[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-commits] [tor/master] Run the format_changelog script for initial cleanup
commit 90928100b6e31268a1592a6876261510b625a8f9
Author: Nick Mathewson <nickm@xxxxxxxxxxxxxx>
Date: Thu Feb 5 14:03:15 2015 -0500
Run the format_changelog script for initial cleanup
---
ChangeLog | 379 +++++++++++++++++++++++++++++++------------------------------
1 file changed, 190 insertions(+), 189 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index 271a674..1343aba 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,31 +1,30 @@
Changes in version 0.2.6.3-alpha - 2015-02-??
-
blah blah blah
+ o Major features (security):
+ - Implementation of an AF_UNIX socket option to implement a SOCKS
+ proxy reachable by Unix Domain Socket. This allows client
+ applications to communicate with Tor without having the ability to
+ create AF_INET or AF_INET6 family sockets. If an application has
+ permission to create a socket with AF_UNIX, it may directly
+ communicate with Tor as if it were an other SOCKS proxy. This
+ should allow high risk applications to be entirely prevented from
+ connecting directly with TCP/IP, they will be able to only connect
+ to the internet through AF_UNIX and only through Tor. To create a
+ socket of this type, use the syntax "unix:/path/to/socket". Closes
+ ticket 12585.
+
o Major features (changed defaults):
- - Prevent relay operators from unintentionally running exits: When
- a relay is configured as an exit node, we now warn the user
- unless the 'ExitRelay' option is set to 1. We warn even more
- loudly if the relay is configured with the default exit policy,
- since this tends to indicate accidental misconfiguration.
- Setting 'ExitRelay' to 0 stops Tor from running as an exit relay.
- Closes ticket 10067.
-
- o Major features (security)
- - Implementation of an AF_UNIX socket option to implement a SOCKS
- proxy reachable by Unix Domain Socket. This allows client applications to
- communicate with Tor without having the ability to create AF_INET or
- AF_INET6 family sockets. If an application has permission to create a socket
- with AF_UNIX, it may directly communicate with Tor as if it were an other
- SOCKS proxy. This should allow high risk applications to be entirely prevented
- from connecting directly with TCP/IP, they will be able to only connect to the
- internet through AF_UNIX and only through Tor.
- To create a socket of this type, use the syntax "unix:/path/to/socket".
- Closes ticket 12585.
+ - Prevent relay operators from unintentionally running exits: When a
+ relay is configured as an exit node, we now warn the user unless
+ the 'ExitRelay' option is set to 1. We warn even more loudly if
+ the relay is configured with the default exit policy, since this
+ tends to indicate accidental misconfiguration. Setting 'ExitRelay'
+ to 0 stops Tor from running as an exit relay. Closes ticket 10067.
o Major features (hidden services):
- Support mapping hidden service virtual ports to AF_UNIX sockets on
- suitable platforms. Resolves ticket #11485.
+ suitable platforms. Resolves ticket #11485.
o Major features (performance):
- Refactor the CPU worker implementation for better performance by
@@ -37,35 +36,31 @@ Changes in version 0.2.6.3-alpha - 2015-02-??
memory, avoiding kernel IO where possible, and keeping more
request in flight at once. Resolves issue #9682.
- o Removed features:
- - To avoid confusion with the 'ExitRelay' option, 'ExitNode' is no
- longer silently accepted as an alias for 'ExitNodes'.
-
o Major bugfixes (client):
- - Allow MapAddress and AutomapHostsOnResolve to work together when an
- address is mapped into another address type that must be
- automapped at resolve time. Fixes bug 7555; bugfix on
- 0.2.0.1-alpha.
+ - Allow MapAddress and AutomapHostsOnResolve to work together when
+ an address is mapped into another address type that must be
+ automapped at resolve time. Fixes bug 7555; bugfix
+ on 0.2.0.1-alpha.
o Major bugfixes (exit node stability):
- - Fix an assertion failure that could occur under high DNS load. Fixes
- bug 14129; bugfix on Tor 0.0.7rc1. Found by "jowr"; diagnosed and fixed
- by "cypherpunks".
