- tbb-commits - lists.torproject.org

[tor-browser/tor-browser-31.6.0esr-4.5-1] fixup! Bug #3455.1: Allow proxy settings to be set per URL bar domain.
by mikeperry＠torproject.org 07 May '15

07 May '15

commit 3b7305457124de7d7fee52d3bd3e3fa1ca5f62e5 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon May 4 18:30:06 2015 +0200 fixup! Bug #3455.1: Allow proxy settings to be set per URL bar domain. Fix reorder build error: ../../../dist/include/mozilla/net/HttpBaseChannel.h:339:11: error: 'mozilla::net::HttpBaseChannel::mRedirectCount' will be initialized after [-Werror=reorder] ../../../dist/include/mozilla/net/HttpBaseChannel.h:327:20: error: 'nsCOMPtr<nsIURI> mozilla::net::HttpBaseChannel::mProxyURI' [-Werror=reorder] /builds/slave/try-l64-d-00000000000000000000/build/src/netwerk/protocol/http/HttpBaseChannel.cpp:39:1: error: when initialized here [-Werror=reorder] --- netwerk/protocol/http/HttpBaseChannel.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/netwerk/protocol/http/HttpBaseChannel.cpp b/netwerk/protocol/http/HttpBaseChannel.cpp index 64b202a..17f8c72 100644 --- a/netwerk/protocol/http/HttpBaseChannel.cpp +++ b/netwerk/protocol/http/HttpBaseChannel.cpp @@ -65,10 +65,10 @@ HttpBaseChannel::HttpBaseChannel() , mAllRedirectsSameOrigin(true) , mSuspendCount(0) , mProxyResolveFlags(0) + , mProxyURI(nullptr) , mContentDispositionHint(UINT32_MAX) , mHttpHandler(gHttpHandler) , mRedirectCount(0) - , mProxyURI(nullptr) { LOG(("Creating HttpBaseChannel @%x\n", this));

1 0

[tor-browser/tor-browser-31.6.0esr-4.5-1] Bug 15857: Fix file descriptor leak in updater.
by mikeperry＠torproject.org 07 May '15

07 May '15

commit a8348a29adac38d64625fce35baba7684fef3fcd Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed May 6 20:11:40 2015 -0700 Bug 15857: Fix file descriptor leak in updater. Corresponds to Mozilla bug https://bugzilla.mozilla.org/show_bug.cgi?id=1159826. --- toolkit/mozapps/update/updater/updater.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/mozapps/update/updater/updater.cpp b/toolkit/mozapps/update/updater/updater.cpp index 3ba92b3..89f12ec 100644 --- a/toolkit/mozapps/update/updater/updater.cpp +++ b/toolkit/mozapps/update/updater/updater.cpp @@ -799,7 +799,7 @@ static int ensure_copy_recursive(const NS_tchar *path, const NS_tchar *dest, } } } - + NS_tclosedir(dir); return rv; }

1 0

[tor-browser/tor-browser-31.6.0esr-4.5-1] Merge remote-tracking branch 'arthur/15899' into tor-browser-31.6.0esr-4.5-1
by mikeperry＠torproject.org 07 May '15

07 May '15

commit 31c6bfb7ef8eb79fe526ceaece91d6236f8cdd8a Merge: 3006aa5 15bf754 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed May 6 19:42:54 2015 -0700 Merge remote-tracking branch 'arthur/15899' into tor-browser-31.6.0esr-4.5-1 browser/extensions/pdfjs/content/build/pdf.worker.js | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[tor-browser/tor-browser-31.6.0esr-4.5-1] fixup! Bug #15502. Isolate blob URLs to first party; no blobURLs in Web Workers
by mikeperry＠torproject.org 07 May '15

