tor, branch HEAD

Merge branch 'consensus-method-comment' into 'main'

2026-02-26T14:30:05Z

commit df027b09cab75efa06efdaceccd00fcda7cc8dd1 parent acd955f8620a5e81d5af972c6d510a0e62e1b5ca Author: David Goulet Date: Thu, 26 Feb 2026 14:30:05 +0000 Merge branch 'consensus-method-comment' into 'main' the spec says "more than 2/3" and the code said "2/3" See merge request tpo/core/tor!993

the spec says "more than 2/3" and the code said "2/3"

2026-02-25T22:38:32Z

commit ef1b95700d7f87e519c218a18018f441a0becf86 parent acd955f8620a5e81d5af972c6d510a0e62e1b5ca Author: Roger Dingledine Date: Wed, 25 Feb 2026 17:38:32 -0500 the spec says "more than 2/3" and the code said "2/3" well, the spec was right -- add comment to make it clearer

Merge branch 'ahf/version-typo' into 'main'

2026-02-16T13:43:19Z

commit acd955f8620a5e81d5af972c6d510a0e62e1b5ca parent e669aa4ced0d269d9a67c0f978bad0ddac8985d0 Author: David Goulet Date: Mon, 16 Feb 2026 13:43:19 +0000 Merge branch 'ahf/version-typo' into 'main' Fix possible typo in version number. See merge request tpo/core/tor!991

Fix possible typo in version number.

2026-02-13T22:03:49Z

commit e78057e2b22763a3b97a61180b171d2d0f8b3083 parent e669aa4ced0d269d9a67c0f978bad0ddac8985d0 Author: Alexander Hansen Færøy Date: Fri, 13 Feb 2026 23:03:49 +0100 Fix possible typo in version number. This was introduced in e669aa4ced0d269d9a67c0f978bad0ddac8985d0 and it looks like we are missing a zero here. Spotted by @toralf on #tor-relays.

version: Bump version to 0.5.0-alpha-dev

2026-02-12T15:08:24Z

commit e669aa4ced0d269d9a67c0f978bad0ddac8985d0 parent c0926fbd6dde628c036b47e2e829d2dabb735d2d Author: David Goulet Date: Thu, 12 Feb 2026 10:08:24 -0500 version: Bump version to 0.5.0-alpha-dev Signed-off-by: David Goulet

scripts: Put in 0.4.9 and 0.5.x stable branches

2026-02-12T15:08:54Z

commit c0926fbd6dde628c036b47e2e829d2dabb735d2d parent 1442ca4852283d6650dcad60bdb4e9167aceb495 Author: David Goulet Date: Thu, 12 Feb 2026 10:08:54 -0500 scripts: Put in 0.4.9 and 0.5.x stable branches Git list needs the new 0.4.9 stable branches. CI driver needs to know about 0.5.x (main) Signed-off-by: David Goulet

changelog: Add missing changes to ChangeLog/ReleaseNotes

2026-02-12T14:39:57Z

commit 1442ca4852283d6650dcad60bdb4e9167aceb495 parent fbd3fbc97ce003d040cacdf3c3f2542668c1ff2c Author: David Goulet Date: Thu, 12 Feb 2026 09:39:57 -0500 changelog: Add missing changes to ChangeLog/ReleaseNotes Signed-off-by: David Goulet

version: Bump version to 0.4.9.5

2026-02-12T14:12:45Z

commit fbd3fbc97ce003d040cacdf3c3f2542668c1ff2c parent 1f4971f78a71406a63191f3e6b99155ac169fad0 Author: Tor CI Release Date: Thu, 12 Feb 2026 14:12:45 +0000 version: Bump version to 0.4.9.5

release: Add 0.4.9.5 ChangeLog entry

2026-02-12T14:29:04Z

commit 1f4971f78a71406a63191f3e6b99155ac169fad0 parent 41a422ec1eafd94e65a339d16e5cb903a233fa86 Author: David Goulet Date: Thu, 12 Feb 2026 09:29:04 -0500 release: Add 0.4.9.5 ChangeLog entry Signed-off-by: David Goulet

Merge branch 'tor-gitlab/mr/988'

2026-02-12T14:26:38Z

commit 41a422ec1eafd94e65a339d16e5cb903a233fa86 parent d940d27ae06fac76b287b37f9f74ee4c4d19ac8a Author: David Goulet Date: Thu, 12 Feb 2026 09:26:38 -0500 Merge branch 'tor-gitlab/mr/988'

fallbackdir: Update list generated on February 12, 2026

2026-02-12T14:11:04Z

commit d940d27ae06fac76b287b37f9f74ee4c4d19ac8a parent 06d0e643fdce113dd8a5a8e251eab1fd52ae2dbb Author: Tor CI Release Date: Thu, 12 Feb 2026 14:11:04 +0000 fallbackdir: Update list generated on February 12, 2026

Update geoip files to match ipfire location db, 2026/02/12.

2026-02-12T13:57:55Z

commit 06d0e643fdce113dd8a5a8e251eab1fd52ae2dbb parent d88ff67f926ef1d526d4100184891207ec7b754b Author: Tor CI Release Date: Thu, 12 Feb 2026 13:57:55 +0000 Update geoip files to match ipfire location db, 2026/02/12.

Merge branch 'ahf/049-windows-x-compile-fixes' into 'main'

2026-02-12T13:35:24Z

commit d88ff67f926ef1d526d4100184891207ec7b754b parent fc771163d9f0aad72614e9806742a0a289e40644 Author: David Goulet Date: Thu, 12 Feb 2026 13:35:24 +0000 Merge branch 'ahf/049-windows-x-compile-fixes' into 'main' Various Windows build fixes See merge request tpo/core/tor!987

pull together the 0.4.9.5 stable release notes

2026-02-12T05:09:19Z

commit 9ff93078ea63cded821c2f52c4ef476df1155fbe parent fc771163d9f0aad72614e9806742a0a289e40644 Author: Roger Dingledine Date: Thu, 12 Feb 2026 00:09:19 -0500 pull together the 0.4.9.5 stable release notes these don't have the 0.4.9.5 changelog entries in them yet, but hopefully it saves a lot of work in the release process

Add changes file for these Windows build fixes.