+ - Fix an assertion failure that could occur under high DNS load.
+ Fixes bug 14129; bugfix on Tor 0.0.7rc1. Found by "jowr";
+ diagnosed and fixed by "cypherpunks".
o Major bugfixes (mixed relay-client operation):
- When running as a relay and a client at the same time (not
- recommended), if we decide not to use a new guard because we
- want to retry older guards, only close the locally-originating
- circuits passing through that guard. Previously we would close
- all the circuits. Fixes bug 9819; bugfix on
- 0.2.1.1-alpha. Reported by "skruffy".
+ recommended), if we decide not to use a new guard because we want
+ to retry older guards, only close the locally-originating circuits
+ passing through that guard. Previously we would close all the
+ circuits. Fixes bug 9819; bugfix on 0.2.1.1-alpha. Reported
+ by "skruffy".
o Minor features (authorities, testing):
- Create TestingDirAuthVoteHSDir like TestingDirAuthVoteExit/Guard.
- Ensures that authorities vote the HSDir flag for the listed
- relays regardless of uptime or ORPort connectivity.
- Respects the value of VoteOnHidServDirectoriesV2.
- Partial implementation for ticket 14067. Patch by "teor".
+ Ensures that authorities vote the HSDir flag for the listed relays
+ regardless of uptime or ORPort connectivity. Respects the value of
+ VoteOnHidServDirectoriesV2. Partial implementation for ticket
+ 14067. Patch by "teor".
o Minor features (build):
- New --disable-system-torrc compile-time option to prevent Tor from
@@ -74,51 +69,54 @@ Changes in version 0.2.6.3-alpha - 2015-02-??
o Minor features (controller):
- Include SOCKS_USERNAME and SOCKS_PASSWORD values in controller
- events to let controllers observe circuit isolation inputs.
- Closes ticket 8405.
- - ControlPort now supports the unix:/path/to/dir syntax as an alternative
- to the ControlSocket option, for consistency with SocksPort and
- hidden services. Closes ticket 14451.
- - New "GETINFO bw-event-cache" to get information about recent bandwidth
- events. Closes ticket 14128. Useful for controllers to get recent
- bandwidth history after the fix for 13988.
+ events to let controllers observe circuit isolation inputs. Closes
+ ticket 8405.
+ - ControlPort now supports the unix:/path/to/dir syntax as an
+ alternative to the ControlSocket option, for consistency with
+ SocksPort and hidden services. Closes ticket 14451.
+ - New "GETINFO bw-event-cache" to get information about recent
+ bandwidth events. Closes ticket 14128. Useful for controllers to
+ get recent bandwidth history after the fix for 13988.
o Minor features (directory client):
- - When downloading server- or microdescriptors from a directory server,
- we no longer launch multiple simultaneous requests to the same server.
- This reduces load on the directory servers, especially when directory
- guards are in use. Closes ticket 9969.
+ - When downloading server- or microdescriptors from a directory
+ server, we no longer launch multiple simultaneous requests to the
+ same server. This reduces load on the directory servers,
+ especially when directory guards are in use. Closes ticket 9969.
- When downloading server- or microdescriptors over a tunneled
- connection, do not limit the length of our request to what the Squid
- proxy is willing to handle. Part of ticket 9969.
+ connection, do not limit the length of our request to what the
+ Squid proxy is willing to handle. Part of ticket 9969.
o Minor features (directory system):
- - Authorities can now vote on the correct digests and latest versions for
- different software packages. This allows packages that include Tor to use
- the Tor authority system as a way to get notified of updates and their
- correct digests. Implements proposal 227. Closes ticket 10395.
+ - Authorities can now vote on the correct digests and latest
+ versions for different software packages. This allows packages
+ that include Tor to use the Tor authority system as a way to get
+ notified of updates and their correct digests. Implements proposal
+ 227. Closes ticket 10395.
o Minor features (directory, memory usage):
- When we have recently been under memory pressure (over 3/4 of
- MaxMemInQueues is allocated), then allocate smaller zlib objects for
- small requests. Closes ticket 11791.
