- tbb-commits - lists.torproject.org

[Git][tpo/applications/android-components][android-components-70.0.16-10.5-1] 12 commits: Bug 40005: Modify Default toolbar menu
by Matthew Finkel 22 Jan '21

22 Jan '21

Matthew Finkel pushed to branch android-components-70.0.16-10.5-1 at The Tor Project / Applications / android-components Commits: 4f390f6b by Matthew Finkel at 2021-01-22T14:50:53+00:00 Bug 40005: Modify Default toolbar menu - - - - - 7350e0e1 by Alex Catarineu at 2021-01-22T14:50:53+00:00 Bug 40007: Port external helper app prompting Together with the corresponding fenix patch, this allows all `startActivity` that may open external apps to be replaced by `TorUtils.startActivityPrompt`. - - - - - 1f5833f1 by Alex Catarineu at 2021-01-22T14:50:53+00:00 Bug 40002: Ensure system download manager is not used - - - - - 1756b496 by Alex Catarineu at 2021-01-22T14:50:53+00:00 Bug 40009: Change the default search engines This matches the search engines from desktop, that is: DDG as the default, then YouTube, Google, DDGOnion, Startpage, Twitter, Wikipedia and Yahoo. - - - - - 8078d53e by Alex Catarineu at 2021-01-22T14:50:53+00:00 Modify Addon support Bug 40011: Hide option for disallowing addons in private mode Bug 40016: Allow inheriting from AddonCollectionProvider This will allow implementing our own AddonsProvider in fenix. - - - - - 56ba9678 by Georg Koppen at 2021-01-22T14:50:53+00:00 Bug 40013: Add option do overwrite timestamp in extension version - - - - - 34f24655 by Alex Catarineu at 2021-01-22T14:50:53+00:00 Bug 40015: Port padlock states for .onion services - - - - - d5015319 by Alex Catarineu at 2021-01-22T14:50:53+00:00 Bug 40021: Force telemetry=false in Fennec settings migration - - - - - d73aae45 by Alex Catarineu at 2021-01-22T14:50:53+00:00 Bug 40022: Migrate Tor security level from Fennec - - - - - 31015682 by Matthew Finkel at 2021-01-22T14:50:53+00:00 Modify Tracking Protection configuration Bug 40020: Disable third-party cookies Bug 40024: Disable tracking protection by default - - - - - 247d48f1 by Matthew Finkel at 2021-01-22T14:50:53+00:00 Bug 40023: Stop PrivateNotificationService - - - - - c98643cb by Matthew Finkel at 2021-01-22T16:04:12+00:00 Add support for new GeckoView interfaces Bug 40006: Expose Security Level interface Bug 40019: Expose spoofEnglish pref Bug 34439: Isolate Icon loader on Android - - - - - 30 changed files: - build.gradle - components/browser/engine-gecko-beta/src/main/java/mozilla/components/browser/engine/gecko/GeckoEngine.kt - components/browser/engine-gecko-beta/src/main/java/mozilla/components/browser/engine/gecko/fetch/GeckoViewFetchClient.kt - components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/GeckoEngine.kt - components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/fetch/GeckoViewFetchClient.kt - components/browser/icons/src/main/java/mozilla/components/browser/icons/loader/HttpIconLoader.kt - components/browser/menu/src/main/java/mozilla/components/browser/menu/WebExtensionBrowserMenu.kt - components/browser/menu/src/main/java/mozilla/components/browser/menu/WebExtensionBrowserMenuBuilder.kt - components/browser/search/src/main/assets/search/list.json - + components/browser/search/src/main/assets/searchplugins/ddg-onion.xml - components/browser/search/src/main/assets/searchplugins/ddg.xml - + components/browser/search/src/main/assets/searchplugins/startpage.xml - + components/browser/search/src/main/assets/searchplugins/yahoo.xml - components/browser/toolbar/src/main/java/mozilla/components/browser/toolbar/display/DisplayToolbar.kt - components/browser/toolbar/src/main/java/mozilla/components/browser/toolbar/display/SiteSecurityIconView.kt - components/browser/toolbar/src/main/res/drawable/mozac_ic_site_security.xml - components/browser/toolbar/src/main/res/values/attrs_browser_toolbar.xml - components/concept/engine/src/main/java/mozilla/components/concept/engine/EngineSession.kt - components/concept/engine/src/main/java/mozilla/components/concept/engine/Settings.kt - components/concept/fetch/src/main/java/mozilla/components/concept/fetch/Request.kt - components/concept/toolbar/src/main/java/mozilla/components/concept/toolbar/Toolbar.kt - components/feature/addons/src/main/java/mozilla/components/feature/addons/amo/AddonCollectionProvider.kt - components/feature/addons/src/main/res/layout/mozac_feature_addons_fragment_dialog_addon_installed.xml - components/feature/app-links/build.gradle - components/feature/app-links/src/main/java/mozilla/components/feature/app/links/AppLinksFeature.kt - components/feature/app-links/src/main/java/mozilla/components/feature/app/links/AppLinksUseCases.kt - components/feature/contextmenu/src/main/java/mozilla/components/feature/contextmenu/ContextMenuCandidate.kt - components/feature/downloads/build.gradle - components/feature/downloads/src/main/java/mozilla/components/feature/downloads/AbstractFetchDownloadService.kt - components/feature/downloads/src/main/java/mozilla/components/feature/downloads/DownloadsFeature.kt The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/compare… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/compare… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/fenix] Pushed new branch tor-browser-85.1.0-10.0-1
by Matthew Finkel 22 Jan '21