2026-02-12T00:17:56Z

commit f09239bd8babfb1e022d8462b123c89565494482 parent c5396e6d07f6c7bbdc349eb2b527dc8fe91e899c Author: Alexander Hansen Færøy Date: Thu, 12 Feb 2026 01:17:56 +0100 Add changes file for these Windows build fixes.

Disable -Waggregate-return on MinGW 32-bit builds for Polyval.

2026-02-11T23:45:40Z

commit c5396e6d07f6c7bbdc349eb2b527dc8fe91e899c parent d796de4309df73c4d70255c470d9aae418f100a4 Author: Alexander Hansen Færøy Date: Thu, 12 Feb 2026 00:45:40 +0100 Disable -Waggregate-return on MinGW 32-bit builds for Polyval. This patch disables `-Waggregate-return` for a number of functions and their usage in a number of macros to make the code build on Windows 32-bit builds.

Replace "%zu" usage with "%"TOR_PRIuSZ macro usage.

2026-02-11T23:30:11Z

commit d796de4309df73c4d70255c470d9aae418f100a4 parent 509c5dd803e186de2bac04a6e362cd4a80127e50 Author: Alexander Hansen Færøy Date: Thu, 12 Feb 2026 00:30:11 +0100 Replace "%zu" usage with "%"TOR_PRIuSZ macro usage.

Disable -Waggregate-return on MinGW64 builds for Polyval.

2026-02-11T23:17:44Z

commit 509c5dd803e186de2bac04a6e362cd4a80127e50 parent 405c5ac1e4cd8aa1376f021d0b4c26cad3be241d Author: Alexander Hansen Færøy Date: Thu, 12 Feb 2026 00:17:44 +0100 Disable -Waggregate-return on MinGW64 builds for Polyval. This patch disables `-Waggregate-return` for a number of functions and their usage in a number of macros to make the code build on Windows. The use of `lib/cc/compat_compiler.h` in `ext/**` is likely controversial here.

Mark module local Windows variables as static.

2026-02-11T23:15:32Z

commit 405c5ac1e4cd8aa1376f021d0b4c26cad3be241d parent d7cf8f3fd1ff721952f87846aa71fdb0c3ab2e54 Author: Alexander Hansen Færøy Date: Thu, 12 Feb 2026 00:15:32 +0100 Mark module local Windows variables as static. This patch fixes a build issue on Debian Trixie with Mingw64 where the compiler now checks for whether non-static variables are defined elsewhere first, otherwise errors out. This patch changes our `services_fns` and `windows_socket_errors` variables to use a pre-declared type on the form `struct x { ... } x_t;` and mark the instance as static.

Look for libraries in lib64/ in addition to lib/

2026-02-11T23:12:25Z

commit d7cf8f3fd1ff721952f87846aa71fdb0c3ab2e54 parent fc771163d9f0aad72614e9806742a0a289e40644 Author: Alexander Hansen Færøy Date: Thu, 12 Feb 2026 00:12:25 +0100 Look for libraries in lib64/ in addition to lib/ When building OpenSSL 3.5.x on 64-bit systems, their build-system no longer puts the shared and static libraries into the lib/ directory, but instead uses lib64/. OpenSSL has started bundling pkg-config files that we could use, but the current acinclude-based macros seems quite battle tested for now, so this patch is instead adding support for looking for lib64/, but with a preference for lib/ if that exists. This shouldn't break any current setup where there may be both a lib/ and a lib64/.

Merge branch 'export-consensus' into 'main'

2026-02-11T21:56:27Z

commit fc771163d9f0aad72614e9806742a0a289e40644 parent cc66d00feafea5ac1fdb25db9364757229aa2641 Author: Alexander Hansen Færøy Date: Wed, 11 Feb 2026 22:56:27 +0100 Merge branch 'export-consensus' into 'main' rename my-consensus-* to consensus-transparency-* at the right time See merge request tpo/core/tor!962

defensive NULL assignments

2026-02-11T21:16:42Z

commit 244c60c90c7203de0fd0244fcb0345bd20640aa9 parent d9af80083baaa59b78cdabd0f385e415325407bc Author: Roger Dingledine Date: Wed, 11 Feb 2026 16:16:42 -0500 defensive NULL assignments should not matter, because tor_asprintf makes a new string, but this way it's clearer that it doesn't matter.

tell the sandbox about our new renames

2026-02-11T13:31:51Z

commit d9af80083baaa59b78cdabd0f385e415325407bc parent 68947a49a955bb90849023446f9dc53195bb6f30 Author: Roger Dingledine Date: Wed, 11 Feb 2026 08:31:51 -0500 tell the sandbox about our new renames

rename my-consensus-* to consensus-transparency-* at the right time

2025-10-10T18:18:13Z

commit 68947a49a955bb90849023446f9dc53195bb6f30 parent cc66d00feafea5ac1fdb25db9364757229aa2641 Author: Roger Dingledine Date: Fri, 10 Oct 2025 14:18:13 -0400 rename my-consensus-* to consensus-transparency-* at the right time once we have seen enough sigs that we know this will become the consensus body that we publish, create a new consensus-transparency-* file, with no sigs on it, for use by the consensus transparency signer. this is the first step toward the consensus transparency experiment.

