October 2017 - tbb-commits - lists.torproject.org

[tor-browser/tor-browser-52.4.1esr-7.5-1] Bug 1305396 - Replace memmove with std::copy_backward in a file that doesn't include cstring explicitly. r=keeler
by gk＠torproject.org 20 Oct '17

20 Oct '17

commit e6cd07862cf0de06b9cc7c091f9d2dd32cd76280 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Oct 16 20:03:54 2017 +0200 Bug 1305396 - Replace memmove with std::copy_backward in a file that doesn't include cstring explicitly. r=keeler --- security/pkix/lib/pkixnames.cpp | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/security/pkix/lib/pkixnames.cpp b/security/pkix/lib/pkixnames.cpp index ca9b8d7d3770..95aa41382a03 100644 --- a/security/pkix/lib/pkixnames.cpp +++ b/security/pkix/lib/pkixnames.cpp @@ -34,6 +34,8 @@ // constraints, the reference identifier is the entire encoded name constraint // extension value. +#include <algorithm> + #include "pkixcheck.h" #include "pkixutil.h" @@ -1705,11 +1707,9 @@ FinishIPv6Address(/*in/out*/ uint8_t (&address)[16], int numComponents, } // Shift components that occur after the contraction over. - size_t componentsToMove = static_cast<size_t>(numComponents - - contractionIndex); - memmove(address + (2u * static_cast<size_t>(8 - componentsToMove)), - address + (2u * static_cast<size_t>(contractionIndex)), - componentsToMove * 2u); + std::copy_backward(address + (2u * static_cast<size_t>(contractionIndex)), + address + (2u * static_cast<size_t>(numComponents)), + address + (2u * 8u)); // Fill in the contracted area with zeros. std::fill_n(address + 2u * static_cast<size_t>(contractionIndex), (8u - static_cast<size_t>(numComponents)) * 2u, static_cast<uint8_t>(0u));

1 0

[tor-browser-bundle/maint-7.0] Fix 7.0.7 Changelog
by gk＠torproject.org 19 Oct '17

19 Oct '17

commit a4e773e8ae8c405b01e61f0b47fda2ee388a21a4 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Oct 19 05:42:56 2017 +0000 Fix 7.0.7 Changelog --- Bundle-Data/Docs/ChangeLog.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 6bb4854..b4673a2 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -22,6 +22,8 @@ Tor Browser 7.0.7 -- October 19 2017 * Bug 23694: Update the detailsURL in update responses * OS X * Bug 23807: Tab crashes when playing video on High Sierra + * Linux + * Bug 22692: Enable content sandboxing on Linux Tor Browser 7.0.6 -- September 26 2017 * All Platforms

1 0

[tor-browser-build/master] Release preparations for 7.5a6
by gk＠torproject.org 18 Oct '17

18 Oct '17

commit 9b4ba8252a80fb10ca9fc22e90033d63383ac05d Author: Georg Koppen <gk(a)torproject.org> Date: Wed Oct 18 06:59:07 2017 +0000 Release preparations for 7.5a6 Changelog update and version bumps --- projects/firefox/config | 4 ++-- projects/https-everywhere/config | 2 +- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 18 ++++++++++++++++++ projects/tor-browser/config | 4 ++-- projects/tor/config | 2 +- projects/torbutton/config | 2 +- rbm.conf | 6 +++--- 7 files changed, 28 insertions(+), 10 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index 5fe6eb1..85a4f00 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,13 +1,13 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build2' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build1' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git gpg_keyring: torbutton.gpg var: - firefox_platform_version: 52.4.0 + firefox_platform_version: 52.4.1 firefox_version: '[% c("var/firefox_platform_version") %]esr' torbrowser_branch: 7.5 torbrowser_update_channel: alpha diff --git a/projects/https-everywhere/config b/projects/https-everywhere/config index 0ccd4e1..99290e7 100644 --- a/projects/https-everywhere/config +++ b/projects/https-everywhere/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 2017.9.12 +version: 2017.10.4 git_url: https://git.torproject.org/https-everywhere.git git_hash: '[% c("version") %]' git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 56fcb64..e18d650 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,21 @@ +Tor Browser 7.5a6 -- October 19 2017 + * All Platforms + * Update Firefox to 52.4.1esr + * Update Tor to 0.3.2.2-alpha + * Update Torbutton to 1.9.8.2 + * Bug 23887: Update banner locales and Mozilla text + * Translations update + * Update HTTPS-Everywhere to 2017.10.4 + * Update NoScript to 5.1.2 + * Bug 23723: Loading entities from NoScript .dtd files is blocked + * Bug 23724: NoScript update breaks Security Slider and its icon disappears + * Bug 23745: Tab crashes when using Tor Browser to access Google Drive + * Bug 23694: Update the detailsURL in update responses + * Bug 22501: Requests via javascript: violate FPI + * OS X + * Bug 23807: Tab crashes when playing video on High Sierra + * Bug 23025: Add some hardening flags to macOS build + Tor Browser 7.5a5 -- September 28 2017 * All Platforms * Update Firefox to 52.4.0esr diff --git a/projects/tor-browser/config b/projects/tor-browser/config index 5121459..a777a98 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -57,9 +57,9 @@ input_files: name: snowflake enable: '[% c("var/snowflake") %]' - filename: Bundle-Data - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: cfc8018a5ddd2a699581932a9911e28b1060667c7849cf5283b548b5b29a65a2 + sha256sum: 82687646b9ecc39d478ac5d4de035b32fdf88efc6faceec3e74b49c863bbfabb - filename: RelativeLink enable: '[% c("var/linux") %]' - project: libdmg-hfsplus diff --git a/projects/tor/config b/projects/tor/config index 26c3780..b5df573 100644 --- a/projects/tor/config +++ b/projects/tor/config @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -version: 0.3.2.1-alpha +version: 0.3.2.2-alpha git_hash: 'tor-[% c("version") %]' git_url: https://git.torproject.org/tor.git gpg_keyring: tor.gpg diff --git a/projects/torbutton/config b/projects/torbutton/config index 2cc2288..6e45ef8 100644 --- a/projects/torbutton/config +++ b/projects/torbutton/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.9.8.1 +version: 1.9.8.2 git_url: https://git.torproject.org/torbutton.git git_hash: '[% c("version") %]' gpg_keyring: torbutton.gpg diff --git a/rbm.conf b/rbm.conf index 6b5fc3e..80a7091 100644 --- a/rbm.conf +++ b/rbm.conf @@ -15,10 +15,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '7.5a5' - torbrowser_build: 'build5' + torbrowser_version: '7.5a6' + torbrowser_build: 'build1' torbrowser_incremental_from: - - 7.5a4 + - 7.5a5 project_name: tor-browser multi_lingual: 0 build_mar: 1

