- tbb-commits - lists.torproject.org

[Git][tpo/applications/android-components] Pushed new branch android-components-74.0.6-10.5-1
by Matthew Finkel 06 Apr '21

06 Apr '21

Matthew Finkel pushed new branch android-components-74.0.6-10.5-1 at The Tor Project / Applications / android-components -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/tree/an… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser-build/master] Bug 40262: Remove -march=native from lucetc build flags
by gk＠torproject.org 06 Apr '21

06 Apr '21

commit d628abb8f6a8301c93f5315a8ff3b19269401783 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Mar 29 13:49:12 2021 +0200 Bug 40262: Remove -march=native from lucetc build flags --- .../Remove-march-native-from-COMMON_CFLAGS.patch | 24 ++++++++++++++++++++++ projects/lucetc/build | 2 ++ projects/lucetc/config | 1 + 3 files changed, 27 insertions(+) diff --git a/projects/lucetc/Remove-march-native-from-COMMON_CFLAGS.patch b/projects/lucetc/Remove-march-native-from-COMMON_CFLAGS.patch new file mode 100644 index 0000000..13b16db --- /dev/null +++ b/projects/lucetc/Remove-march-native-from-COMMON_CFLAGS.patch @@ -0,0 +1,24 @@ +From ce82762aef3f8cdbdd340f39f95d2491f69a7da0 Mon Sep 17 00:00:00 2001 +From: Nicolas Vigier <boklm(a)torproject.org> +Date: Mon, 29 Mar 2021 13:42:48 +0200 +Subject: [PATCH] Remove -march=native from COMMON_CFLAGS + +The -march=native flag is causing an error on some hardware. It can also +make the build non-reproducible when not building on the same hardware. +--- + lucet-builtins/Makefile | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/lucet-builtins/Makefile b/lucet-builtins/Makefile +index 6ddbcfd..de7e540 100644 +--- a/lucet-builtins/Makefile ++++ b/lucet-builtins/Makefile +@@ -7,7 +7,7 @@ LIBBUILTINS_OBJS:=$(addprefix build/, \ + strcmp.o \ + strlen.o ) + +-COMMON_CFLAGS:= --std=gnu99 -Ofast -Wall -Werror -march=native -fPIC \ ++COMMON_CFLAGS:= --std=gnu99 -Ofast -Wall -Werror -fPIC \ + -I../lucet-runtime/include + + default: build/libbuiltins.so diff --git a/projects/lucetc/build b/projects/lucetc/build index 208f4e1..e06c272 100644 --- a/projects/lucetc/build +++ b/projects/lucetc/build @@ -47,6 +47,8 @@ replace-with = "vendored-sources" directory = "/var/tmp/build/lucetc/vendor" EOF +patch -p1 < $rootdir/Remove-march-native-from-COMMON_CFLAGS.patch + make -j[% c("buildconf/num_procs") %] build # XXX: Should not be needed, just the lucetc binary, see: taskcluster/scripts/misc/build-lucetc.sh make install diff --git a/projects/lucetc/config b/projects/lucetc/config index 72b79fe..0007201 100644 --- a/projects/lucetc/config +++ b/projects/lucetc/config @@ -31,3 +31,4 @@ input_files: # the sources. - URL: https://people.torproject.org/~gk/mirrors/sources/lucetc-vendor.tar.bz2 sha256sum: 12ba97fca12177e7ed5b5409fcfdbd31dc7db2e82282768d99dee5bcb1b1246a + - filename: Remove-march-native-from-COMMON_CFLAGS.patch

1 0

[tor-browser-build/master] Merge remote-tracking branch 'gitlab/merge-requests/250'
by gk＠torproject.org 06 Apr '21

06 Apr '21

commit b06cd24c172f4e54a2586e2e55aedbb5fe3caac8 Merge: 663a42c d628abb Author: Georg Koppen <gk(a)torproject.org> Date: Tue Apr 6 07:41:40 2021 +0000 Merge remote-tracking branch 'gitlab/merge-requests/250' .../Remove-march-native-from-COMMON_CFLAGS.patch | 24 ++++++++++++++++++++++ projects/lucetc/build | 2 ++ projects/lucetc/config | 1 + 3 files changed, 27 insertions(+)