Merge branch 'typos' into 'main'

2026-02-11T20:25:32Z

commit cc66d00feafea5ac1fdb25db9364757229aa2641 parent 7757679a8828d7f999b0e0a5594d213df027693b Author: Alexander Hansen Færøy Date: Wed, 11 Feb 2026 21:25:32 +0100 Merge branch 'typos' into 'main' typos in comments See merge request tpo/core/tor!986

typos in comments

2026-02-11T17:31:26Z

commit 6980a67f0d2f84667354ec208ddad4aa4013fc4e parent b6bb346b9350f3ebb61d186386f45b0b82a87de1 Author: Roger Dingledine Date: Wed, 11 Feb 2026 12:31:26 -0500 typos in comments

Merge branch 'bugfix/routerkeys-family-key' into 'main'

2026-02-11T16:37:16Z

commit 7757679a8828d7f999b0e0a5594d213df027693b parent 33a54e79a1124a4fbbcc23789e1a32b12c6d621c Author: David Goulet Date: Wed, 11 Feb 2026 16:37:16 +0000 Merge branch 'bugfix/routerkeys-family-key' into 'main' relay: refuse to overwrite existing family ID key Closes #41184 See merge request tpo/core/tor!984

Merge branch 'fix/pt/relaunch/1' into 'main'

2026-02-11T16:35:42Z

commit 33a54e79a1124a4fbbcc23789e1a32b12c6d621c parent b6bb346b9350f3ebb61d186386f45b0b82a87de1 Author: Alexander Hansen Færøy Date: Wed, 11 Feb 2026 17:35:42 +0100 Merge branch 'fix/pt/relaunch/1' into 'main' Fix: Don't launch managed proxies on impending shutdown See merge request tpo/core/tor!985

Fix: Don't launch managed proxies on impending shutdown

2026-02-11T16:35:42Z

commit f3e952a8a9087ed92cc426a857e5bb36da9dc1fa parent b6bb346b9350f3ebb61d186386f45b0b82a87de1 Author: excurso Date: Wed, 11 Feb 2026 16:35:42 +0000 Fix: Don't launch managed proxies on impending shutdown

changes: document family key overwrite protection (bug 41184)

2026-02-11T14:35:27Z

commit 2e04b5a3018c02c3b637973a39aa4e0f56db289a parent d9a9aed375e9afb62f5e79f6346318d1c7ba1284 Author: shdwcodr Date: Wed, 11 Feb 2026 20:05:27 +0530 changes: document family key overwrite protection (bug 41184)

relay: refuse to overwrite existing family ID key

2026-02-08T10:58:32Z

commit d9a9aed375e9afb62f5e79f6346318d1c7ba1284 parent b6bb346b9350f3ebb61d186386f45b0b82a87de1 Author: shdwcodr Date: Sun, 8 Feb 2026 16:28:32 +0530 relay: refuse to overwrite existing family ID key

Merge branch '049-forwardportchangelogs' into 'main'

2026-01-29T13:44:51Z

commit b6bb346b9350f3ebb61d186386f45b0b82a87de1 parent 1a72925686b0aafa575786627d8599cdf3e34d0a Author: David Goulet Date: Thu, 29 Jan 2026 13:44:51 +0000 Merge branch '049-forwardportchangelogs' into 'main' forward-port 0.4.8.22 changelog, remove duplicates from 0.4.9.4-rc See merge request tpo/core/tor!980

forward-port 0.4.8.22 changelog, remove duplicates from 0.4.9.4-rc

2026-01-28T21:00:13Z

commit eb5f26877f1bf52d1fa05d080a655ba3076382d6 parent 1a72925686b0aafa575786627d8599cdf3e34d0a Author: Roger Dingledine Date: Wed, 28 Jan 2026 16:00:13 -0500 forward-port 0.4.8.22 changelog, remove duplicates from 0.4.9.4-rc

Merge branch '049-changelog-fixes' into 'main'

2026-01-28T20:46:39Z

commit 1a72925686b0aafa575786627d8599cdf3e34d0a parent 76858d1880efc8a6e58d10d23a67797dc51a8411 Author: David Goulet Date: Wed, 28 Jan 2026 20:46:39 +0000 Merge branch '049-changelog-fixes' into 'main' remove 0.4.9.4-rc stanzas already in stables See merge request tpo/core/tor!978

remove 0.4.9.4-rc stanzas already in stables

2026-01-28T20:28:05Z

commit a585cdd47ade6cd3843a8166531a6671dd4c8885 parent 536d741aef479b2159cb92a0e9c7407bbaddf9af Author: Roger Dingledine Date: Wed, 28 Jan 2026 15:28:05 -0500 remove 0.4.9.4-rc stanzas already in stables

non-stable releases don't go in ReleaseNotes

2026-01-28T20:23:33Z

commit 536d741aef479b2159cb92a0e9c7407bbaddf9af parent 76858d1880efc8a6e58d10d23a67797dc51a8411 Author: Roger Dingledine Date: Wed, 28 Jan 2026 15:23:33 -0500 non-stable releases don't go in ReleaseNotes

version: Bump version to 0.4.9.4-rc-dev

2026-01-28T18:38:46Z

commit 76858d1880efc8a6e58d10d23a67797dc51a8411 parent ebad9d98d8b6f1cd73ec4a5aa6b2509d1c1644e1 Author: Tor CI Release Date: Wed, 28 Jan 2026 18:38:46 +0000 version: Bump version to 0.4.9.4-rc-dev

Merge branch 'maint-0.4.8'