22 Jan '21

Matthew Finkel pushed new branch tor-browser-85.1.0-10.0-1 at The Tor Project / Applications / fenix -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/tree/tor-browser-85.… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/android-components] Pushed new branch android-components-70.0.16-10.0-1
by Matthew Finkel 22 Jan '21

22 Jan '21

Matthew Finkel pushed new branch android-components-70.0.16-10.0-1 at The Tor Project / Applications / android-components -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/tree/an… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser-build/master] Bug 40208: Mitigate uniffi non-deterministic code generation
by gk＠torproject.org 22 Jan '21

22 Jan '21

commit da8e19806b810860dc40a9dd02abd6cff6888b2b Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Thu Jan 21 00:08:36 2021 +0000 Bug 40208: Mitigate uniffi non-deterministic code generation --- projects/uniffi-rs/btreeset.patch | 31 +++++++++++++++++++++++++++++++ projects/uniffi-rs/build | 8 ++++++++ projects/uniffi-rs/config | 1 + 3 files changed, 40 insertions(+) diff --git a/projects/uniffi-rs/btreeset.patch b/projects/uniffi-rs/btreeset.patch new file mode 100644 index 0000000..cb81a00 --- /dev/null +++ b/projects/uniffi-rs/btreeset.patch @@ -0,0 +1,31 @@ +diff --git a/uniffi_bindgen/src/interface/types.rs b/uniffi_bindgen/src/interface/types.rs +index 6448d58..b7efd22 100644 +--- a/uniffi_bindgen/src/interface/types.rs ++++ b/uniffi_bindgen/src/interface/types.rs +@@ -26,7 +26,7 @@ + use anyhow::bail; + use anyhow::Result; + use std::convert::TryFrom; +-use std::{collections::hash_map::Entry, collections::HashMap, collections::HashSet}; ++use std::{collections::hash_map::Entry, collections::HashMap, collections::BTreeSet}; + + use super::Attributes; + +@@ -71,7 +71,7 @@ pub enum FFIType { + /// Represents all the different high-level types that can be used in a component interface. + /// At this level we identify user-defined types by name, without knowing any details + /// of their internal structure apart from what type of thing they are (record, enum, etc). +-#[derive(Debug, Clone, Eq, PartialEq, Hash)] ++#[derive(Debug, Clone, Eq, PartialEq, Hash, PartialOrd, Ord)] + pub enum Type { + // Primitive types. + UInt8, +@@ -195,7 +195,7 @@ pub(crate) struct TypeUniverse { + // Named type definitions (including aliases). + type_definitions: HashMap<String, Type>, + // All the types in the universe, by canonical type name. +- all_known_types: HashSet<Type>, ++ all_known_types: BTreeSet<Type>, + } + + impl TypeUniverse { diff --git a/projects/uniffi-rs/build b/projects/uniffi-rs/build index 60ba1b1..1663071 100644 --- a/projects/uniffi-rs/build +++ b/projects/uniffi-rs/build @@ -22,6 +22,14 @@ replace-with = "vendored-sources" directory = "/var/tmp/build/uniffi-rs/vendor" EOF +# We change the data type of the `all_known_types` Set from HashSet to BTreeSet. +# Uniffi iterates over the elements of this set, and iteration over a HashSet occurs +# in an arbitrary order, while iteration over a BTreeSet orders in a defined (and +# deterministic) order. This patch solves a build reproducibility issue, see +# tor-browser-build#40208. +# +# Upstream bug: https://github.com/mozilla/uniffi-rs/issues/374 +patch -p1 < $rootdir/btreeset.patch # We usually use --frozen but there is no Cargo.lock file available. Thus resort # to --offline. cargo build --release --offline --target x86_64-unknown-linux-gnu diff --git a/projects/uniffi-rs/config b/projects/uniffi-rs/config index 5dda990..7d89cc2 100644 --- a/projects/uniffi-rs/config +++ b/projects/uniffi-rs/config @@ -15,3 +15,4 @@ input_files: # `cargo vendor vendor` in the `uniffi-rs` directory has vendored the sources. - URL: https://people.torproject.org/~gk/mirrors/sources/uniffi-rs-vendor-[% c('version') %].tar.bz2 sha256sum: 71d912237208c35a762b3c812afe0a758823792dd745c1253314bcccc1694b7f + - filename: btreeset.patch

