- tbb-commits - lists.torproject.org

[tor-android-service] branch main updated: Bug 41481: Update PendingIntent for Android 12+
by gitolite role 28 Nov '22

28 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository tor-android-service. The following commit(s) were added to refs/heads/main by this push: new f324999 Bug 41481: Update PendingIntent for Android 12+ f324999 is described below commit f324999c1773a8d8c83c50106a2cac30be93aabf Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Mon Nov 28 09:54:28 2022 +0100 Bug 41481: Update PendingIntent for Android 12+ --- .../main/java/org/torproject/android/service/TorService.java | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/service/src/main/java/org/torproject/android/service/TorService.java b/service/src/main/java/org/torproject/android/service/TorService.java index f1ddcda..662d3cc 100644 --- a/service/src/main/java/org/torproject/android/service/TorService.java +++ b/service/src/main/java/org/torproject/android/service/TorService.java @@ -142,17 +142,25 @@ public final class TorService extends Service implements TorServiceConstants, Or } intent.setAction(TorServiceConstants.TOR_APP_USERNAME); intent.setFlags(Intent.FLAG_ACTIVITY_NEW_TASK); - PendingIntent pendIntent = PendingIntent.getActivity(getApplicationContext(), 0, intent, 0); + int flags = 0; + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) { + flags = flags | PendingIntent.FLAG_IMMUTABLE; + } + PendingIntent pendIntent = PendingIntent.getActivity(getApplicationContext(), 0, intent, flags); if (mNotifyBuilder == null) { mNotifyBuilder = new NotificationBuilderCompat(this, NOTIFICATION_CHANNEL_ID) .setContentTitle(getString(R.string.app_name)).setContentIntent(pendIntent).setCategory("service") .setSmallIcon(R.drawable.ic_stat_tor); + flags = PendingIntent.FLAG_UPDATE_CURRENT; + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) { + flags = flags | PendingIntent.FLAG_IMMUTABLE; + } Intent intentRefresh = new Intent(CMD_NEWNYM); PendingIntent pendingIntentNewNym = PendingIntent.getBroadcast(getApplicationContext (), 0, - intentRefresh, PendingIntent.FLAG_UPDATE_CURRENT); + intentRefresh, flags); mNotifyBuilder.addAction(R.drawable.ic_refresh_white_24dp, getString(R.string .menu_new_identity), pendingIntentNewNym); -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser-spec] branch main updated: Bug 40037: FF102 Audit
by gitolite role 23 Nov '22

23 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository tor-browser-spec. The following commit(s) were added to refs/heads/main by this push: new 89cd77f Bug 40037: FF102 Audit 89cd77f is described below commit 89cd77f35caa56c04f9a63af619e3ac28634fa79 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Wed Nov 23 13:44:12 2022 +0000 Bug 40037: FF102 Audit --- audits/FF102_AUDIT | 75 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 75 insertions(+) diff --git a/audits/FF102_AUDIT b/audits/FF102_AUDIT new file mode 100644 index 0000000..b712921 --- /dev/null +++ b/audits/FF102_AUDIT @@ -0,0 +1,75 @@ +Tracking issue: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/issues/40… + +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `856b9168439ef597dbd103cd1e2940a8ad110450` ( `FIREFOX_RELEASE_102_BASE` ) +- End: `4960b7d420528392cc095c247a662670785b18b9` ( `FIREFOX_RELEASE_103_BASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `0302b89604bb29adb34fdcd710feabd3dd01992d` ( `v93.5.0` ) +- End: `55cbbddfdcb4ec82d2850e0811e8675fea2686c2` ( `v93.7.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Android Components: https://github.com/mozilla-mobile/android-components.git + +- Start: `2b414097d4f540948f67f62f57c5ddcb0e2789d9` ( `v102.0.1` ) +- End: `cd19f9a6c5e26c4e57dda6e549a5c63ac7c042ea` ( `v102.0.14` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `cc68c965cbb29eb16244d242d433051327de5f48` ( `v102.0.0-beta.1` ) +- End: `2ec252d5f5d09b3eb73840ce585453b7105a7a7d` ( `releases_v102.0.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +### 102 https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=F… + +- https://bugzilla.mozilla.org/show_bug.cgi?id=1767919 : @pierov https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41152 + - nothing for us to do here +- ~~https://bugzilla.mozilla.org/show_bug.cgi?id=1770881 : @pierov https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41153~~ 102esr is unaffected: the Bugzilla ticket was wrong and then has been fixed +- https://bugzilla.mozilla.org/show_bug.cgi?id=1765167 : @pierov https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41154 + - no security/privacy implications, just a refactor required to maintain functionality +- https://bugzilla.mozilla.org/show_bug.cgi?id=1751450 : @richard https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41155 + - nothing for us to do here -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] annotated tag tbb-11.5.9-build1 created (now e76027ca)
by gitolite role 23 Nov '22