2026-01-28T19:07:23Z

commit ebad9d98d8b6f1cd73ec4a5aa6b2509d1c1644e1 parent 140560a2d0723901ad1ba553a1c100616a311de6 Author: David Goulet Date: Wed, 28 Jan 2026 14:07:23 -0500 Merge branch 'maint-0.4.8'

version: Bump version to 0.4.8.22-dev

2026-01-28T18:38:46Z

commit be0236b59d5fe2ce042729bd9002cdb84ea72c00 parent f1f4fc2341e82ee7dd3e6deb3be5d4243658d4d7 Author: Tor CI Release Date: Wed, 28 Jan 2026 18:38:46 +0000 version: Bump version to 0.4.8.22-dev

version: Bump version to 0.4.9.4-rc

2026-01-28T18:14:47Z

commit 140560a2d0723901ad1ba553a1c100616a311de6 parent 2a83f1a8d3d216a9f213cc1ed73fcae43b54ded4 Author: Tor CI Release Date: Wed, 28 Jan 2026 18:14:47 +0000 version: Bump version to 0.4.9.4-rc

Merge branch 'maint-0.4.8'

2026-01-28T18:30:12Z

commit 2a83f1a8d3d216a9f213cc1ed73fcae43b54ded4 parent 6d1c310ec69b4a325d1cf3b6c13b60f4a1f65804 Author: David Goulet Date: Wed, 28 Jan 2026 13:30:12 -0500 Merge branch 'maint-0.4.8'

version: Bump version to 0.4.8.22

2026-01-28T18:14:36Z

commit f1f4fc2341e82ee7dd3e6deb3be5d4243658d4d7 parent a740796caf5668056cf270c211ee9abf97741a61 Author: Tor CI Release Date: Wed, 28 Jan 2026 18:14:36 +0000 version: Bump version to 0.4.8.22

release: ChangeLog and ReleaseNotes for 0.4.9.4-rc

2026-01-28T18:29:41Z

commit 6d1c310ec69b4a325d1cf3b6c13b60f4a1f65804 parent df257565da02c37104fa5394008ab13e1d2cb729 Author: David Goulet Date: Wed, 28 Jan 2026 13:29:41 -0500 release: ChangeLog and ReleaseNotes for 0.4.9.4-rc Signed-off-by: David Goulet

Merge branch 'maint-0.4.8'

2026-01-28T18:21:33Z

commit df257565da02c37104fa5394008ab13e1d2cb729 parent 2064c8b5b01ac5bd8a877f4770add524f85104c1 Author: David Goulet Date: Wed, 28 Jan 2026 13:21:33 -0500 Merge branch 'maint-0.4.8'

fallbackdir: Update list generated on January 28, 2026

2026-01-28T18:06:49Z

commit a740796caf5668056cf270c211ee9abf97741a61 parent cbc6e7d482a6840c0baa67ab1b4fb66c17993457 Author: Tor CI Release Date: Wed, 28 Jan 2026 18:06:49 +0000 fallbackdir: Update list generated on January 28, 2026

Update geoip files to match ipfire location db, 2026/01/28.

2026-01-28T17:50:51Z

commit cbc6e7d482a6840c0baa67ab1b4fb66c17993457 parent d5e652c5840d670fe2d6150a7f5e2590a03059d5 Author: Tor CI Release Date: Wed, 28 Jan 2026 17:50:51 +0000 Update geoip files to match ipfire location db, 2026/01/28.

pt: Another assert to BUG()

2026-01-28T17:45:24Z

commit 2064c8b5b01ac5bd8a877f4770add524f85104c1 parent b3eb133de68e8ce77fbf382e0df25ed523cd7f44 Author: David Goulet Date: Wed, 28 Jan 2026 12:45:24 -0500 pt: Another assert to BUG() Signed-off-by: David Goulet

Merge branch 'pt-death' into 'main'

2026-01-28T15:58:03Z

commit b3eb133de68e8ce77fbf382e0df25ed523cd7f44 parent a40b58b3c9dfc45886d5213dda5a02701fbeaeeb Author: Alexander Hansen Færøy Date: Wed, 28 Jan 2026 16:58:03 +0100 Merge branch 'pt-death' into 'main' transports: handle process death better See merge request tpo/core/tor!977

pt: Remove tor_assert in favor of BUG()

2026-01-28T15:25:03Z

commit ad0bbf9206c6a435263a683f734f4b767e0994de parent b1818331f5aae230674d5684fc71524de8d51598 Author: David Goulet Date: Wed, 28 Jan 2026 10:25:03 -0500 pt: Remove tor_assert in favor of BUG() Signed-off-by: David Goulet

pt: Ratelimit a log warn on restart

2026-01-28T15:21:54Z

commit b1818331f5aae230674d5684fc71524de8d51598 parent 17c9ab79510c2c2d729c74420c3d10af6a2e68d7 Author: David Goulet Date: Wed, 28 Jan 2026 10:21:54 -0500 pt: Ratelimit a log warn on restart Signed-off-by: David Goulet

transports: handle process death better

2026-01-24T00:51:58Z

commit 17c9ab79510c2c2d729c74420c3d10af6a2e68d7 parent a40b58b3c9dfc45886d5213dda5a02701fbeaeeb Author: mischief Date: Fri, 23 Jan 2026 16:51:58 -0800 transports: handle process death better today tor will die with an assertion if a transport process dies before configuration is complete, so remove that assertion and just warn. additionally, launch transports via timed event callback, to prevent spamming if the process is repeatedly dying.