+ MaxMemInQueues is allocated), then allocate smaller zlib objects
+ for small requests. Closes ticket 11791.
o Minor features (DOS resistance):
- - Count the total number of bytes used storing hidden service descriptors
- against the value of MaxMemInQueues. If we're low on memory, and more
- than 20% of our memory is used holding hidden service descriptors, free
- them until no more than 10% of our memory holds hidden service
- descriptors. Free the least recently fetched descriptors first.
- Resolves ticket 13806.
+ - Count the total number of bytes used storing hidden service
+ descriptors against the value of MaxMemInQueues. If we're low on
+ memory, and more than 20% of our memory is used holding hidden
+ service descriptors, free them until no more than 10% of our
+ memory holds hidden service descriptors. Free the least recently
+ fetched descriptors first. Resolves ticket 13806.
o Minor features (geoip):
- - Update geoip to the January 7 2015 Maxmind GeoLite2 Country database.
- - Update geoip6 to the January 7 2015 Maxmind GeoLite2 Country database.
+ - Update geoip to the January 7 2015 Maxmind GeoLite2
+ Country database.
+ - Update geoip6 to the January 7 2015 Maxmind GeoLite2
+ Country database.
o Minor features (Guard nodes):
- Reduce the time delay before saving guard status to disk from 10
minute to 30 seconds (or from one hour to 10 minutes if
- AvoidDiskWrites is set). Closes ticket 12485.
+ AvoidDiskWrites is set). Closes ticket 12485.
o Minor features (hidden service):
- Make hidden service Sybil attacks harder by changing the minimum
@@ -127,201 +125,201 @@ Changes in version 0.2.6.3-alpha - 2015-02-??
- New option "HiddenServiceAllowUnknownPorts" to allow hidden
services to disable the anti-scanning feature introduced in
0.2.6.2-alpha. With this option not set, a connection to an
- unlisted port closes the circuit. With this option set, only a
- RELAY_DONE cell is sent. Closes ticket #14084.
+ unlisted port closes the circuit. With this option set, only a
+ RELAY_DONE cell is sent. Closes ticket #14084.
o Minor features (interface):
- - Implement '-f -' CLI suboption to allow torrc to be read
- from standard input, thus not requiring to store torrc in file
- system. Implements feature 13865.
+ - Implement '-f -' CLI suboption to allow torrc to be read from
+ standard input, thus not requiring to store torrc in file system.
+ Implements feature 13865.
o Minor features (logging):
- - Add a count of unique clients to the bridge heartbeat message. Resolves
- ticket 6852.
+ - Add a count of unique clients to the bridge heartbeat message.
+ Resolves ticket 6852.
- Suppress "router info incompatible with extra info" message when
reading extrainfo documents from cache. (This message got loud
- around when we closed bug 9812 in 0.2.6.2-alpha.) Closes ticket
- 13762.
+ around when we closed bug 9812 in 0.2.6.2-alpha.) Closes
+ ticket 13762.
- Elevate authorized-client message from DEBUG to INFO. Closes
ticket 14015.
- o Minor features (systemd):
- - Various improvements and modernizations in systemd hardening support.
- Closes ticket 13805. Patch from Craig Andrews.
-
o Minor features (stability):
- Prevent bugs from causing infinite loops in our hash-table
iteration code by adding assertions that cached hash values have
not been corrupted. Closes ticket 11737.
+ o Minor features (systemd):
+ - Various improvements and modernizations in systemd hardening
+ support. Closes ticket 13805. Patch from Craig Andrews.
+
o Minor features (testing networks):
- Drop the minimum RendPostPeriod on a testing network to 5 seconds,
- and the default to 2 minutes. Closes ticket 13401. Patch by "nickm".
- - Drop the MIN_REND_INITIAL_POST_DELAY on a testing network to 5 seconds,
- but keep the default at 30 seconds. This reduces HS bootstrap time to
- around 25 seconds. Change src/test/test-network.sh default time to match.
- Closes ticket 13401. Patch by "teor".
+ and the default to 2 minutes. Closes ticket 13401. Patch
+ by "nickm".
