17608; patch from "juce". diff --git a/changes/feature17663 b/changes/feature17663 deleted file mode 100644 index baad943..0000000 --- a/changes/feature17663 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor feature (crypto): - - Add SHA512 support to crypto.c. Closes ticket 17663; patch from - George Tankersley. diff --git a/changes/feature17796 b/changes/feature17796 deleted file mode 100644 index d96daed..0000000 --- a/changes/feature17796 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (crypto): - - When allocating a digest state object, allocate no more space than we - actually need. Previously, we were allocating as much space as the - state for the largest algorithm would need. This change saves up to - 672 bytes per circuit. Closes ticket 17796. - diff --git a/changes/feature17863 b/changes/feature17863 deleted file mode 100644 index 86c4e2c..0000000 --- a/changes/feature17863 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor feature (IPv6): - - Add address policy assume_action support for IPv6 addresses. - - Limit IPv6 mask bits to 128. - - Warn when comparing against an AF_UNSPEC address in a policy, - it's almost always a bug. - Closes ticket 17863; patch by "teor". diff --git a/changes/feature17864 b/changes/feature17864 deleted file mode 100644 index 1cf1562..0000000 --- a/changes/feature17864 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor feature (directory downloads): - - Wait for busy authorities and fallbacks to become non-busy when - bootstrapping. (A similar change was made in 6c443e987d for - directory servers chosen from the consensus.) - Closes ticket 17864; patch by "teor". diff --git a/changes/feature17950 b/changes/feature17950 deleted file mode 100644 index bc255a7..0000000 --- a/changes/feature17950 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (relay, address discovery): - - Add a family argument to get_interface_addresses_raw() and - subfunctions to make network interface address interogation more - efficient. Now Tor can specifically ask for IPv4, IPv6 or both - types of interfaces from the operating system. Resolves ticket 17950. diff --git a/changes/feature17951 b/changes/feature17951 deleted file mode 100644 index 67a6a8f..0000000 --- a/changes/feature17951 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (relay, address discovery): - - When get_interface_address6_list(.,AF_UNSPEC,.) is called and fails - to enumerate interface addresses using the platform-specific API, - have it rely on the UDP socket fallback technique to try and find - out what IP addresses (both IPv4 and IPv6) our machine has. Resolves - ticket 17951. diff --git a/changes/feature17986 b/changes/feature17986 deleted file mode 100644 index 8039701..0000000 --- a/changes/feature17986 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (security): - - Use SecureMemoryWipe() function to securely clean memory on - Windows. Implements feature 17986. diff --git a/changes/feature8195 b/changes/feature8195 deleted file mode 100644 index 5c9a367..0000000 --- a/changes/feature8195 +++ /dev/null @@ -1,6 +0,0 @@ - o Major features (relay): - - When Tor is started as root on Linux and told to switch user ID, it - can now retain the capabilitity to bind to low ports. By default, - Tor will do this only when it's switching user ID and some low - ports have been configured. You can change this behavior with - the new option KeepBindCapabilities. Closes ticket 8195. diff --git a/changes/feature8961-replaycache-sha256 b/changes/feature8961-replaycache-sha256 deleted file mode 100644 index c761aa8..0000000 --- a/changes/feature8961-replaycache-sha256 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (replaycache): - - The replay cache now uses SHA256 instead of SHA1. - Implements feature 8961. - Patch by "teor", issue reported by "rransom". diff --git a/changes/first-hop-no-private b/changes/first-hop-no-private deleted file mode 100644 index 4cef638..0000000 --- a/changes/first-hop-no-private +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfix (relays, hidden services): - - Refuse connection requests to private OR addresses unless - ExtendAllowPrivateAddresses is set. Previously, tor would - connect, then refuse to send any cells to a private address. - Fixes bugs 17674 and 8976; bugfix on 0.2.3.21-rc. - Patch by "teor". diff --git a/changes/geoip-january2016 b/changes/geoip-january2016 deleted file mode 100644 index 0d94665..0000000 --- a/changes/geoip-january2016 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (geoip): - - Update geoip and geoip6 to the January 5 2016 Maxmind GeoLite2 - Country database. - diff --git a/changes/getinfo-private-exitpolicy b/changes/getinfo-private-exitpolicy deleted file mode 100644 index 29b3d76..0000000 --- a/changes/getinfo-private-exitpolicy +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (exit policies, controllers): - - Add controller getinfo exit-policy/reject-private/[default,relay] - for the reject rules added by ExitPolicyRejectPrivate. This makes - it easier for stem to display exit policies. - - Add unit tests for getinfo exit-policy/*. - Finishes implementation for ticket 17183. Patch by "teor". diff --git a/changes/laplace-edge-cases b/changes/laplace-edge-cases deleted file mode 100644 index b83346e..0000000 --- a/changes/laplace-edge-cases +++ /dev/null @@ -1,9 +0,0 @@ - o Minor bugfixes (statistics code): - - Handle edge cases in the laplace functions: avoid division by zero, - avoid taking the log of zero, and silence clang type conversion - warnings using round and trunc. Add unit tests for edge cases with - maximal values. Fixes part of bug 13192; bugfix on 0.2.6.2-alpha. - - Consistently check for overflow in round_*_to_next_multiple_of - functions, and add unit tests with additional and maximal values. - Fixes part of bug 13192; bugfix on 0.2.2.1-alpha. - diff --git a/changes/log_heartbeat_test b/changes/log_heartbeat_test deleted file mode 100644 index 7bcc53f..0000000 --- a/changes/log_heartbeat_test +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfix (testing): - - The test for log_heartbeat was incorrectly failing in timezones - with non-integer offsets. Instead of comparing the end of the - time string against a constant, compare it to the output of - format_local_iso_time when given the correct input. - Fixes bug 18039; bugfix on 0.2.5.4-alpha. diff --git a/changes/rand-failure-modes b/changes/rand-failure-modes deleted file mode 100644 index cc6ef47..0000000 --- a/changes/rand-failure-modes +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (unit tests, random number generation): - - Add unit tests that check for common RNG failure modes, such as - returning all zeroes, identical values, or incrementing values - (OpenSSL's rand_predictable feature). - Patch by "teor". diff --git a/changes/routerset-parse-IPv6-literals b/changes/routerset-parse-IPv6-literals deleted file mode 100644 index 52026f3..0000000 --- a/changes/routerset-parse-IPv6-literals +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (routersets, IPv6): - - routerset_parse now accepts IPv6 literal addresses. - Fixes bug 17060; bugfix on 0.2.1.3-alpha. Patch by "teor". diff --git a/changes/sha-unit-tests b/changes/sha-unit-tests deleted file mode 100644 index 437bff3..0000000 --- a/changes/sha-unit-tests +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (unit tests): - - Check the full results of SHA256 and SHA512 digests in the - unit tests. Bugfix on 0.2.2.4-alpha. Patch by "teor". diff --git a/changes/test16831 b/changes/test16831 deleted file mode 100644 index 7db2d14..0000000 --- a/changes/test16831 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - Cover dns_resolve_impl() in dns.c with unit tests. Implements a - portion of ticket 16831. diff --git a/changes/ticket15989 b/changes/ticket15989 deleted file mode 100644 index a0a904b..0000000 --- a/changes/ticket15989 +++ /dev/null @@ -1,9 +0,0 @@ - o Minor features (accounting): - - Added two modes to AccountingRule in torrc for - limiting just input or just output. - Closes ticket 15989; patch from "unixninja92". - - o Minor bugfixes (accounting): - - The max bandwidth when using AccountRule sum - is now correctly logged. Fixes bug 18024; bugfix on 0.2.6.1-alpha. - Patch from "unixninja92". diff --git a/changes/ticket17158 b/changes/ticket17158 deleted file mode 100644 index 6332248..0000000 --- a/changes/ticket17158 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (fallback directories): - - Add a set of default fallback directories for the 0.2.8 alpha releases. - Closes ticket 17158. - Patch by "teor". diff --git a/changes/warn-when-time-goes-backwards b/changes/warn-when-time-goes-backwards deleted file mode 100644 index 8a9485b..0000000 --- a/changes/warn-when-time-goes-backwards +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (security, clock): - - Warn when the system clock is set back in time (when the - state file was last written in the future). Tor doesn't know - that consensuses have expired if the clock is in the past. - Patch by "teor". Implements ticket 17188. diff --git a/scripts/maint/sortChanges.py b/scripts/maint/sortChanges.py index 7e25cef..d6ec0e2 100755 --- a/scripts/maint/sortChanges.py +++ b/scripts/maint/sortChanges.py @@ -16,10 +16,36 @@ def fetch(fn): s = "%s\n" % s.rstrip() return s