Merge branch 'maint-0.4.8'

2026-01-28T14:30:58Z

commit a40b58b3c9dfc45886d5213dda5a02701fbeaeeb parent 81446c9a98e25e5f67c277f12e90958e3a63ec33 Author: David Goulet Date: Wed, 28 Jan 2026 09:30:58 -0500 Merge branch 'maint-0.4.8'

changes: Fix file bug41180

2026-01-28T14:30:54Z

commit d5e652c5840d670fe2d6150a7f5e2590a03059d5 parent f9f2dd919f81a6bf4a81656cc290a09d481e0533 Author: David Goulet Date: Wed, 28 Jan 2026 09:30:54 -0500 changes: Fix file bug41180 Signed-off-by: David Goulet

Merge branch 'maint-0.4.8'

2026-01-28T14:00:40Z

commit 81446c9a98e25e5f67c277f12e90958e3a63ec33 parent 71a1e5dfa4b495cba3e3e5a26b06a5a42ae93ba9 Author: David Goulet Date: Wed, 28 Jan 2026 09:00:40 -0500 Merge branch 'maint-0.4.8'

dns: Clip all TTL to 60 returned in RESOLVED

2026-01-19T18:07:12Z

commit 71a1e5dfa4b495cba3e3e5a26b06a5a42ae93ba9 parent eddf5725fc790fd08a131331be96500e43e3019b Author: David Goulet Date: Mon, 19 Jan 2026 13:07:12 -0500 dns: Clip all TTL to 60 returned in RESOLVED Mitigate an exit DNS cache oracle which could leak to an attacker that a certain domain was cached or not. Fixes #40979 Signed-off-by: David Goulet

Check for small payload_len when parsing extend cells.

2025-12-11T21:59:08Z

commit f9f2dd919f81a6bf4a81656cc290a09d481e0533 parent b316076f119d4f2f97c5191abadac964ba882db0 Author: Nick Mathewson Date: Thu, 11 Dec 2025 16:59:08 -0500 Check for small payload_len when parsing extend cells. Without this code, if V1 relay cell format were in use, and the relay message length were set to 0 or 1, then an EXTEND cell could be read beyond the end of the relay cell payload. This could extend beyond the underlying cell body if the V1 relay cell format had been negotiated. This would typically lead either to a crash or to a rejected circuit. Closes bug 41180; bugfix on 0.4.9.3-alpha, when we made the made the maximum size of a relay payload variable. 0.4.8.x and earlier can similarly mis-handle low payload values, but the bug there cannot be used to read uninitialized data.

socks4a: simplify parsing to use trunnel hostname output.

2026-01-22T18:38:47Z

commit b316076f119d4f2f97c5191abadac964ba882db0 parent 7c35678dd9d16346fb060c98e51f0801c6e8373d Author: Nick Mathewson Date: Thu, 22 Jan 2026 13:38:47 -0500 socks4a: simplify parsing to use trunnel hostname output. The previous comment about not using trunnel is wrong; we can still use the hostname field in trunnel, but we just have to check its length. Fixes bug 41190 (which I think is a false positive). Bugfix on 0.3.5.1-alpha.

Merge branch 'spellcheck' into 'main'

2026-01-28T13:31:44Z

commit eddf5725fc790fd08a131331be96500e43e3019b parent e3c881b0a5971541870313503143e1e6d997140d Author: David Goulet Date: Wed, 28 Jan 2026 13:31:44 +0000 Merge branch 'spellcheck' into 'main' fix minor typos on changelogs See merge request tpo/core/tor!976

fix minor typos on changelogs

2026-01-27T22:31:15Z

commit 3b355850f549da0e38964211377ecaca3cb9338a parent e3c881b0a5971541870313503143e1e6d997140d Author: Roger Dingledine Date: Tue, 27 Jan 2026 17:31:15 -0500 fix minor typos on changelogs

Merge branch 'maint-0.4.8'

2026-01-27T21:01:33Z

commit e3c881b0a5971541870313503143e1e6d997140d parent 03e0881d542bb9f4047edac260c22ce7706c1209 Author: David Goulet Date: Tue, 27 Jan 2026 16:01:33 -0500 Merge branch 'maint-0.4.8'

Merge branch 'tor-gitlab/mr/938' into maint-0.4.8

2026-01-27T21:00:44Z

commit 7c35678dd9d16346fb060c98e51f0801c6e8373d parent a02d6ee9287253450b62ef785cf173da3d1d7634 Author: David Goulet Date: Tue, 27 Jan 2026 16:00:44 -0500 Merge branch 'tor-gitlab/mr/938' into maint-0.4.8

Fix typo caught by @Unicorn in tor!938.

2026-01-27T16:28:24Z

commit 5542ad8a1b60289ceb4c3bd550fdaf5e6458fd0e parent 732e70214f74a52b9259bc9bab5f53fb042b5968 Author: Alexander Hansen Færøy Date: Tue, 27 Jan 2026 17:28:24 +0100 Fix typo caught by @Unicorn in tor!938.

Bump `CHECK_FOR_COMPRESSION_BOMB_AFTER` from 64KB to 5MB.

2025-10-01T12:29:20Z

commit 732e70214f74a52b9259bc9bab5f53fb042b5968 parent df1dadd5b4a4f652fb338d14ae0f6277cdfc5d8f Author: Alexander Hansen Færøy Date: Wed, 1 Oct 2025 14:29:20 +0200 Bump `CHECK_FOR_COMPRESSION_BOMB_AFTER` from 64KB to 5MB. See: tpo/core/tor#40739.

Merge branch 'maint-0.4.8'

2026-01-27T15:40:37Z

commit 03e0881d542bb9f4047edac260c22ce7706c1209 parent 02275813321b37f6fa341f3c7803097097927461 Author: David Goulet Date: Tue, 27 Jan 2026 10:40:37 -0500 Merge branch 'maint-0.4.8'

changes: Add file for ticket 40951

2026-01-27T15:40:31Z

commit a02d6ee9287253450b62ef785cf173da3d1d7634 parent f6c6d7023879cf789b9190c0080efc02b96be868 Author: David Goulet Date: Tue, 27 Jan 2026 10:40:31 -0500 changes: Add file for ticket 40951

Merge branch 'tor-gitlab/mr/960' into maint-0.4.8

2026-01-27T15:39:13Z

commit f6c6d7023879cf789b9190c0080efc02b96be868 parent 4147e041c37055ecd965c132c096aae93abc6dea Author: David Goulet Date: Tue, 27 Jan 2026 10:39:13 -0500 Merge branch 'tor-gitlab/mr/960' into maint-0.4.8