+ - Drop the MIN_REND_INITIAL_POST_DELAY on a testing network to 5
+ seconds, but keep the default at 30 seconds. This reduces HS
+ bootstrap time to around 25 seconds. Change src/test/test-
+ network.sh default time to match. Closes ticket 13401. Patch
+ by "teor".
o Minor bugfixes (automapping):
- - Prevent changes to other options from removing the wildcard value "."
- from "AutomapHostsSuffixes".
- Fixes bug 12509; bugfix on 0.2.0.1-alpha.
+ - Prevent changes to other options from removing the wildcard value
+ "." from "AutomapHostsSuffixes". Fixes bug 12509; bugfix
+ on 0.2.0.1-alpha.
o Minor bugfixes (build):
- - Avoid warnings when building with systemd 209 or later.
- Fixes bug 14072; bugfix on 0.2.6.2-alpha. Patch from "h.venev".
+ - Avoid warnings when building with systemd 209 or later. Fixes bug
+ 14072; bugfix on 0.2.6.2-alpha. Patch from "h.venev".
o Minor bugfixes (client DNS):
- Report the correct cached DNS expiration times. Previously, we
- would report everything as "never expires." Fixes bug 14193;
+ would report everything as "never expires." Fixes bug 14193;
bugfix on 0.2.3.17-beta.
- - Avoid a small memory leak when we find a cached answer for a reverse
- DNS lookup in a client-side DNS cache. (Remember, client-side DNS
- caching is off by default, and is not recommended.) Fixes bug 14259;
- bugfix on 0.2.0.1-alpha.
+ - Avoid a small memory leak when we find a cached answer for a
+ reverse DNS lookup in a client-side DNS cache. (Remember, client-
+ side DNS caching is off by default, and is not recommended.) Fixes
+ bug 14259; bugfix on 0.2.0.1-alpha.
o Minor bugfixes (client, automapping):
- Check for a missing option value in parse_virtual_addr_network
- before asserting on the NULL in tor_addr_parse_mask_ports.
- This avoids crashing on torrc lines like
- Vi[rtualAddrNetworkIPv[4|6]] when no value follows the option.
- Fixes bug 14142; bugfix on 0.2.4.7-alpha.
- Patch by "teor".
- - Fix a memory leak when using AutomapHostsOnResolve.
- Fixes bug 14195; bugfix on 0.1.0.1-rc.
+ before asserting on the NULL in tor_addr_parse_mask_ports. This
+ avoids crashing on torrc lines like Vi[rtualAddrNetworkIPv[4|6]]
+ when no value follows the option. Fixes bug 14142; bugfix on
+ 0.2.4.7-alpha. Patch by "teor".
+ - Fix a memory leak when using AutomapHostsOnResolve. Fixes bug
+ 14195; bugfix on 0.1.0.1-rc.
+
+ o Minor bugfixes (client, bridges):
+ - When we are using bridges and we had a network connectivity
+ problem, only retry connecting to our currently configured
+ bridges, not all bridges we know about and remember using. Fixes
+ bug 14216; bugfix on tor-0.2.2.17-alpha. Patch from arma.
o Minor bugfixes (client, IPV6):
- Reject socks requests to literal IPv6 addresses when IPv6Traffic
flag is not set; and not because the NoIPv4Traffic flag was set.
- Previously we'd looked at the NoIPv4Traffic flag for both types
- of literal addresses. Fixes bug 14280; bugfix on 0.2.4.7-alpha.
-
- o Minor bugfixes (client, bridges):
- - When we are using bridges and we had a network connectivity problem, only
- retry connecting to our currently configured bridges, not all bridges we
- know about and remember using.
- Fixes bug 14216; bugfix on tor-0.2.2.17-alpha. Patch from arma.
+ Previously we'd looked at the NoIPv4Traffic flag for both types of
+ literal addresses. Fixes bug 14280; bugfix on 0.2.4.7-alpha.
o Minor bugfixes (compilation):
- - Build without warnings with the stock OpenSSL srtp.h header,
- which has a duplicate declaration of SSL_get_selected_srtp_profile().