1 0

[tor-browser-spec/master] Update FF78/87 audits
by sysrqb＠torproject.org 05 Apr '21

05 Apr '21

commit 9e063f9d09855fb38770d06ea6b8afb00100e259 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Apr 5 22:09:37 2021 +0000 Update FF78/87 audits --- audits/FF78_NETWORK_AUDIT | 2 +- audits/FF87_NETWORK_AUDIT | 8 ++++---- audits/code_audit.sh | 2 ++ 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/audits/FF78_NETWORK_AUDIT b/audits/FF78_NETWORK_AUDIT index d73f450..6626dda 100644 --- a/audits/FF78_NETWORK_AUDIT +++ b/audits/FF78_NETWORK_AUDIT @@ -1,6 +1,6 @@ Summary of findings: https://gitlab.torproject.org/tpo/applications/fenix/-/issues/34177 -`git diff 8da33f6c34c0ca5b1d7bca58ca86cb5e436333e8 bace0d2a46cabd36f5bdc738c000f15ae4a4225c` +`git diff 8da33f6c34c0ca5b1d7bca58ca86cb5e436333e8 4735a392536150f49518c48aa9510cf313603b92` and then go over all the changes containing the above mentioned potentially dangerous calls and features. Grep the diff for the following strings and examine surrounding usage. diff --git a/audits/FF87_NETWORK_AUDIT b/audits/FF87_NETWORK_AUDIT index 8874897..fba3a86 100644 --- a/audits/FF87_NETWORK_AUDIT +++ b/audits/FF87_NETWORK_AUDIT @@ -1,7 +1,7 @@ Start: fe9560804bef331ff346f3fd3b05e74122fdd30b # FIREFOX_86_0_BUILD2 -End: 1be3d58406ce4dd8af63a169482ae4ca1709d8e5 # FIREFOX_87_0b9_BUILD1 +End: 4068febfd76d9ec557591240d7496be42c27c17f # FIREFOX_87_0_BUILD3 -`git diff fe9560804bef331ff346f3fd3b05e74122fdd30b 1be3d58406ce4dd8af63a169482ae4ca1709d8e5` +`git diff fe9560804bef331ff346f3fd3b05e74122fdd30b 4068febfd76d9ec557591240d7496be42c27c17f` and then go over all the changes containing the below mentioned potentially dangerous calls and features. Grep the diff for the following strings and examine surrounding usage. @@ -120,7 +120,7 @@ End: 1ee6b32f3ee569036fdf1015cf7ffc01ded2860f # v71.0.0 ============ Android Components Portion ============= Start: 095c0ef007ada4dab8561bef69e43bf6db1d3298 # v72.0.15 -End: ecccbf2da2b0572a1d600cce447d47f2eae0de9a # v73.0.3 +End: bea80bbaccc431994a534a087b223563826ac256 # v73.0.11 # FF87 (using `java_audit.sh`) # Commit 6edfec5fe464e4b1d0eb82ed8825526036d861c8 @@ -138,7 +138,7 @@ End: ecccbf2da2b0572a1d600cce447d47f2eae0de9a # v73.0.3 ============ Fenix Portion ============= Start: db196d0e49eb0f69ab620856491deb8c4c7ccf57 # v86.1.0 -End: 82c8a64ca0b8bd5e6ea88395cba41c0db68d0a36 # v87.0.0-beta.4 +End: 9d91b8eeb9d287ee95937b5edfffde383982267a # v87.0.0-rc.1 # FF87: (using `java_audit.sh`) # - c9b8f57f96e9188746391885a065428df62f3ff9 diff --git a/audits/code_audit.sh b/audits/code_audit.sh index 3586470..c7c0848 100755 --- a/audits/code_audit.sh +++ b/audits/code_audit.sh @@ -53,6 +53,8 @@ initialize_java_symbols() { KEYWORDS+=(AppLinksInterceptor) KEYWORDS+=(AppLinksUseCases) KEYWORDS+=(ActivityDelegate) + # Added in FF87 audit + KEYWORDS+=(AutofillService) } initialize_rust_symbols() {

