<feed xmlns='http://www.w3.org/2005/Atom'>
<title>mirrors/arti.git/crates/tor-chanmgr/src/transport, branch arti-v1.1.6</title>
<subtitle>mirror of https://gitlab.torproject.org/tpo/core/arti
</subtitle>
<id>http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.6</id>
<link rel='self' href='http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.6'/>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/'/>
<updated>2023-05-23T14:48:27Z</updated>
<entry>
<title>Fix a local-only CPU DoS bug.</title>
<updated>2023-05-23T14:48:27Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2023-05-18T18:08:28Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=03cb91012d2666852bdda3d4bdbfc0370fe73702'/>
<id>urn:sha1:03cb91012d2666852bdda3d4bdbfc0370fe73702</id>
<content type='text'>
Previously, there was a bug in the way that our code used our SOCKS
implementations.  If the buffer used for a SOCKS handshake became full
without completing the handshake, then rather than expanding the buffer
or closing the connection, our code would keep trying to read into the
zero-byte slice available in the full buffer forever, in a tight loop.

We're classifying this as a LOW-severity issue, since it is only
exploitable by pluggable transports (which are trusted) and by
local applications with access to the SOCKS port.

Closes #861.

Fixes TROVE-2023-001.

Reported-By: Jakob Lell &lt;jakob AT srlabs DOT de&gt;
</content>
</entry>
<entry>
<title>s/ProtocolFailed/ProtocolViolation/g where possible</title>
<updated>2023-04-08T14:47:28Z</updated>
<author>
<name>Neel Chauhan</name>
<email>neel@neelc.org</email>
</author>
<published>2023-04-08T14:47:28Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=5d61ff04d1f3ce555e10730e0bc22e4e3b64073d'/>
<id>urn:sha1:5d61ff04d1f3ce555e10730e0bc22e4e3b64073d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Use ErrorReport for errors in warn! in tor-chanmgr</title>
<updated>2023-01-30T18:52:32Z</updated>
<author>
<name>Ian Jackson</name>
<email>ijackson@chiark.greenend.org.uk</email>
</author>
<published>2023-01-30T18:14:37Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=410fdc9f3214040a5fc8c1f267ab919a922598da'/>
<id>urn:sha1:410fdc9f3214040a5fc8c1f267ab919a922598da</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Allow clippy::unchecked_duration_subtraction in tests</title>
<updated>2023-01-27T13:28:02Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2023-01-27T13:01:45Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=a6dd92843edf2bd4c58de62a0d562921e4191ada'/>
<id>urn:sha1:a6dd92843edf2bd4c58de62a0d562921e4191ada</id>
<content type='text'>
This panics on error, and we're fine with a panic on misbehavior in
tests.
</content>
</entry>
<entry>
<title>chanmgr: trace-level logs when launching connections.</title>
<updated>2023-01-06T17:19:00Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2022-12-06T13:49:55Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=1e25a962a7c0a47e10a0648eadee8c6c9aa5615b'/>
<id>urn:sha1:1e25a962a7c0a47e10a0648eadee8c6c9aa5615b</id>
<content type='text'>
Based on more temporary debugging code. Yet another part of #677.
</content>
</entry>
<entry>
<title>test lint blocks: Add many many automatically</title>
<updated>2022-12-12T18:00:30Z</updated>
<author>
<name>Ian Jackson</name>
<email>ijackson@chiark.greenend.org.uk</email>
</author>
<published>2022-12-12T17:58:40Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=125a455bdcca841931f33f83f206e57637ae85c4'/>
<id>urn:sha1:125a455bdcca841931f33f83f206e57637ae85c4</id>
<content type='text'>
This is precisely the result of running the rune in
maint/adhoc-add-lint-blocks.
</content>
</entry>
<entry>
<title>Rename TransportHelper =&gt; TransportImplHelper.</title>
<updated>2022-11-30T18:05:46Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2022-11-30T18:05:46Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=acc2de7b31625c5c9664eca3d699686ae4601c8f'/>
<id>urn:sha1:acc2de7b31625c5c9664eca3d699686ae4601c8f</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Merge branch 'bridge-addr-2' into 'main'</title>
<updated>2022-11-30T17:36:50Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2022-11-30T17:36:50Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=a0e1b3d6512b5cf18e801234e7b845af8f3b143a'/>
<id>urn:sha1:a0e1b3d6512b5cf18e801234e7b845af8f3b143a</id>
<content type='text'>
Separate BridgeAddr and PtTargetAddr

See merge request tpo/core/arti!904</content>
</entry>
<entry>
<title>PT protocol: pt-spec conformance with password field</title>
<updated>2022-11-30T16:53:38Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2022-11-30T16:53:38Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=e835bd4c4c4677796ddeff1fe09333c6f7593453'/>
<id>urn:sha1:e835bd4c4c4677796ddeff1fe09333c6f7593453</id>
<content type='text'>
pt-spec says:
```
      If the encoded argument list is less than 255 bytes in
      length, the "PLEN" field must be set to "1" and the "PASSWD"
      field must contain a single NUL character.
```

This is a very silly thing to say, but some PTs enforce it.

Fixes #676.
</content>
</entry>
<entry>
<title>connect_via_proxy: Actually send initial handshake.</title>
<updated>2022-11-30T16:53:27Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2022-11-30T16:49:17Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=475d9af34a0fe54d3ce00c1621215817f3c05cd3'/>
<id>urn:sha1:475d9af34a0fe54d3ce00c1621215817f3c05cd3</id>
<content type='text'>
Our previous code would make a TCP connection to the proxy, then
wait forever for it to say something. Whoops!

Part of a fix for #676.
</content>
</entry>
</feed>