Add autoconf check for openssl/engine.h header

2025-11-09T16:00:45Z

commit 02275813321b37f6fa341f3c7803097097927461 parent c18596e5d063058d69159fe08b2267976fc6c7a1 Author: shdwcodr Date: Sun, 9 Nov 2025 21:30:45 +0530 Add autoconf check for openssl/engine.h header Since the OpenSSL engine API is deprecated and some distros (like Fedora) now ship it in a separate package, this ensures a clear configure-time error instead of a later build failure. Related issue: #41133 (Detect missing OpenSSL engine at configure time) Signed-off-by: shdwcodr

Merge branch 'ticket41168_049_01' into 'main'

2026-01-27T15:31:31Z

commit c18596e5d063058d69159fe08b2267976fc6c7a1 parent 44d94e263dc1f4460bfcd28c0492c37eb5c2a1a3 Author: David Goulet Date: Tue, 27 Jan 2026 15:31:31 +0000 Merge branch 'ticket41168_049_01' into 'main' exit: Add Monero ports to ReducedExitPolicy Closes #41168 See merge request tpo/core/tor!970

Merge branch 'const' into 'main'

2026-01-27T15:31:00Z

commit 44d94e263dc1f4460bfcd28c0492c37eb5c2a1a3 parent 3a7bb70e0141c109c14337a0fc3c0ba7d9632119 Author: David Goulet Date: Tue, 27 Jan 2026 15:31:00 +0000 Merge branch 'const' into 'main' Fix -Wdiscarded-qualifiers with glibc-2.43 Closes #41198 See merge request tpo/core/tor!974

Fix -Wdiscarded-qualifiers with glibc-2.43

2026-01-27T11:14:13Z

commit 1e372424921730a7ebd7d086fc7faa81878f3f51 parent 3a7bb70e0141c109c14337a0fc3c0ba7d9632119 Author: Sam James Date: Tue, 27 Jan 2026 11:14:13 +0000 Fix -Wdiscarded-qualifiers with glibc-2.43 glibc-2.43 implements C23's const-preserving macros for stdlib functions, which exposes some -Wdiscarded-qualifiers (missing consts) for us to fix. Fixes https://gitlab.torproject.org/tpo/core/tor/-/issues/41198

Merge branch 'maint-0.4.8'

2026-01-22T17:29:36Z

commit 3a7bb70e0141c109c14337a0fc3c0ba7d9632119 parent 2a7cd20405fb72118ab180142cded240288f26e2 Author: David Goulet Date: Thu, 22 Jan 2026 12:29:36 -0500 Merge branch 'maint-0.4.8'

Merge branch 'tor-gitlab/mr/971' into maint-0.4.8

2026-01-22T17:26:31Z

commit 4147e041c37055ecd965c132c096aae93abc6dea parent 187c4d8ea5187ca1bfa8ddee9148fc0a9eb6b9e1 Author: David Goulet Date: Thu, 22 Jan 2026 12:26:31 -0500 Merge branch 'tor-gitlab/mr/971' into maint-0.4.8

Merge branch 'maint-0.4.8'

2026-01-22T14:48:53Z

commit 2a7cd20405fb72118ab180142cded240288f26e2 parent 6599a5bb3ae28d19ebb8998087393caca113e944 Author: David Goulet Date: Thu, 22 Jan 2026 09:48:53 -0500 Merge branch 'maint-0.4.8'

CI: Bump chutney version

2026-01-21T17:52:19Z

commit 187c4d8ea5187ca1bfa8ddee9148fc0a9eb6b9e1 parent 802b1c39111db1398ef925fb422c69d624fce09d Author: Jim Newsome Date: Wed, 21 Jan 2026 11:52:19 -0600 CI: Bump chutney version

sendme-version-0 dir fetches don't count toward geoip

2026-01-21T03:31:14Z

commit 41193df5346d13bf29f1d302639904f787a9f0d0 parent ef2f9106614bd1d210a55c90d360b442f7f0300e Author: Roger Dingledine Date: Tue, 20 Jan 2026 22:31:14 -0500 sendme-version-0 dir fetches don't count toward geoip

permit sendme version 0 on create_fast circuits

2026-01-12T06:03:10Z

commit ef2f9106614bd1d210a55c90d360b442f7f0300e parent 802b1c39111db1398ef925fb422c69d624fce09d Author: Roger Dingledine Date: Mon, 12 Jan 2026 01:03:10 -0500 permit sendme version 0 on create_fast circuits Allow old clients to fetch the consensus even if they use version 0 of the SENDME protocol. In mid 2025 we changed the required minimum version of the "FlowCtrl" protocol to 1, meaning directory caches hang up on clients that send a version 0 SENDME cell. Since old clients were no longer able to retrieve the consensus, they couldn't learn about this required minimum version -- meaning we've had many many old clients loading down directory servers for the past months. Fixes bug 41191; bugfix on 0.4.1.1-alpha.

exit: Add Monero ports to ReducedExitPolicy

2026-01-19T20:15:15Z

commit 3c9c8f67e9f8ed1cf7d4d267201207046cfa5f3d parent 6599a5bb3ae28d19ebb8998087393caca113e944 Author: David Goulet Date: Mon, 19 Jan 2026 15:15:15 -0500 exit: Add Monero ports to ReducedExitPolicy Closes #41168 Signed-off-by: David Goulet

Merge branch 'fix-seccomp-enabled-build-with-newer-glibc' into 'main'