07 May '15

commit 15bf754badd65bccc1ea898324392a4d34a8e97e Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Fri May 1 14:49:58 2015 -0700 fixup! Bug #15502. Isolate blob URLs to first party; no blobURLs in Web Workers --- browser/extensions/pdfjs/content/build/pdf.worker.js | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/browser/extensions/pdfjs/content/build/pdf.worker.js b/browser/extensions/pdfjs/content/build/pdf.worker.js index a8779ab..805cc66 100644 --- a/browser/extensions/pdfjs/content/build/pdf.worker.js +++ b/browser/extensions/pdfjs/content/build/pdf.worker.js @@ -1048,7 +1048,14 @@ PDFJS.createObjectURL = (function createObjectURLClosure() { if (!PDFJS.disableCreateObjectURL && typeof URL !== 'undefined' && URL.createObjectURL) { var blob = PDFJS.createBlob(data, contentType); - return URL.createObjectURL(blob); + try { + return URL.createObjectURL(blob); + } catch(e) { + // URL.createObjectURL has thrown an error; continue to + // data schema fallback. + // TODO: Remove this try-catch when we re-enable + // createObjectURL in workers. + } } var buffer = 'data:' + contentType + ';base64,';

1 0

[tor-browser-bundle/master] Bug 15945: Disable NoScript's ClearClick protection for now.
by mikeperry＠torproject.org 07 May '15

07 May '15

commit a9619e0a54d7c134325ad5a9496ffc67d07b0dcf Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed May 6 18:56:45 2015 -0700 Bug 15945: Disable NoScript's ClearClick protection for now. Bug #14985 has analysis toward a more complete fix for enabling it. --- .../Data/Browser/profile.default/preferences/extension-overrides.js | 1 + .../Data/Browser/profile.default/preferences/extension-overrides.js | 1 + .../Data/Browser/profile.default/preferences/extension-overrides.js | 1 + 3 files changed, 3 insertions(+) diff --git a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js index d1469a8..7a95619 100644 --- a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js @@ -61,3 +61,4 @@ pref("noscript.cascadePermissions", true); pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); +pref("noscript.clearClick", 0); diff --git a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js index d1469a8..7a95619 100644 --- a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js @@ -61,3 +61,4 @@ pref("noscript.cascadePermissions", true); pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); +pref("noscript.clearClick", 0); diff --git a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js index fb2141b..976d71c 100644 --- a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js @@ -61,3 +61,4 @@ pref("noscript.cascadePermissions", true); pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); +pref("noscript.clearClick", 0);

1 0

[torbutton/master] Bug 15927: Force update of the NoScript UI
by gk＠torproject.org 06 May '15

06 May '15

commit fecc621d6c3928918b4c62071f41ac2e4287e121 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue May 5 00:22:15 2015 -0700 Bug 15927: Force update of the NoScript UI --- src/chrome/content/torbutton.js | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js index 21e567e..c580c59 100644 --- a/src/chrome/content/torbutton.js +++ b/src/chrome/content/torbutton.js @@ -2378,6 +2378,22 @@ function torbutton_update_security_slider() { } break; } + /* Update the NoScript button to reflect any changes */ + try { + let wm = Components.classes["@mozilla.org/appshell/window-mediator;1"] + .getService(Components.interfaces.nsIWindowMediator); + let browserEnumerator = wm.getEnumerator("navigator:browser"); + + // Update every window's NoScript status... + while (browserEnumerator.hasMoreElements()) { + let win = browserEnumerator.getNext(); + win.noscriptOverlay._syncUINow(); + } + torbutton_log(3, 'Updated NoScript status for security slider'); + } catch(e) { + torbutton_log(4, 'Failed to update NoScript status for security slider: '+e); + } + torbutton_log(3, 'Security Slider Pref Update Complete'); m_tb_sliderUpdate = false; }

1 0

[torbutton/master] Bug 15915: Hide circuit display if it is disabled.
by gk＠torproject.org 04 May '15

04 May '15

commit fc05d63ab7f01fabf999960d31a9795349054a7b Author: anonym <anonym(a)riseup.net> Date: Mon May 4 11:04:29 2015 +0200 Bug 15915: Hide circuit display if it is disabled. If extensions.torbutton.display_circuit = false from the start, then myController will never be set, so when we call stop() we won't call syncDisplayWithSelectedTab(false) to hide the circuit display. --- src/chrome/content/tor-circuit-display.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/chrome/content/tor-circuit-display.js b/src/chrome/content/tor-circuit-display.js index 4197944..2da7f0a 100644 --- a/src/chrome/content/tor-circuit-display.js +++ b/src/chrome/content/tor-circuit-display.js @@ -315,8 +315,8 @@ let setupDisplay = function (host, port, password, enablePrefName) { let myController = null, stopCollectingIsolationData = null, stop = function() { + syncDisplayWithSelectedTab(false); if (myController) { - syncDisplayWithSelectedTab(false); if (stopCollectingIsolationData) { stopCollectingIsolationData(); }