1 0

[torbutton/master] Release preparations for 1.9.8.2
by gk＠torproject.org 18 Oct '17

18 Oct '17

commit ba26f41e78319a3d412d59c58c9f701525e3fbfc Author: Georg Koppen <gk(a)torproject.org> Date: Wed Oct 18 06:45:19 2017 +0000 Release preparations for 1.9.8.2 CHANGELOG update and version bump --- src/CHANGELOG | 4 ++++ src/install.rdf | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/src/CHANGELOG b/src/CHANGELOG index 6d6c973..0eb1e0e 100644 --- a/src/CHANGELOG +++ b/src/CHANGELOG @@ -1,3 +1,7 @@ +1.9.8.2 + * Bug 23887: Update banner locales and Mozilla text + * Translations update + 1.9.8.1 * Bug 20375: Warn users after entering fullscreen mode * Bug 22989: Fix dimensions of new windows on macOS diff --git a/src/install.rdf b/src/install.rdf index 57387d2..30f2ddd 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.8.1</em:version> + <em:version>1.9.8.2</em:version> <em:multiprocessCompatible>true</em:multiprocessCompatible> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL>

1 0

[tor-browser-build/master] Bug 23025: Add some hardening flags to macOS build
by gk＠torproject.org 18 Oct '17

18 Oct '17

commit 6d0193cd71a4969207d7813029722c48a64bb7de Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Mon Oct 2 10:17:52 2017 -0700 Bug 23025: Add some hardening flags to macOS build Added flags: -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Werror=format -Werror=format-security --- projects/firefox/mozconfig-osx-x86_64 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/projects/firefox/mozconfig-osx-x86_64 b/projects/firefox/mozconfig-osx-x86_64 index bc7a30e..9ac3ac8 100644 --- a/projects/firefox/mozconfig-osx-x86_64 +++ b/projects/firefox/mozconfig-osx-x86_64 @@ -5,7 +5,8 @@ TOOLCHAIN_DIR=/var/tmp/dist/macosx-toolchain CROSS_CCTOOLS_PATH=$TOOLCHAIN_DIR/cctools CROSS_SYSROOT=$TOOLCHAIN_DIR/SDK CROSS_PRIVATE_FRAMEWORKS=$CROSS_SYSROOT/System/Library/PrivateFrameworks -FLAGS="-target x86_64-apple-darwin10 -mlinker-version=136 -B $CROSS_CCTOOLS_PATH/bin -isysroot $CROSS_SYSROOT" +HARDENING_FLAGS="-Werror=format -Werror=format-security -fstack-protector-strong -D_FORTIFY_SOURCE=2" +FLAGS="-target x86_64-apple-darwin10 -mlinker-version=136 -B $CROSS_CCTOOLS_PATH/bin -isysroot $CROSS_SYSROOT $HARDENING_FLAGS" export CC="$TOOLCHAIN_DIR/clang/bin/clang $FLAGS" export CXX="$TOOLCHAIN_DIR/clang/bin/clang++ $FLAGS"

1 0

[tor-browser/tor-browser-52.4.0esr-7.5-1] squash! TB3: Tor Browser's official .mozconfigs.
by gk＠torproject.org 18 Oct '17