+ - Build without warnings with the stock OpenSSL srtp.h header, which
+ has a duplicate declaration of SSL_get_selected_srtp_profile().
Fixes bug 14220; this is OpenSSL's bug, not ours.
- - The address of an array in the middle of a structure will
- always be non-NULL. clang recognises this and complains.
- Disable the tautologous and redundant check to silence
- this warning.
- Fixes bug 14001; bugfix on 0.2.1.2-alpha.
+ - The address of an array in the middle of a structure will always
+ be non-NULL. clang recognises this and complains. Disable the
+ tautologous and redundant check to silence this warning. Fixes bug
+ 14001; bugfix on 0.2.1.2-alpha.
- Compile correctly with (unreleased) OpenSSL 1.1.0 headers.
Addresses ticket 14188.
o Minor bugfixes (controller):
- Add a code for the END_CIRC_REASON_IP_NOW_REDUNDANT circuit close
- reason. Fixes bug 14207; bugfix on 0.2.6.2-alpha.
- - Avoid crashing on a malformed EXTENDCIRCUIT command. Fixes bug 14116;
- bugfix on 0.2.2.9-alpha.
+ reason. Fixes bug 14207; bugfix on 0.2.6.2-alpha.
+ - Avoid crashing on a malformed EXTENDCIRCUIT command. Fixes bug
+ 14116; bugfix on 0.2.2.9-alpha.
o Minor bugfixes (directory authority):
- - Allow directory authorities to fetch more data from one
- another if they find themselves missing lots of votes.
- Previously, they had been bumping against the 10 MB queued
- data limit. Fixes bug 14261; bugfix on 0.1.2.5-alpha.
+ - Allow directory authorities to fetch more data from one another if
+ they find themselves missing lots of votes. Previously, they had
+ been bumping against the 10 MB queued data limit. Fixes bug 14261;
+ bugfix on 0.1.2.5-alpha.
- Enlarge the buffer to read bw-auth generated files to avoid an
issue when parsing the file in dirserv_read_measured_bandwidths().
Fixes bug 14125; bugfix on 0.2.2.1-alpha.
o Minor bugfixes (file handling):
- Stop failing when key files are zero-length. Instead, generate new
- keys, and overwrite the empty key files.
- Fixes bug 13111; bugfix on all versions of Tor. Patch by "teor".
+ keys, and overwrite the empty key files. Fixes bug 13111; bugfix
+ on all versions of Tor. Patch by "teor".
- Stop generating a fresh .old RSA key file when the .old file is
missing. Fixes part of 13111; bugfix on 0.0.6rc1.
- Avoid overwriting .old key files with empty key files.
- - Skip loading zero-length extra info store, router store, stats, state,
- and key files.
- - Avoid crashing when trying to reload a torrc specified as a relative
- path with RunAsDaemon turned on. Fixes bug 13397; bugfix on
- 0.2.3.11-alpha.
+ - Skip loading zero-length extra info store, router store, stats,
+ state, and key files.
+ - Avoid crashing when trying to reload a torrc specified as a
+ relative path with RunAsDaemon turned on. Fixes bug 13397; bugfix
+ on 0.2.3.11-alpha.
o Minor bugfixes (hidden services):
- Close the intro circuit once we don't have any more usable intro
- points instead of making it timeout at some point. This also make sure
- no extra HS descriptor fetch is triggered.
- Fixes bug 14224; bugfix on 0.0.6.
- - When fetching a hidden service descriptor for a down service that we
- recently up, do not keep refetching until we try the same replica twice
- in a row. Fixes bug 14219; bugfix on 0.2.0.10-alpha.
- - Successfully launch Tor with a nonexistent hidden service directory.
- Our fix for bug 13942 didn't catch this case. Fixes bug 14106;
- bugfix on 0.2.6.2-alpha.
+ points instead of making it timeout at some point. This also make
+ sure no extra HS descriptor fetch is triggered. Fixes bug 14224;
+ bugfix on 0.0.6.