1 0

[tor-browser-bundle/master] Update meek to 0.18.
by gk＠torproject.org 04 May '15

04 May '15

commit 0db1987644292794b35b0681c27ec175f372861b Author: David Fifield <david(a)bamsoftware.com> Date: Fri May 1 04:01:28 2015 +0000 Update meek to 0.18. This undoes a regression related to TOR_PT_EXIT_ON_STDIN_CLOSE that broke meek on Windows 7. --- gitian/versions | 2 +- gitian/versions.alpha | 2 +- gitian/versions.beta | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/gitian/versions b/gitian/versions index 26b116b..0645ff3 100755 --- a/gitian/versions +++ b/gitian/versions @@ -25,7 +25,7 @@ FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014 TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2 GOPTLIB_TAG=0.2 -MEEK_TAG=0.17 +MEEK_TAG=0.18 FAKETIME_TAG=70aa6b394d9341522dffe8a5a5cf5929e82cc6b9 # unsigned v0.9.6 GOED25519_TAG=c4161f4c7483313562781c61b9a20aba73daf9de GOSIPHASH_TAG=42ba037e748c9062a75e0924705c43b893edefcd diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 86e163d..aa6257d 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -25,7 +25,7 @@ FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014 TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2 GOPTLIB_TAG=0.2 -MEEK_TAG=0.17 +MEEK_TAG=0.18 FAKETIME_TAG=70aa6b394d9341522dffe8a5a5cf5929e82cc6b9 # unsigned v0.9.6 GOED25519_TAG=c4161f4c7483313562781c61b9a20aba73daf9de GOSIPHASH_TAG=42ba037e748c9062a75e0924705c43b893edefcd diff --git a/gitian/versions.beta b/gitian/versions.beta index 854e422..0341c4e 100755 --- a/gitian/versions.beta +++ b/gitian/versions.beta @@ -25,7 +25,7 @@ FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014 TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2 GOPTLIB_TAG=0.2 -MEEK_TAG=0.17 +MEEK_TAG=0.18 GITIAN_TAG=tor-browser-builder-3.x-6

1 0

[tor-browser/tor-browser-31.6.0esr-4.5-1] fixup! Bug 12827: Create preference to disable SVG.
by mikeperry＠torproject.org 24 Apr '15

24 Apr '15

commit 3006aa548cefa2f9d0968c978786dcefa9309119 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Fri Apr 24 10:40:44 2015 -0400 fixup! Bug 12827: Create preference to disable SVG. During parsing, avoid dereferencing null pointers when script and style elements are created as generic elements (i.e., when svg.in-content.enabled=false). Fixes ticket #15794. --- parser/html/nsHtml5TreeOperation.cpp | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/parser/html/nsHtml5TreeOperation.cpp b/parser/html/nsHtml5TreeOperation.cpp index 7ad65247..b9f1768 100644 --- a/parser/html/nsHtml5TreeOperation.cpp +++ b/parser/html/nsHtml5TreeOperation.cpp @@ -607,8 +607,8 @@ void nsHtml5TreeOperation::PreventScriptExecution(nsIContent* aNode) { nsCOMPtr<nsIScriptElement> sele = do_QueryInterface(aNode); - MOZ_ASSERT(sele); - sele->PreventExecution(); + if (sele) + sele->PreventExecution(); } void @@ -827,14 +827,18 @@ nsHtml5TreeOperation::Perform(nsHtml5TreeOpExecutor* aBuilder, case eTreeOpSetStyleLineNumber: { nsIContent* node = *(mOne.node); nsCOMPtr<nsIStyleSheetLinkingElement> ssle = do_QueryInterface(node); - NS_ASSERTION(ssle, "Node didn't QI to style."); + if (!ssle) + return NS_ERROR_DOM_NOT_SUPPORTED_ERR; + ssle->SetLineNumber(mFour.integer); return NS_OK; } case eTreeOpSetScriptLineNumberAndFreeze: { nsIContent* node = *(mOne.node); nsCOMPtr<nsIScriptElement> sele = do_QueryInterface(node); - NS_ASSERTION(sele, "Node didn't QI to script."); + if (!sele) + return NS_ERROR_DOM_NOT_SUPPORTED_ERR; + sele->SetScriptLineNumber(mFour.integer); sele->FreezeUriAsyncDefer(); return NS_OK;