23 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to annotated tag tbb-11.5.9-build1 in repository builders/tor-browser-build. at e76027ca (tag) tagging 22dec89e6d89eb9c14d287396b440570828090c8 (commit) replaces tbb-11.5.8-build1 by Richard Pospesel on Tue Nov 22 21:26:25 2022 +0000 - Log ----------------------------------------------------------------- Tagging build1 for 11.5.9 -----BEGIN PGP SIGNATURE----- iQJLBAABCAA1FiEEvnyRTMkiztnZPSO33kc2A2PzSywFAmN9PoEXHHJpY2hhcmRA dG9ycHJvamVjdC5vcmcACgkQ3kc2A2PzSyx5Uw//faerQzjl9TI8SLHXLL3m+X4I hwB+iz9o5E0RSe3M9UHJonmiVf7EruRJI+vfQ09Bn84pW1hrNIlxMraXctYgKdnr pzPqmQ2Kd0e406qx0JcLaT2rHxmR4ay5UIdTvgw/HdwK1HNG4/FVjsQvJL3cC5m6 5T4HCJAxn7sLSTe+2HPIHpX7Nh4xx6U8/5/6DMTorRqfo+Eui1VJTNQPrXdPn1fv U3FpcfEEXHcicPIyre5XiIPzIz09QOhNk83rAEWF/yYLexWz3mu2w9RQ88CM0Cn+ Z7+/7mPy/wg7lvF3xAC8kkPS6Pk6bKWTuzIwksddybGPYA1R10O3hIpQhgztca6D mX1QmOJ/DVxcclzuOlTyyhNPLpu11T3p4A+5p9ot/GFCBC2AAUdpKKquUM07/eKF b6RUD/uteZVSUBA8GnVD533Sxe2IGwYT9OtVOKt5yDd/8gzaZ0aTjJ6EavAAqMqF v12VCIb+x23B0F+nEEeAupo+ONi23AdllSecV0ZDqmDU/1PavUI5BXOPyo/8Pw+E H3bfS5T49K0IcZWq/vFENFtrK5UoxI1jV3bDUPUtUm59gutjbbvFhxg/BMr5W84g i2taQGwa7K8qRbS6wr8wY0JHrNzTgXqPjJOr1FgA1vUM8ROhbJIVi7y5A1vNDnbL 0kJdEWNRwNeyovr1rPM= =rzEd -----END PGP SIGNATURE----- ----------------------------------------------------------------------- No new revisions were added by this update. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch maint-11.5 updated: Bug 40692: Prepare stable release 11.5.9 (Android only)
by gitolite role 23 Nov '22

23 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch maint-11.5 in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/maint-11.5 by this push: new 22dec89e Bug 40692: Prepare stable release 11.5.9 (Android only) 22dec89e is described below commit 22dec89e6d89eb9c14d287396b440570828090c8 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Tue Nov 22 19:04:42 2022 +0000 Bug 40692: Prepare stable release 11.5.9 (Android only) --- projects/fenix/config | 2 +- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 4 ++++ rbm.conf | 3 +-- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/projects/fenix/config b/projects/fenix/config index 48a7777b..779197e9 100644 --- a/projects/fenix/config +++ b/projects/fenix/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'fenix-[% c("version") %]-[% c("var/build_id") %].tar.gz' -git_hash: 'tor-browser-[% c("var/fenix_version") %]-[% c("var/torbrowser_branch") %]-1-build2' +git_hash: 'tor-browser-[% c("var/fenix_version") %]-[% c("var/torbrowser_branch") %]-1-build3' git_url: https://gitlab.torproject.org/tpo/applications/fenix.git tag_gpg_id: 1 gpg_keyring: torbutton.gpg diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index dcbf4c2e..11a11fbc 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,7 @@ +Tor Browser 11.5.9 - November 22 2022 +* Android + * Bug 41471: Update targetSdkVersion to 31 [tor-browser] + Tor Browser 11.5.8 - November 18 2022 * All Platforms * Update Translations diff --git a/rbm.conf b/rbm.conf index cb3c3022..9635fbdd 100644 --- a/rbm.conf +++ b/rbm.conf @@ -71,10 +71,9 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '11.5.8' + torbrowser_version: '11.5.9' torbrowser_build: 'build1' torbrowser_incremental_from: - - 11.5.7 project_name: tor-browser multi_lingual: 0 build_mar: 1 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[Git][tpo/applications/fenix] Pushed new tag tor-browser-102.2.1-12.0-1-build6
by Pier Angelo Vendrame (＠pierov) 23 Nov '22