+CSR='Code simplification and refactoring' + +REPLACEMENTS = { + # plurals + 'Minor bugfix' : 'Minor bugfixes', + 'Major bugfix' : 'Major bugfixes', + 'Minor feature' : 'Minor features', + 'Major feature' : 'Major features', + 'Removed feature' : 'Removed features', + 'Code simplification and refactorings' : CSR, + 'Code simplifications and refactoring' : CSR, + 'Code simplifications and refactorings' : CSR, + + # wrong words + 'Minor fix' : 'Minor bugfixes', + 'Major fix' : 'Major bugfixes', + 'Minor fixes' : 'Minor bugfixes', + 'Major fixes' : 'Major bugfixes', + 'Minor enhancement' : 'Minor features', + 'Minor enhancements' : 'Minor features', + 'Major enhancement' : 'Major features', + 'Major enhancements' : 'Major features', +} + def score(s,fname=None): m = re.match(r'^ +o ([^\n]*)\n(.*)', s, re.M|re.S) if not m: print >>sys.stderr, "Can't score %r from %s"%(s,fname) + heading = m.group(1) + heading = REPLACEMENTS.get(heading, heading) lw = m.group(1).lower() if lw.startswith("major feature"): score = 0 @@ -36,7 +62,7 @@ def score(s,fname=None): else: score = 100

- return (score, lw, m.group(1), m.group(2)) + return (score, lw, heading, m.group(2))

def splitChanges(s): this_entry = []