1 0

[Git][tpo/applications/android-components] Pushed new branch android-components-70.0.16-10.5-1
by Matthew Finkel 21 Jan '21

21 Jan '21

Matthew Finkel pushed new branch android-components-70.0.16-10.5-1 at The Tor Project / Applications / android-components -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/tree/an… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/fenix] Pushed new branch tor-browser-85.1.0-10.5-1
by Matthew Finkel 21 Jan '21

21 Jan '21

Matthew Finkel pushed new branch tor-browser-85.1.0-10.5-1 at The Tor Project / Applications / fenix -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/tree/tor-browser-85.… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser-spec/master] Update FF78 audit
by sysrqb＠torproject.org 21 Jan '21

21 Jan '21

commit 82a0f0b04a7ef60b8693f932c24ecf0464a1ca14 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Thu Jan 21 19:58:15 2021 +0000 Update FF78 audit --- audits/FF78_NETWORK_AUDIT | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/audits/FF78_NETWORK_AUDIT b/audits/FF78_NETWORK_AUDIT index 81308ea..02a2270 100644 --- a/audits/FF78_NETWORK_AUDIT +++ b/audits/FF78_NETWORK_AUDIT @@ -1,6 +1,6 @@ Summary of findings: https://gitlab.torproject.org/tpo/applications/fenix/-/issues/34177 -`git diff 8da33f6c34c0ca5b1d7bca58ca86cb5e436333e8 0b024105bfcb2304529100c159eda55374dceec3` +`git diff 8da33f6c34c0ca5b1d7bca58ca86cb5e436333e8 56ab7e2d173accfa5cde46659c7b801c8dab2a3e` and then go over all the changes containing the above mentioned potentially dangerous calls and features. Grep the diff for the following strings and examine surrounding usage.

1 0

[tor-browser-build/master] Bug 33693: Change snowflake and meek dummy address
by gk＠torproject.org 21 Jan '21

21 Jan '21

commit 8bd845464ae14bf56e0187dfa6f6e773a6593f55 Author: Cecylia Bocovich <cohosh(a)torproject.org> Date: Wed Jan 20 10:52:53 2021 -0500 Bug 33693: Change snowflake and meek dummy address The previous dummy addresses of form 0.0.X.0 were marked by Tor as internal, causing bandwidth events to be skipped. This changes pluggable transport dummy addresses to the 192.0.2.0/24 range. --- projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js b/projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js index c414212..22e9984 100644 --- a/projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js +++ b/projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js @@ -18,6 +18,6 @@ pref("extensions.torlauncher.default_bridge.obfs4.13", "obfs4 45.145.95.6:27015 pref("extensions.torlauncher.default_bridge.obfs4.14", "obfs4 [2a0c:4d80:42:702::1]:27015 C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0"); pref("extensions.torlauncher.default_bridge.obfs4.15", "obfs4 51.222.13.177:80 5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 cert=2uplIpLQ0q9+0qMFrK5pkaYRDOe460LL9WHBvatgkuRr/SL31wBOEupaMMJ6koRE6Ld0ew iat-mode=0"); -pref("extensions.torlauncher.default_bridge.meek-azure.1", "meek_lite 0.0.2.0:2 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com"); +pref("extensions.torlauncher.default_bridge.meek-azure.1", "meek_lite 192.0.2.2:2 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com"); -pref("extensions.torlauncher.default_bridge.snowflake.1", "snowflake 0.0.3.0:1 2B280B23E1107BB62ABFC40DDCC8824814F80A72"); +pref("extensions.torlauncher.default_bridge.snowflake.1", "snowflake 192.0.2.3:1 2B280B23E1107BB62ABFC40DDCC8824814F80A72");

1 0

[tor-browser-build/master] Merge remote-tracking branch 'gitlab/merge-requests/192'
by gk＠torproject.org 21 Jan '21

21 Jan '21

commit bde528acb3ac70bffb69f5dfa55a6595761b7b56 Merge: c2dce3c 8bd8454 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Jan 21 08:08:14 2021 +0000 Merge remote-tracking branch 'gitlab/merge-requests/192' projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

[tor-browser-bundle-testsuite/master] Merge remote-tracking branch 'gitlab/merge-requests/9'
by gk＠torproject.org 21 Jan '21

21 Jan '21

commit eb5817550cd018de28e7bf0c0c0e7f16128d7406 Merge: 97c7e5d b0171e4 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Jan 21 07:42:53 2021 +0000 Merge remote-tracking branch 'gitlab/merge-requests/9' TBBTestSuite/Tests/TorBootstrap.pm | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-)

1 0