1 0

[tor-browser-build/master] Bug 40263: Update domain front for Snowflake
by sysrqb＠torproject.org 05 Apr '21

05 Apr '21

commit b7bd888fd45241bd204a12813fdfff71f7df94b5 Author: Cecylia Bocovich <cohosh(a)torproject.org> Date: Thu Apr 1 12:28:27 2021 -0400 Bug 40263: Update domain front for Snowflake We're switching from Azure to Fastly for our snowflake broker front domain. --- .../tor-browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix | 2 +- projects/tor-browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix | 2 +- .../tor-browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix | 2 +- .../tor-onion-proxy-library/0001-Bug-30318-Add-snowflake-support.patch | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/projects/tor-browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix b/projects/tor-browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix index 411c6e1..206dbd2 100644 --- a/projects/tor-browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix +++ b/projects/tor-browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix @@ -2,4 +2,4 @@ ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec ./TorBrowser/Tor/PluggableTransports/obfs4proxy ## snowflake configuration -ClientTransportPlugin snowflake exec ./TorBrowser/Tor/PluggableTransports/snowflake-client -url https://snowflake-broker.azureedge.net/ -front ajax.aspnetcdn.com -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 +ClientTransportPlugin snowflake exec ./TorBrowser/Tor/PluggableTransports/snowflake-client -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ -front cdn.sstatic.net -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 diff --git a/projects/tor-browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix b/projects/tor-browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix index baa0a6e..c405496 100644 --- a/projects/tor-browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix +++ b/projects/tor-browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix @@ -2,4 +2,4 @@ ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec PluggableTransports/obfs4proxy ## snowflake configuration -ClientTransportPlugin snowflake exec PluggableTransports/snowflake-client -url https://snowflake-broker.azureedge.net/ -front ajax.aspnetcdn.com -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 +ClientTransportPlugin snowflake exec PluggableTransports/snowflake-client -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ -front cdn.sstatic.net -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 diff --git a/projects/tor-browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix b/projects/tor-browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix index 42502f4..4f14696 100644 --- a/projects/tor-browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix +++ b/projects/tor-browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix @@ -2,4 +2,4 @@ ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec TorBrowser\Tor\PluggableTransports\obfs4proxy.exe ## snowflake configuration -ClientTransportPlugin snowflake exec TorBrowser\Tor\PluggableTransports\snowflake-client.exe -url https://snowflake-broker.azureedge.net/ -front ajax.aspnetcdn.com -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 +ClientTransportPlugin snowflake exec TorBrowser\Tor\PluggableTransports\snowflake-client.exe -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ -front cdn.sstatic.net -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 diff --git a/projects/tor-onion-proxy-library/0001-Bug-30318-Add-snowflake-support.patch b/projects/tor-onion-proxy-library/0001-Bug-30318-Add-snowflake-support.patch index f168eed..f1a636f 100644 --- a/projects/tor-onion-proxy-library/0001-Bug-30318-Add-snowflake-support.patch +++ b/projects/tor-onion-proxy-library/0001-Bug-30318-Add-snowflake-support.patch @@ -71,7 +71,7 @@ index 2405097..bcb6a37 100644 - buffer.append("ClientTransportPlugin meek_lite,obfs3,obfs4 exec ").append(clientPath).append('\n'); + public TorConfigBuilder transportPlugin(String obfsPath, String snowPath) { + buffer.append("ClientTransportPlugin meek_lite,obfs3,obfs4 exec ").append(obfsPath).append('\n'); -+ buffer.append("ClientTransportPlugin snowflake exec ").append(snowPath).append(" -url https://snowflake-broker.azureedge.net/ -front ajax.aspnetcdn.com -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478\n"); ++ buffer.append("ClientTransportPlugin snowflake exec ").append(snowPath).append(" -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ -front cdn.sstatic.net -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478\n"); return this; }

1 0

[tor-browser-build/master] Merge remote-tracking branch 'cohoshgl/snowflake-fastly'
by sysrqb＠torproject.org 05 Apr '21

