tor

The Tor anonymity network
git clone https://git.dasho.dev/tor.git
Log | Files | Refs | README | LICENSE

commit 90894c87a542c8671b4fb13d8e088e1e5c89d9b6
parent 0698a0beca8387e2d365fd0cd5801ecc4f910de3
Author: Nick Mathewson <nickm@torproject.org>
Date:   Mon, 22 May 2017 08:32:18 -0400

Merge branch 'maint-0.3.0'

Diffstat:
Achanges/bug20509 | 5+++++
Msrc/or/dirserv.c | 11+++++++++++
2 files changed, 16 insertions(+), 0 deletions(-)

diff --git a/changes/bug20509 b/changes/bug20509 @@ -0,0 +1,5 @@ + o Minor features: + - Directory authorities now reject relays running versions + 0.2.9.1-alpha through 0.2.9.4-alpha, because those relays + suffer from bug 20499 and don't keep their consensus cache + up-to-date. Resolves ticket 20509. diff --git a/src/or/dirserv.c b/src/or/dirserv.c @@ -398,6 +398,17 @@ dirserv_get_status_impl(const char *id_digest, const char *nickname, return FP_REJECT; } + /* Tor 0.2.9.x where x<5 suffers from bug #20499, where relays don't + * keep their consensus up to date so they make bad guards. + * The simple fix is to just drop them from the network. */ + if (platform && + tor_version_as_new_as(platform,"0.2.9.0-alpha") && + !tor_version_as_new_as(platform,"0.2.9.5-alpha")) { + if (msg) + *msg = "Tor version contains bug 20499. Please upgrade!"; + return FP_REJECT; + } + status_by_digest = digestmap_get(fingerprint_list->status_by_digest, id_digest); if (status_by_digest)