18 Oct '17

commit cf8aaea952b4e83eead22b78a5221ff5783d8fab Author: Georg Koppen <gk(a)torproject.org> Date: Wed Oct 18 06:29:44 2017 +0000 squash! TB3: Tor Browser's official .mozconfigs. Bug 23025: Add hardening flags for macOS --- .mozconfig-mac | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.mozconfig-mac b/.mozconfig-mac index 844ee2e94fbc..4e4741243288 100644 --- a/.mozconfig-mac +++ b/.mozconfig-mac @@ -4,7 +4,8 @@ mk_add_options "export LD_LIBRARY_PATH=$topsrcdir/clang/lib" CROSS_CCTOOLS_PATH=$topsrcdir/cctools CROSS_SYSROOT=$topsrcdir/MacOSX10.7.sdk CROSS_PRIVATE_FRAMEWORKS=$CROSS_SYSROOT/System/Library/PrivateFrameworks -FLAGS="-target x86_64-apple-darwin10 -mlinker-version=136 -B $CROSS_CCTOOLS_PATH/bin -isysroot $CROSS_SYSROOT" +HARDENING_FLAGS="-Werror=format -Werror=format-security -fstack-protector-strong -D_FORTIFY_SOURCE=2" +FLAGS="-target x86_64-apple-darwin10 -mlinker-version=136 -B $CROSS_CCTOOLS_PATH/bin -isysroot $CROSS_SYSROOT $HARDENING_FLAGS" export CC="$topsrcdir/clang/bin/clang $FLAGS" export CXX="$topsrcdir/clang/bin/clang++ $FLAGS"

1 0

[tor-browser-build/master] Bug 23812: fix parsing of runc spec version
by gk＠torproject.org 18 Oct '17

18 Oct '17

commit bfdc5bc5aecceb8ec713562f36134e6ec64cc845 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Wed Oct 11 00:53:00 2017 +0200 Bug 23812: fix parsing of runc spec version --- rbm.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rbm.conf b/rbm.conf index c433f00..6b5fc3e 100644 --- a/rbm.conf +++ b/rbm.conf @@ -383,7 +383,7 @@ ENV: # We will need to update this when there is a new spec version available runc_spec100 => sub { my ($out) = capture_exec('sudo', 'runc', '--version'); - return $out =~ m/^runc version spec: 1\.0\.0$/; + return $out =~ m/^spec: 1\.0\.0$/m; }, }, )

1 0

[tor-browser-build/master] Bug 23694: update the detailsURL in update responses
by gk＠torproject.org 17 Oct '17

17 Oct '17

commit ac2aeae99060dde267e89e68f6962047a89ddf80 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Tue Oct 17 15:59:13 2017 +0200 Bug 23694: update the detailsURL in update responses --- projects/release/update_responses_config.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/release/update_responses_config.yml b/projects/release/update_responses_config.yml index f0d9dbf..69d8909 100644 --- a/projects/release/update_responses_config.yml +++ b/projects/release/update_responses_config.yml @@ -23,7 +23,7 @@ channels: versions: [% c("var/torbrowser_version") %]: platformVersion: [% pc('firefox', 'var/firefox_platform_version') %] - detailsURL: https://blog.torproject.org/blog/tor-browser-[% c("var/torbrowser_version") FILTER remove('\.') %]-released + detailsURL: https://blog.torproject.org/tor-browser-[% c("var/torbrowser_version") FILTER remove('\.') %]-released incremental_from: [% FOREACH v IN c("var/torbrowser_incremental_from") -%] - [% v %]

1 0

[tor-browser-bundle/maint-7.0] Bug 23694: update the detailsURL in update responses
by gk＠torproject.org 17 Oct '17

17 Oct '17

commit 4082cf0318557c0a4d7d161c88e15ffd9118133c Author: Georg Koppen <gk(a)torproject.org> Date: Tue Oct 17 14:08:56 2017 +0000 Bug 23694: update the detailsURL in update responses Patch by boklm --- tools/update-responses/config.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 0275d31..1eceba9 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -24,7 +24,7 @@ channels: versions: 7.0.7: platformVersion: 52.4.1 - detailsURL: https://blog.torproject.org/blog/tor-browser-707-released + detailsURL: https://blog.torproject.org/tor-browser-707-released incremental_from: - 7.0.6 migrate_archs:

1 0

[tor-browser-bundle/maint-7.0] Update Changelog file
by gk＠torproject.org 17 Oct '17

17 Oct '17

commit ef1896ec8904a012321f7da74e249913c9e1260f Author: Georg Koppen <gk(a)torproject.org> Date: Tue Oct 17 14:12:47 2017 +0000 Update Changelog file --- Bundle-Data/Docs/ChangeLog.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index c35d20d..6bb4854 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -19,6 +19,7 @@ Tor Browser 7.0.7 -- October 19 2017 * Bug 22472: Fix FTP downloads when external helper app dialog is shown * Bug 22471: Downloading pdf files via the PDF viewer download button is broken * Bug 22618: Downloading pdf file via file:/// is stalling + * Bug 23694: Update the detailsURL in update responses * OS X * Bug 23807: Tab crashes when playing video on High Sierra

1 0