05 Apr '21

commit 663a42c51fde05d7f0ee26e01c408a86f863622c Merge: 3ebc8ce b7bd888 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Apr 5 19:34:44 2021 +0000 Merge remote-tracking branch 'cohoshgl/snowflake-fastly' .../tor-browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix | 2 +- projects/tor-browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix | 2 +- .../tor-browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix | 2 +- .../tor-onion-proxy-library/0001-Bug-30318-Add-snowflake-support.patch | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-)

1 0

[Git][tpo/applications/android-components] Pushed new branch android-components-73.0.11-10.0-1
by Matthew Finkel 05 Apr '21

05 Apr '21

Matthew Finkel pushed new branch android-components-73.0.11-10.0-1 at The Tor Project / Applications / android-components -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/tree/an… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/fenix] Pushed new tag tor-browser-87.0.0-10.0-1-build1
by Matthew Finkel 05 Apr '21

05 Apr '21

Matthew Finkel pushed new tag tor-browser-87.0.0-10.0-1-build1 at The Tor Project / Applications / fenix -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/tree/tor-browser-87.… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/fenix] Pushed new branch tor-browser-87.0.0-10.0-1
by Matthew Finkel 05 Apr '21

05 Apr '21

Matthew Finkel pushed new branch tor-browser-87.0.0-10.0-1 at The Tor Project / Applications / fenix -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/tree/tor-browser-87.… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser-build/master] Bug 40261: Bump versions of snowflake and webrtc
by sysrqb＠torproject.org 05 Apr '21

05 Apr '21

commit fbd16d2a41cb82851850a5eae79825320d1670f1 Author: Cecylia Bocovich <cohosh(a)torproject.org> Date: Fri Mar 26 10:03:58 2021 -0400 Bug 40261: Bump versions of snowflake and webrtc --- projects/pion-dtls/config | 2 +- projects/pion-interceptor/config | 2 +- projects/pion-srtp/config | 2 +- projects/pion-webrtc/config | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/projects/pion-dtls/config b/projects/pion-dtls/config index b1d125a..16deb46 100644 --- a/projects/pion-dtls/config +++ b/projects/pion-dtls/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://github.com/pion/dtls -git_hash: 88c36d669c7c3935ac5dda6820bae22316341a98 #v2.0.4 +git_hash: 4879d3479bc9bb4afdb17011d2f19708e0fa2362 #v2.0.8 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' build: '[% c("projects/go/var/build_go_lib") %]' diff --git a/projects/pion-interceptor/config b/projects/pion-interceptor/config index b2d1cdd..97175fc 100644 --- a/projects/pion-interceptor/config +++ b/projects/pion-interceptor/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://github.com/pion/interceptor -git_hash: edb026a5dc1a8002a2159eca4ed1a2838c2f70b0 #v0.0.9 +git_hash: bc30165ae456af3e8a9ae25e1c3d25dc3a7ccc41 #v0.0.10 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' build: '[% c("projects/go/var/build_go_lib") %]' diff --git a/projects/pion-srtp/config b/projects/pion-srtp/config index e980b95..d476c08 100644 --- a/projects/pion-srtp/config +++ b/projects/pion-srtp/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://github.com/pion/srtp -git_hash: 1c72ec6b73db20dcdf3e0828e20bb01d72d988c4 #v2.0.1 +git_hash: 73e8a03e17f465c872c47c2e8c8a400a7aa78fa2 #v2.0.2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' build: '[% c("projects/go/var/build_go_lib") %]' diff --git a/projects/pion-webrtc/config b/projects/pion-webrtc/config index e63b6fe..8678a42 100644 --- a/projects/pion-webrtc/config +++ b/projects/pion-webrtc/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://github.com/pion/webrtc -git_hash: a54b74cdb736d07a6014da939fd0bac6d5fc4137 #v3.0.0 +git_hash: 545613dcdeb5dedb01cce94175f40bcbe045df2e #v3.0.15 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' build: '[% c("projects/go/var/build_go_lib") %]'

1 0