2026-01-13T17:02:40Z

commit 6599a5bb3ae28d19ebb8998087393caca113e944 parent 1b490c2030daae89025794592dab11fdaaa3a48f Author: David Goulet Date: Tue, 13 Jan 2026 17:02:40 +0000 Merge branch 'fix-seccomp-enabled-build-with-newer-glibc' into 'main' Fix #41170 - include signal.h if enabling seccomp Closes #41170 See merge request tpo/core/tor!959

Merge branch 'maint-0.4.8'

2026-01-13T16:58:36Z

commit 1b490c2030daae89025794592dab11fdaaa3a48f parent dba00ebf3435848d95ca58f78078b2e0378f8af1 Author: David Goulet Date: Tue, 13 Jan 2026 11:58:36 -0500 Merge branch 'maint-0.4.8'

Merge branch 'minor-049' into 'main'

2026-01-12T15:21:56Z

commit dba00ebf3435848d95ca58f78078b2e0378f8af1 parent 6512c6b4629c8b9979865eb5125dd47a9506306f Author: Alexander Hansen Færøy Date: Mon, 12 Jan 2026 16:21:56 +0100 Merge branch 'minor-049' into 'main' minor log syntax fixes + stale function documentation See merge request tpo/core/tor!968

Merge branch 'changelogs-049' into 'main'

2026-01-12T15:20:39Z

commit 6512c6b4629c8b9979865eb5125dd47a9506306f parent d377f98a50d6ecaa32dbe09637d64b860913513d Author: Alexander Hansen Færøy Date: Mon, 12 Jan 2026 16:20:39 +0100 Merge branch 'changelogs-049' into 'main' forward-port 0.4.8 changelogs plus recent fixes See merge request tpo/core/tor!967

fix stale function documentation

2026-01-11T21:55:55Z

commit d8b09f53c3ad260f130d8e58d0aee9ed8c9d291c parent 7821d91a686da4092db1f9e6dd53705f978e835a Author: Roger Dingledine Date: Sun, 11 Jan 2026 16:55:55 -0500 fix stale function documentation

fix log syntax that confused me while debugging

2026-01-11T21:55:07Z

commit 7821d91a686da4092db1f9e6dd53705f978e835a parent d377f98a50d6ecaa32dbe09637d64b860913513d Author: Roger Dingledine Date: Sun, 11 Jan 2026 16:55:07 -0500 fix log syntax that confused me while debugging

forward-port 0.4.8 changelogs plus recent fixes

2026-01-11T21:43:35Z

commit d6b3c7f75f0c131faf97ee0744a14eb3d620117f parent 5bf1eeaf6d9d850b792a2501133b476d85e0184e Author: Roger Dingledine Date: Sun, 11 Jan 2026 16:43:35 -0500 forward-port 0.4.8 changelogs plus recent fixes

ReleaseNotes isn't for non-stable releases

2026-01-11T21:25:52Z

commit 5bf1eeaf6d9d850b792a2501133b476d85e0184e parent d377f98a50d6ecaa32dbe09637d64b860913513d Author: Roger Dingledine Date: Sun, 11 Jan 2026 16:25:52 -0500 ReleaseNotes isn't for non-stable releases

count how many times we start serving too

2026-01-08T05:50:12Z

commit 802b1c39111db1398ef925fb422c69d624fce09d parent 49a410d5c1568cde733502478defe751f9940a8a Author: Roger Dingledine Date: Thu, 8 Jan 2026 00:50:12 -0500 count how many times we *start* serving too Track how many times directory servers begin serving networkstatus documents, so we can compare it to the number of times we finish serving them. Motivated by the fixes in bug 41192.

Don't count networkstatus serves until they finish

2026-01-08T05:03:58Z

commit 49a410d5c1568cde733502478defe751f9940a8a parent c27d1f33b56ed4557426bc167a568101bdda691b Author: Roger Dingledine Date: Thu, 8 Jan 2026 00:03:58 -0500 Don't count networkstatus serves until they finish When we started serving a consensus document but the client didn't receive all of it, we were still counting that as a success in our stats. This mistake, which can be triggered for example by obsolete clients or by DPI-based censorship, led to wildly inflated user counts because we estimate total users in the world based on successful consensus fetches. Fixes bug 41192; bugfix on 0.2.1.1-alpha.

Fix #41170 - include signal.h if enabling seccomp

2025-11-27T09:53:10Z

commit 795ed4df0824349fc94a37efe36d2a1beb5146f7 parent d377f98a50d6ecaa32dbe09637d64b860913513d Author: mh Date: Thu, 27 Nov 2025 10:53:10 +0100 Fix #41170 - include signal.h if enabling seccomp Newer glibcs (from 6f120faf649f03a261e3e64d5b5991030383c1b3 on) define `SYS_SECCOMP` to an enum. * https://gitlab.torproject.org/tpo/core/tor/-/issues/41170#note_3290238 * https://github.com/bminor/glibc/commit/6f120faf649f03a261e3e64d5b5991030383c1b3

Merge branch 'ticket_41182' into 'main'

2025-12-15T17:03:27Z

commit d377f98a50d6ecaa32dbe09637d64b860913513d parent 25595016f0522f4bd58259ad53c96023515ffa3a Author: David Goulet Date: Mon, 15 Dec 2025 17:03:27 +0000 Merge branch 'ticket_41182' into 'main' Fix a false positive from valgrind Closes #41182 See merge request tpo/core/tor!963

Fix a false positive from valgrind

2025-12-15T16:37:24Z

commit 66751503f3e072422368468251b91569d2f4dce1 parent 25595016f0522f4bd58259ad53c96023515ffa3a Author: Nick Mathewson Date: Mon, 15 Dec 2025 11:37:24 -0500 Fix a false positive from valgrind When you have code that looks like this: ``` struct foo { unsigned a : 30; unsigned b : 2; } bool check_foo(const struct foo *myfoo) { return myfoo->b == 1; } bool check_b(int b) { struct foo myfoo; myfoo.b = b; return check_foo(&myfoo); } ``` It seems that valgrind can complain because the CPU word containing the fields a and b is not wholly initialized, and the instruction in `check_foo` that reads `myfoo->b` loads that whole word. Closes #41182.