23 Nov '22

Pier Angelo Vendrame pushed new tag tor-browser-102.2.1-12.0-1-build6 at The Tor Project / Applications / fenix -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/tree/tor-browser-102… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/fenix][tor-browser-102.2.1-12.0-1] For #21102: Build with SDK for Android 12 / API 31 (#25494)
by Pier Angelo Vendrame (＠pierov) 23 Nov '22

23 Nov '22

Pier Angelo Vendrame pushed to branch tor-browser-102.2.1-12.0-1 at The Tor Project / Applications / fenix Commits: 8b67442c by Arturo Mejia at 2022-11-23T14:01:34+01:00 For #21102: Build with SDK for Android 12 / API 31 (#25494) Co-authored-by: mergify[bot] <37929162+mergify[bot](a)users.noreply.github.com> - - - - - 3 changed files: - app/src/main/AndroidManifest.xml - app/src/nightly/AndroidManifest.xml - buildSrc/src/main/java/Config.kt Changes: ===================================== app/src/main/AndroidManifest.xml ===================================== @@ -44,6 +44,7 @@ --> <activity-alias android:name="${applicationId}.App" + android:exported="true" android:targetActivity=".HomeActivity"> <intent-filter> <action android:name="android.intent.action.MAIN" /> @@ -68,6 +69,7 @@  <activity-alias android:name="org.mozilla.gecko.LauncherActivity" + android:exported="true" android:targetActivity=".IntentReceiverActivity"> <intent-filter> <action android:name="org.mozilla.gecko.WEBAPP" /> @@ -76,6 +78,7 @@ <activity android:name=".HomeActivity" + android:exported="true" android:configChanges="keyboard|keyboardHidden|mcc|mnc|orientation|screenSize|layoutDirection|smallestScreenSize|screenLayout" android:launchMode="singleTask" android:resizeableActivity="true" @@ -265,6 +268,7 @@ <service android:name=".autofill.AutofillService" + android:exported="true" android:label="@string/app_name" android:permission="android.permission.BIND_AUTOFILL_SERVICE"> <intent-filter> @@ -288,9 +292,13 @@ </intent-filter> </service> - <service android:name=".downloads.DownloadService" /> + <service + android:name=".downloads.DownloadService" + android:exported="false" /> + <receiver - android:name="org.mozilla.gecko.search.SearchWidgetProvider"> + android:name="org.mozilla.gecko.search.SearchWidgetProvider" + android:exported="true"> <intent-filter> <action android:name="android.appwidget.action.APPWIDGET_UPDATE" /> </intent-filter> ===================================== app/src/nightly/AndroidManifest.xml ===================================== @@ -4,8 +4,10 @@ <application> - <service android:name=".customtabs.CustomTabsService"> -  + <service + android:name=".customtabs.CustomTabsService" + android:exported="true"> +  <intent-filter tools:node="removeAll" /> <intent-filter> <action android:name="android.support.customtabs.action.CustomTabsService" /> ===================================== buildSrc/src/main/java/Config.kt ===================================== @@ -13,7 +13,7 @@ object Config { // Synchronized build configuration for all modules const val compileSdkVersion = 31 const val minSdkVersion = 21 - const val targetSdkVersion = 30 + const val targetSdkVersion = 31 @JvmStatic private fun generateDebugVersionName(): String { View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/commit/8b67442c2b717… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/commit/8b67442c2b717… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser] annotated tag tor-browser-102.5.0esr-12.0-1-build2 created (now ccaafafb3e1b)
by gitolite role 22 Nov '22