+ - When fetching a hidden service descriptor for a down service that
+ we recently up, do not keep refetching until we try the same
+ replica twice in a row. Fixes bug 14219; bugfix on 0.2.0.10-alpha.
+ - Successfully launch Tor with a nonexistent hidden service
+ directory. Our fix for bug 13942 didn't catch this case. Fixes bug
+ 14106; bugfix on 0.2.6.2-alpha.
o Minor bugfixes (logging):
- Avoid crashing when there are more log domains than entries in
- domain_list. Bugfix on 0.2.3.1-alpha.
- - Add a string representation for LD_SCHED. Fixes bug 14740;
- bugfix on 0.2.6.1-alpha.
+ domain_list. Bugfix on 0.2.3.1-alpha.
+ - Add a string representation for LD_SCHED. Fixes bug 14740; bugfix
+ on 0.2.6.1-alpha.
o Minor bugfixes (parsing):
- Stop accepting milliseconds (or other junk) at the end of
- descriptor publication times. Fixes bug 9286; bugfix on
- 0.0.2pre25.
+ descriptor publication times. Fixes bug 9286; bugfix on 0.0.2pre25.
- Support two-number and three-number version numbers correctly, in
- case we change the Tor versioning system in the future. Fixes bug
+ case we change the Tor versioning system in the future. Fixes bug
13661; bugfix on 0.0.8pre1.
o Minor bugfixes (portability):
- - Fix the ioctl()-based network interface lookup code so that it will
- work on systems that have variable-length struct ifreq, for example
- Mac OS X.
+ - Fix the ioctl()-based network interface lookup code so that it
+ will work on systems that have variable-length struct ifreq, for
+ example Mac OS X.
o Minor bugfixes (shutdown):
- When shutting down, always call event_del() on lingering read or
write events before freeing them. Otherwise, we risk double-frees
- or read-after-frees in event_base_free(). Fixes bug 12985; bugfix on
- 0.1.0.2-rc.
+ or read-after-frees in event_base_free(). Fixes bug 12985; bugfix
+ on 0.1.0.2-rc.
o Minor bugfixes (small memory leaks):
- Avoid leaking memory when using IPv6 virtual address mappings.
- Fixes bug 14123; bugfix on 0.2.4.7-alpha. Patch by Tom van der
- Woerdt.
+ Fixes bug 14123; bugfix on 0.2.4.7-alpha. Patch by Tom van
+ der Woerdt.
o Minor bugfixes (statistics):
- Increase period over which bandwidth observations are aggregated
from 15 minutes to 4 hours. Fixes bug 13988; bugfix on 0.0.8pre1.
o Minor bugfixes (systemd support):
- - Fix detection and operation of systemd watchdog. Fixes part of
- bug 14141; bugfix on 0.2.6.2-alpha. Patch from Tomasz Torcz.
- - Run correctly under systemd with the RunAsDaemon option set.
- Fixes part of bug 14141; bugfix on 0.2.5.7-rc. Patch from Tomasz
- Torcz.
- - Inform the systemd supervisor about more changes in the Tor process
- status. Implements part of ticket 14141. Patch from Tomasz Torcz.
+ - Fix detection and operation of systemd watchdog. Fixes part of bug
+ 14141; bugfix on 0.2.6.2-alpha. Patch from Tomasz Torcz.
+ - Run correctly under systemd with the RunAsDaemon option set. Fixes
+ part of bug 14141; bugfix on 0.2.5.7-rc. Patch from Tomasz Torcz.
+ - Inform the systemd supervisor about more changes in the Tor
+ process status. Implements part of ticket 14141. Patch from
+ Tomasz Torcz.
- Cause the "--disable-systemd" option to actually disable systemd
- support. Fixes bug 14350; bugfix on 0.2.6.2-alpha. Patch from
- "blueness".
+ support. Fixes bug 14350; bugfix on 0.2.6.2-alpha. Patch
+ from "blueness".
o Minor bugfixes (TLS):
- - Check more thoroughly throughout the TLS code for possible unlogged
- TLS errors. Possible diagnostic or fix for bug 13319.