Merge branch 'comment-fixups' into 'main'

2025-12-02T13:41:11Z

commit 25595016f0522f4bd58259ad53c96023515ffa3a parent 9d06e8aa72d522f7a9c80efa3a0d8e36fbc2824a Author: David Goulet Date: Tue, 2 Dec 2025 13:41:11 +0000 Merge branch 'comment-fixups' into 'main' tiny comment fixups See merge request tpo/core/tor!961

tiny comment fixups

2025-12-01T22:20:29Z

commit 89e1bd37ffbd64aa77a68e0561fc651a3f9fb9f9 parent 9d06e8aa72d522f7a9c80efa3a0d8e36fbc2824a Author: Roger Dingledine Date: Mon, 1 Dec 2025 17:20:29 -0500 tiny comment fixups

Merge branch 'KernelKraze/fix-sandbox-lstat-i386' into 'main'

2025-12-01T18:43:31Z

commit 9d06e8aa72d522f7a9c80efa3a0d8e36fbc2824a parent d502b269d05beb0d575eea1d79d3ce4c5e71f4fd Author: David Goulet Date: Mon, 1 Dec 2025 18:43:31 +0000 Merge branch 'KernelKraze/fix-sandbox-lstat-i386' into 'main' sandbox: Allow fstatat64, statx and lstat64 syscalls on i386 for glibc 2.33+ See merge request tpo/core/tor!958

Switch log level from "warning" to "info" for message

2025-11-28T17:51:25Z

commit 91a1e796eb472e0becf50d87eba25642de6c7f96 parent c27d1f33b56ed4557426bc167a568101bdda691b Author: Waldemar Zimpel Date: Fri, 28 Nov 2025 18:51:25 +0100 Switch log level from "warning" to "info" for message "Error relaying cell across rendezvous; closing circuits" Closes: #41106, #40951

sandbox: Allow fstatat64, statx and lstat64 syscalls on i386 for glibc 2.33+

2025-11-22T05:45:56Z

commit b4e24d751f7ca304beba21afd64b847e1bb52d54 parent d502b269d05beb0d575eea1d79d3ce4c5e71f4fd Author: KernelKraze Date: Sat, 22 Nov 2025 14:45:56 +0900 sandbox: Allow fstatat64, statx and lstat64 syscalls on i386 for glibc 2.33+ On i386 architecture, glibc 2.33+ uses fstatat64 instead of newfstatat for stat operations. The existing sandbox code only allowed newfstatat (which is not defined on i386), causing SIGHUP configuration reload to fail when using sandbox mode with %include directives. Additionally, glibc 2.33+ on i386 may use statx for time64 support (Y2038), and glob() in glibc 2.36+ uses statx for directory traversal. The existing code only added statx as a fallback when __NR_stat was undefined, but on i386 __NR_stat is always defined, so statx was never allowed. Also allow lstat64 syscall which is used by glob() on i386 with glibc 2.36+ when processing %include directives with directory patterns. This fixes test_include.sh failures on i386 with Debian Bookworm or newer.

Merge branch 'entrypolicy_reason' into 'main'

2025-11-24T15:26:15Z

commit d502b269d05beb0d575eea1d79d3ce4c5e71f4fd parent 9182d077f2c2271363ffcd9b51d43ad48fba69d0 Author: David Goulet Date: Mon, 24 Nov 2025 15:26:15 +0000 Merge branch 'entrypolicy_reason' into 'main' Do not let END_STREAM_REASON_ENTRYPOLICY have a value < 256. Closes #41171 See merge request tpo/core/tor!957

Do not let END_STREAM_REASON_ENTRYPOLICY have a value < 256.

2025-11-20T17:13:48Z

commit 7fd3979b8a2dc4e8abf15e5e0cd6bba12e9f5e49 parent 9182d077f2c2271363ffcd9b51d43ad48fba69d0 Author: Nick Mathewson Date: Thu, 20 Nov 2025 12:13:48 -0500 Do not let END_STREAM_REASON_ENTRYPOLICY have a value < 256. It isn't in the spec, and so should not be recognized in an END message. Closes #41171. Bugfix on 0.2.0.8-alpha.

Merge branch 'http_connect_end_reason' into 'main'

2025-11-20T16:03:56Z

commit 9182d077f2c2271363ffcd9b51d43ad48fba69d0 parent c8be73d92ed5f6e439a9b51209ac33b8f519dfec Author: David Goulet Date: Thu, 20 Nov 2025 16:03:56 +0000 Merge branch 'http_connect_end_reason' into 'main' http-connect: Report end reasons and errors per the spec. See merge request tpo/core/tor!955

Merge branch 'source-epoch' into 'main'

2025-11-20T16:03:45Z

commit c8be73d92ed5f6e439a9b51209ac33b8f519dfec parent 95f84c96ce75256748e092db91c6ebaef470281e Author: David Goulet Date: Thu, 20 Nov 2025 16:03:45 +0000 Merge branch 'source-epoch' into 'main' make git requirement in docs build avoidable See merge request tpo/core/tor!956

Merge branch 'fc43_fixes' into 'main'

2025-11-20T16:00:03Z

commit 95f84c96ce75256748e092db91c6ebaef470281e parent 892d0f4517c29cbf4b66663734bec5f07690adc9 Author: David Goulet Date: Thu, 20 Nov 2025 16:00:03 +0000 Merge branch 'fc43_fixes' into 'main' Fix new (to me) warnings from shellcheck and clang. Closes #41166 See merge request tpo/core/tor!954