22 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to annotated tag tor-browser-102.5.0esr-12.0-1-build2 in repository tor-browser. at ccaafafb3e1b (tag) tagging ee150f0a3ee5690d6ffebab25e3bec60eea4e7b4 (commit) replaces tor-browser-102.5.0esr-12.0-1-build1 by Richard Pospesel on Tue Nov 22 21:44:07 2022 +0000 - Log ----------------------------------------------------------------- Tagging build2 for 102.5esr-based alpha -----BEGIN PGP SIGNATURE----- iQJLBAABCAA1FiEEvnyRTMkiztnZPSO33kc2A2PzSywFAmN9QrcXHHJpY2hhcmRA dG9ycHJvamVjdC5vcmcACgkQ3kc2A2PzSyzMzw/9G5p5k554g7StyUIE5JeuQP/q 3OmBiiVyJUvoNGHwIJ/K8EuO+YRJWyAQG5K7VJcjyhYiAK+g3045VAQnitSN202N kjBK1KYZwi0PYgHVHoJ6BDrrzYOqR4orr9boD8QvYCpN2iOulogSu6JPMuJXWNDh ipHQhY6w+9easRz62qg8ISBUsF7A2QQhPEqp6yRACrL71l8Syko0hLO9NPYj0V7n NLefWOB0TVk/axhsyev5S5CqWEA4irl9JLKr6sAGuNwjKm3LCVtNZU0djBhtQe85 9FKwEp/OWs0NVD21/m8YDDF7ctHCVaoW5Eikt4paP0EXSNZSQzRo8hWG5dnLZyp/ vEc5H6CnxuTH8g3VtfY7QSuq9UVo8a4GzDn0vA8Gc6GYYuKUjHyLkFzfSpRzxzJX mjSgGgUwqvKbKn+lLDJ+BJiy+fnBmICrfgsfMPNmgZSMgyFj3GVJCnQUzO1YEo09 ydraOVyG2PbNPwR8ecQnsag+MDfL0W7IWiMZxRcUu3V5GnlrjTI/U9yFb/Fbm7ZK NDpArp0t8f1gIe72Iml3boQhLqXeVIKcGH+p1KBYG5N4jKyIrIjNLjqzOGUN3q71 ukaxTu6fD6SG84u0OgA+0p3diwuN9EdstxAPka4XDsKWyS+j6Enm2loVBsZiwk0q Xq3kj9TQDjwID+4p1VY= =sX/c -----END PGP SIGNATURE----- ----------------------------------------------------------------------- No new revisions were added by this update. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.5.0esr-12.0-1 updated: fixup! Bug 10760: Integrate TorButton to TorBrowser core
by gitolite role 22 Nov '22

22 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-102.5.0esr-12.0-1 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.5.0esr-12.0-1 by this push: new ee150f0a3ee5 fixup! Bug 10760: Integrate TorButton to TorBrowser core ee150f0a3ee5 is described below commit ee150f0a3ee5690d6ffebab25e3bec60eea4e7b4 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Tue Nov 22 21:43:19 2022 +0000 fixup! Bug 10760: Integrate TorButton to TorBrowser core Bug 41473: Add support for Albanian (sq) --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index aadb30c6bcfc..5e6353832389 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit aadb30c6bcfcc1ff0b9dd31fc9f514f06b757fe3 +Subproject commit 5e6353832389106713311ec96570420ca5563c0b -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[torbutton] branch main updated (aadb30c6 -> 5e635383)
by gitolite role 22 Nov '22

22 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to branch main in repository torbutton. from aadb30c6 Translation updates new 6f7ca9de Bug 41473: Add Albanian to import-translations.sh new 5e635383 Translation update (Albanian only) The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: chrome/locale/{da => sq}/aboutDialog.dtd | 20 +-- chrome/locale/sq/aboutTBUpdate.dtd | 8 + chrome/locale/sq/aboutTor.dtd | 97 ++++++------ chrome/locale/sq/brand.dtd | 17 ++- chrome/locale/sq/brand.properties | 19 +-- chrome/locale/sq/branding/brand.ftl | 12 +- chrome/locale/sq/browserOnboarding.properties | 72 +++++++++ chrome/locale/sq/network-settings.dtd | 179 ++++++++++++++++++++++ chrome/locale/sq/torbutton.dtd | 69 +++++++-- chrome/locale/sq/torbutton.properties | 204 +++++++++++++++++++++++--- chrome/locale/sq/torlauncher.properties | 97 ++++++++++++ import-translations.sh | 2 +- 12 files changed, 687 insertions(+), 109 deletions(-) copy chrome/locale/{da => sq}/aboutDialog.dtd (54%) create mode 100644 chrome/locale/sq/aboutTBUpdate.dtd create mode 100644 chrome/locale/sq/browserOnboarding.properties create mode 100644 chrome/locale/sq/network-settings.dtd create mode 100644 chrome/locale/sq/torlauncher.properties -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2

[Git][tpo/applications/fenix] Pushed new tag tor-browser-102.2.1-11.5-1-build3
by Pier Angelo Vendrame (＠pierov) 22 Nov '22

22 Nov '22

Pier Angelo Vendrame pushed new tag tor-browser-102.2.1-11.5-1-build3 at The Tor Project / Applications / fenix -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/tree/tor-browser-102… You're receiving this email because of your account on gitlab.torproject.org.

1 0