<feed xmlns='http://www.w3.org/2005/Atom'>
<title>mirrors/arti.git/crates/tor-chanmgr/src, branch arti-v1.1.5</title>
<subtitle>mirror of https://gitlab.torproject.org/tpo/core/arti
</subtitle>
<id>http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.5</id>
<link rel='self' href='http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.5'/>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/'/>
<updated>2023-05-23T14:48:27Z</updated>
<entry>
<title>Fix a local-only CPU DoS bug.</title>
<updated>2023-05-23T14:48:27Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2023-05-18T18:08:28Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=03cb91012d2666852bdda3d4bdbfc0370fe73702'/>
<id>urn:sha1:03cb91012d2666852bdda3d4bdbfc0370fe73702</id>
<content type='text'>
Previously, there was a bug in the way that our code used our SOCKS
implementations.  If the buffer used for a SOCKS handshake became full
without completing the handshake, then rather than expanding the buffer
or closing the connection, our code would keep trying to read into the
zero-byte slice available in the full buffer forever, in a tight loop.

We're classifying this as a LOW-severity issue, since it is only
exploitable by pluggable transports (which are trusted) and by
local applications with access to the SOCKS port.

Closes #861.

Fixes TROVE-2023-001.

Reported-By: Jakob Lell &lt;jakob AT srlabs DOT de&gt;
</content>
</entry>
<entry>
<title>chanmgr: fix a unit-default warning from clippy nightly.</title>
<updated>2023-05-18T16:57:57Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2023-05-18T16:57:57Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=e8e40e66f62fe263401ce4564efedbb0b80e1d46'/>
<id>urn:sha1:e8e40e66f62fe263401ce4564efedbb0b80e1d46</id>
<content type='text'>
I could also have stopped using `::default()` to construct this
(testing-only) object, but I think it makes more sense to turn it
into a non-unit object.
</content>
</entry>
<entry>
<title>chanmgr: remove a needless mut.</title>
<updated>2023-05-11T12:38:06Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2023-05-11T12:38:06Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=78fb64387df95a4a220eaee39a754f3811dc0be4'/>
<id>urn:sha1:78fb64387df95a4a220eaee39a754f3811dc0be4</id>
<content type='text'>
This fixes a warning from nightly clippy.
</content>
</entry>
<entry>
<title>tor-netdir: Update tests to parse the descriptor, make test consensus lifetime configurable.</title>
<updated>2023-05-03T16:25:25Z</updated>
<author>
<name>Gabriela Moldovan</name>
<email>gabi@torproject.org</email>
</author>
<published>2023-04-26T17:25:05Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=30983c764f6a646782f51fd540f205dba0347933'/>
<id>urn:sha1:30983c764f6a646782f51fd540f205dba0347933</id>
<content type='text'>
Signed-off-by: Gabriela Moldovan &lt;gabi@torproject.org&gt;
</content>
</entry>
<entry>
<title>s/ProtocolFailed/ProtocolViolation/g where possible</title>
<updated>2023-04-08T14:47:28Z</updated>
<author>
<name>Neel Chauhan</name>
<email>neel@neelc.org</email>
</author>
<published>2023-04-08T14:47:28Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=5d61ff04d1f3ce555e10730e0bc22e4e3b64073d'/>
<id>urn:sha1:5d61ff04d1f3ce555e10730e0bc22e4e3b64073d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Use ErrorReport for errors in error! in tor-chanmgr</title>
<updated>2023-01-30T18:52:32Z</updated>
<author>
<name>Ian Jackson</name>
<email>ijackson@chiark.greenend.org.uk</email>
</author>
<published>2023-01-30T18:39:14Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=8c1830090cab7aefa673d96b952cda8394a203c7'/>
<id>urn:sha1:8c1830090cab7aefa673d96b952cda8394a203c7</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Use ErrorReport for errors in warn! in tor-chanmgr</title>
<updated>2023-01-30T18:52:32Z</updated>
<author>
<name>Ian Jackson</name>
<email>ijackson@chiark.greenend.org.uk</email>
</author>
<published>2023-01-30T18:14:37Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=410fdc9f3214040a5fc8c1f267ab919a922598da'/>
<id>urn:sha1:410fdc9f3214040a5fc8c1f267ab919a922598da</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Errors: Mark the type of an error, for clarity</title>
<updated>2023-01-30T17:52:02Z</updated>
<author>
<name>Ian Jackson</name>
<email>ijackson@chiark.greenend.org.uk</email>
</author>
<published>2023-01-30T17:52:02Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=c2e4b8b7f96df314e3ad49f199f61f2f5961b2fe'/>
<id>urn:sha1:c2e4b8b7f96df314e3ad49f199f61f2f5961b2fe</id>
<content type='text'>
We want to call ErrorReport::report() on Errors, but this isn't an
Error but only a string.
</content>
</entry>
<entry>
<title>Allow clippy::unchecked_duration_subtraction in tests</title>
<updated>2023-01-27T13:28:02Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2023-01-27T13:01:45Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=a6dd92843edf2bd4c58de62a0d562921e4191ada'/>
<id>urn:sha1:a6dd92843edf2bd4c58de62a0d562921e4191ada</id>
<content type='text'>
This panics on error, and we're fine with a panic on misbehavior in
tests.
</content>
</entry>
<entry>
<title>Disable clippy::unlinlined-format-args</title>
<updated>2023-01-27T13:27:47Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2023-01-27T12:49:39Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=bf04641c6818cb2c87c6ed9cf463a5710f8919d2'/>
<id>urn:sha1:bf04641c6818cb2c87c6ed9cf463a5710f8919d2</id>
<content type='text'>
This warning kind of snuck up on us! (See #748)  For now, let's
disable it.  (I've cleaned it up in a couple of examples, since
those are meant to be more idiomatic and user-facing.)

Closes #748.
</content>
</entry>
</feed>