1 0

[tor-browser-bundle/master] Update changelog and versions
by gk＠torproject.org 24 Apr '15

24 Apr '15

commit 3e6e3159c90cdfe33c38ed698d702ec97fcf49cc Author: Georg Koppen <gk(a)torproject.org> Date: Fri Apr 24 18:26:16 2015 +0000 Update changelog and versions --- Bundle-Data/Docs/ChangeLog.txt | 6 ++++-- gitian/versions | 6 +++--- gitian/versions.alpha | 6 +++--- 3 files changed, 10 insertions(+), 8 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index ee17952..ce63883 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -3,7 +3,7 @@ Tor Browser 4.5 -- Apr 28 2015 * Update Tor to 0.2.6.7 with additional patches: * Bug 15482: Reset timestamp_dirty each time a SOCKSAuth circuit is used * Update NoScript to 2.6.9.22 - * Update HTTPS-Everywhere to 5.0.2 + * Update HTTPS-Everywhere to 5.0.3 * Bug 15689: Resume building HTTPS-Everywhere from git tags * Update meek to 0.17 * Update obfs4proxy to 0.0.5 @@ -12,18 +12,20 @@ Tor Browser 4.5 -- Apr 28 2015 * Bug 11879: Stop bootstrap if Cancel or Open Settings is clicked * Bug 13576: Don't strip "bridge" from the middle of bridge lines * Bug 15657: Display the host:port of any connection faiures in bootstrap - * Update Torbutton to 1.9.2.1 + * Update Torbutton to 1.9.2.2 * Bug 15562: Bind SharedWorkers to thirdparty pref * Bug 15533: Restore default security level when restoring defaults * Bug 15510: Close Tor Circuit UI control port connections on New Identity * Bug 15472: Make node text black in circuit status UI * Bug 15502: Wipe blob URIs on New Identity + * Bug 15795: Some security slider prefs do not trigger custom checkbox * Bug 14429: Disable automatic window resizing for now * Bug 4100: Raise HTTP Keep-Alive back to 115 second default * Bug 13875: Spoof window.devicePixelRatio to avoid DPI fingerprinting * Bug 15411: Remove old (and unused) cacheDomain cache isolation mechanism * Bugs 14716+13254: Fix issues with HTTP Auth usage and TLS connection info display * Bug 15502: Isolate blob URI scope to URL domain; block WebWorker access + * Bug 15794: Crash on some pages with SVG images if SVG is disabled * Bug 15562: Disable Javascript SharedWorkers due to third party tracking * Bug 15757: Disable Mozilla video statistics API extensions * Bug 15758: Disable Device Sensor APIs diff --git a/gitian/versions b/gitian/versions index d490333..26b116b 100755 --- a/gitian/versions +++ b/gitian/versions @@ -8,11 +8,11 @@ FIREFOX_VERSION=31.6.0esr TORBROWSER_UPDATE_CHANNEL=release -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build2 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build3 TOR_TAG=tor-0.2.6.7 TORLAUNCHER_TAG=0.2.7.4 -TORBUTTON_TAG=1.9.2.1 -HTTPSE_TAG=5.0.2 +TORBUTTON_TAG=1.9.2.2 +HTTPSE_TAG=5.0.3 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.21-stable diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 7f323be..86e163d 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -8,11 +8,11 @@ FIREFOX_VERSION=31.6.0esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build2 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build3 TOR_TAG=tor-0.2.6.7 TORLAUNCHER_TAG=0.2.7.4 -TORBUTTON_TAG=1.9.2.1 -HTTPSE_TAG=5.0.2 +TORBUTTON_TAG=1.9.2.2 +HTTPSE_TAG=5.0.3 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.21-stable

1 0