+ - Check more thoroughly throughout the TLS code for possible
+ unlogged TLS errors. Possible diagnostic or fix for bug 13319.
o Code simplification and refactoring:
- - Move fields related to isolating and configuring client ports
- into a shared structure. Previously, they were duplicated across
- port_cfg_t, listener_connection_t, and edge_connection_t.
- Failure to copy one of them correctly had been the cause of at
- least one bug in the past. Closes ticket 8546.
+ - Move fields related to isolating and configuring client ports into
+ a shared structure. Previously, they were duplicated across
+ port_cfg_t, listener_connection_t, and edge_connection_t. Failure
+ to copy one of them correctly had been the cause of at least one
+ bug in the past. Closes ticket 8546.
- Refactor the get_interface_addresses_raw() Doom-function into
multiple smaller and easier to understand subfunctions. Cover the
- resulting subfunctions with unit-tests. Fixes a significant portion
- of issue 12376.
- - Remove workaround in dirserv_thinks_router_is_hs_dir() that was only
- for version <= 0.2.2.24 which is now deprecated. Closes ticket 14202.
- - Remove a test for a long-defunct broken version-one directory server.
+ resulting subfunctions with unit-tests. Fixes a significant
+ portion of issue 12376.
+ - Remove workaround in dirserv_thinks_router_is_hs_dir() that was
+ only for version <= 0.2.2.24 which is now deprecated. Closes
+ ticket 14202.
+ - Remove a test for a long-defunct broken version-one
+ directory server.
o Documentation:
- - Adding section on OpenBSD to our TUNING document. Thanks to
- mmcc for writing the OpenBSD-specific tips. Resolves ticket
- 13702.
+ - Adding section on OpenBSD to our TUNING document. Thanks to mmcc
+ for writing the OpenBSD-specific tips. Resolves ticket 13702.
- Make the tor-resolve documentation match its help string and its
options. Resolves part of ticket 14325.
- Log a more useful error message from tor-resolve when failing to
@@ -331,29 +329,32 @@ Changes in version 0.2.6.3-alpha - 2015-02-??
- Don't warn when we've attempted to contact a relay using the wrong
ntor onion key. Closes ticket 9635.
+ o Removed features:
+ - To avoid confusion with the 'ExitRelay' option, 'ExitNode' is no
+ longer silently accepted as an alias for 'ExitNodes'.
+
o Testing:
- Make the checkdir/perms test complete successfully even if the
global umask is not 022. Fixes bug 14215; bugfix on 0.2.6.2-alpha.
- - Test that tor does not fail when key files are zero-length.
- Check that tor generates new keys, and overwrites the empty key files.
- - Test that tor generates new keys when keys are missing (existing
- behaviour).
- - Test that tor does not overwrite key files that already contain data
+ - Test that tor does not fail when key files are zero-length. Check
+ that tor generates new keys, and overwrites the empty key files.
+ - Test that tor generates new keys when keys are missing
(existing behaviour).
- Tests bug 13111. Patch by "teor".
+ - Test that tor does not overwrite key files that already contain
+ data (existing behaviour). Tests bug 13111. Patch by "teor".
- New "make test-stem" target to run stem integration tests.
Requires that the "STEM_SOURCE_DIR" environment variable be set.
Closes ticket 14107.
- Make the test_cmdline_args.py script work correctly on Windows.
Patch from Gisle Vanem.
- - Move the slower unit tests into a new "./src/test/test-slow" binary
- that can be run independently of the other tests. Closes ticket 13243.
+ - Move the slower unit tests into a new "./src/test/test-slow"
+ binary that can be run independently of the other tests. Closes
+ ticket 13243.
- Avoid undefined behavior when sampling huge values from the
Laplace distribution. This made unittests fail on Raspberry Pi.
Bug found by Device. Fixes bug 14090; bugfix on 0.2.6.2-alpha.
-
Changes in version 0.2.6.2-alpha - 2014-12-31
Tor 0.2.6.2-alpha is the second alpha release in the 0.2.6.x series.
It introduces a major new backend for deciding when to send cells on
_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits