August 2012 - tor-commits - lists.torproject.org

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 09 Aug '12

09 Aug '12

commit e7950f5e4181b42d9086676fbe6f60d025f23e75 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Aug 9 21:45:36 2012 +0000 Update translations for https_everywhere --- ru/https-everywhere.properties | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ru/https-everywhere.properties b/ru/https-everywhere.properties index 38121bd..ea9572c 100644 --- a/ru/https-everywhere.properties +++ b/ru/https-everywhere.properties @@ -1,5 +1,5 @@ https-everywhere.menu.globalEnable = Включить HTTPS Повсюду https-everywhere.menu.globalDisable = Выключить HTTPS Повсюду -# https-everywhere.menu.enableDisable = Enable / Disable Rules -# https-everywhere.menu.noRules = (No Rules for This Page) -# https-everywhere.menu.unknownRules = (Rules for This Page Unknown) +https-everywhere.menu.enableDisable = Включить / Отключить Правила +https-everywhere.menu.noRules = (Нету правил для этой страницы) +https-everywhere.menu.unknownRules = (Правила для этой страницы неизвестны)

1 0

[translation/https_everywhere_completed] Update translations for https_everywhere_completed
by translation＠torproject.org 09 Aug '12

09 Aug '12

commit 968737c392dae0dab50185ea1c4248c508fa8c10 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Aug 9 19:45:34 2012 +0000 Update translations for https_everywhere_completed --- es/https-everywhere.properties | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/es/https-everywhere.properties b/es/https-everywhere.properties index 7509f7e..af3ff37 100644 --- a/es/https-everywhere.properties +++ b/es/https-everywhere.properties @@ -1,5 +1,5 @@ -https-everywhere.menu.globalEnable = Habilitar HTTPS Everywhere -https-everywhere.menu.globalDisable = Deshabilitar HTTPS Everywhere +https-everywhere.menu.globalEnable = Habilitar HTTPS En Todas Partes +https-everywhere.menu.globalDisable = Deshabilitar HTTPS En Todas Partes https-everywhere.menu.enableDisable = Activar / Desactivar reglas https-everywhere.menu.noRules = (Sin reglas para esta página) -https-everywhere.menu.unknownRules = (Reglas desconocidas para esta página) +https-everywhere.menu.unknownRules = (Reglas Desconocidas Para Esta Página)

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 09 Aug '12

09 Aug '12

commit 8f570e2f999210807d7284e8ed007d40ac4710da Author: Translation commit bot <translation(a)torproject.org> Date: Thu Aug 9 19:45:30 2012 +0000 Update translations for https_everywhere --- es/https-everywhere.properties | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/es/https-everywhere.properties b/es/https-everywhere.properties index 7509f7e..af3ff37 100644 --- a/es/https-everywhere.properties +++ b/es/https-everywhere.properties @@ -1,5 +1,5 @@ -https-everywhere.menu.globalEnable = Habilitar HTTPS Everywhere -https-everywhere.menu.globalDisable = Deshabilitar HTTPS Everywhere +https-everywhere.menu.globalEnable = Habilitar HTTPS En Todas Partes +https-everywhere.menu.globalDisable = Deshabilitar HTTPS En Todas Partes https-everywhere.menu.enableDisable = Activar / Desactivar reglas https-everywhere.menu.noRules = (Sin reglas para esta página) -https-everywhere.menu.unknownRules = (Reglas desconocidas para esta página) +https-everywhere.menu.unknownRules = (Reglas Desconocidas Para Esta Página)

1 0

[translation/https_everywhere_completed] Update translations for https_everywhere_completed
by translation＠torproject.org 09 Aug '12

09 Aug '12

commit d497e6cd0502d27add50952a24618fa0b80d80b9 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Aug 9 19:15:33 2012 +0000 Update translations for https_everywhere_completed --- es/https-everywhere.properties | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/es/https-everywhere.properties b/es/https-everywhere.properties index 252054a..7509f7e 100644 --- a/es/https-everywhere.properties +++ b/es/https-everywhere.properties @@ -1,3 +1,5 @@ https-everywhere.menu.globalEnable = Habilitar HTTPS Everywhere https-everywhere.menu.globalDisable = Deshabilitar HTTPS Everywhere - +https-everywhere.menu.enableDisable = Activar / Desactivar reglas +https-everywhere.menu.noRules = (Sin reglas para esta página) +https-everywhere.menu.unknownRules = (Reglas desconocidas para esta página)

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 09 Aug '12

09 Aug '12

commit 790cd2b34db232d6509b0b99af2ae3c6ecdbb877 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Aug 9 19:15:29 2012 +0000 Update translations for https_everywhere --- es/https-everywhere.properties | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/es/https-everywhere.properties b/es/https-everywhere.properties index 543c2aa..7509f7e 100644 --- a/es/https-everywhere.properties +++ b/es/https-everywhere.properties @@ -2,4 +2,4 @@ https-everywhere.menu.globalEnable = Habilitar HTTPS Everywhere https-everywhere.menu.globalDisable = Deshabilitar HTTPS Everywhere https-everywhere.menu.enableDisable = Activar / Desactivar reglas https-everywhere.menu.noRules = (Sin reglas para esta página) -# https-everywhere.menu.unknownRules = (Rules for This Page Unknown) +https-everywhere.menu.unknownRules = (Reglas desconocidas para esta página)

1 0

[torspec/master] Clarifications for extrainfo desc transport lines
by nickm＠torproject.org 09 Aug '12

09 Aug '12

commit 904d3d45583e9f916c74fab77784184defe53598 Author: Damian Johnson <atagar(a)torproject.org> Date: Sat Aug 4 19:57:22 2012 -0700 Clarifications for extrainfo desc transport lines Couple clarifications from discussions with asn... 1. The 'transportname' in descriptor lines are unique As discussed on ticket #6257, George is fine with the 'transportname' being unique per a descriptor. This is useful to me because I can now model this as a 'transportname => attributes' hash which will be more user friendly. 2. The transport name can appear on non-bridges Though this attribute only makes sense for bridges, it can appear on the extrainfo descriptors for non-bridges as well. Actually, we already have one in the wild... extra-info toorvoid 0B37323298FF98CD86ED404895BB27B7426E8AE1 published 2012-08-04 12:19:13 transport obfs2 83.212.96.201:33570 --- dir-spec.txt | 7 ++++++- 1 files changed, 6 insertions(+), 1 deletions(-) diff --git a/dir-spec.txt b/dir-spec.txt index f88ceb3..c18efcf 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -891,7 +891,12 @@ [Any number.] Signals that the router supports the 'transportname' pluggable - transport in IP address 'address' and TCP port 'port'. + transport in IP address 'address' and TCP port 'port'. A single + descriptor MUST not have more than one transport line with the + same 'transportname'. + + Pluggable transports are only relevant to bridges, but these entries + can appear in non-bridge relays as well. "router-signature" NL Signature NL [At end, exactly once.]

1 0

[tor/master] Detect bug 6252 (unexpected sendme cell)
by nickm＠torproject.org 09 Aug '12

09 Aug '12

commit c1bd10411116c549326f74b09658a50bbae812b4 Author: Roger Dingledine <arma(a)torproject.org> Date: Thu Jun 28 14:00:01 2012 -0400 Detect bug 6252 (unexpected sendme cell) I only check on circuits, not streams, since bloating your stream window past the initial circuit window can't help you much. Also, I compare to CIRCWINDOW_START_MAX so we don't have surprising races if we lower CIRCWINDOW_START for an experiment. --- changes/bug6252 | 8 ++++++++ src/or/relay.c | 14 ++++++++++++++ 2 files changed, 22 insertions(+), 0 deletions(-) diff --git a/changes/bug6252 b/changes/bug6252 new file mode 100644 index 0000000..0d29203 --- /dev/null +++ b/changes/bug6252 @@ -0,0 +1,8 @@ + o Security fixes: + - Tear down the circuit if we get an unexpected SENDME cell. Clients + could use this trick to make their circuits receive cells faster + than our flow control would have allowed, or to gum up the network, + or possibly to do targeted memory denial-of-service attacks on + entry nodes. Fixes bug 6252. Bugfix on the 54th commit on Tor -- + from July 2002, before the release of Tor 0.0.0. + diff --git a/src/or/relay.c b/src/or/relay.c index 3e418ea..3d261c2 100644 --- a/src/or/relay.c +++ b/src/or/relay.c @@ -1265,11 +1265,25 @@ connection_edge_process_relay_cell(cell_t *cell, circuit_t *circ, case RELAY_COMMAND_SENDME: if (!rh.stream_id) { if (layer_hint) { + if (layer_hint->package_window + CIRCWINDOW_INCREMENT > + CIRCWINDOW_START_MAX) { + log_fn(LOG_PROTOCOL_WARN, LD_PROTOCOL, + "Bug/attack: unexpected sendme cell from exit relay. " + "Closing circ."); + return -END_CIRC_REASON_TORPROTOCOL; + } layer_hint->package_window += CIRCWINDOW_INCREMENT; log_debug(LD_APP,"circ-level sendme at origin, packagewindow %d.", layer_hint->package_window); circuit_resume_edge_reading(circ, layer_hint); } else { + if (circ->package_window + CIRCWINDOW_INCREMENT > + CIRCWINDOW_START_MAX) { + log_fn(LOG_PROTOCOL_WARN, LD_PROTOCOL, + "Bug/attack: unexpected sendme cell from client. " + "Closing circ."); + return -END_CIRC_REASON_TORPROTOCOL; + } circ->package_window += CIRCWINDOW_INCREMENT; log_debug(LD_APP, "circ-level sendme at non-origin, packagewindow %d.",

1 0

[tor/master] Have the bug6252 commit message reflect its on-again/off-again status
by nickm＠torproject.org 09 Aug '12

09 Aug '12

commit 393944dfb67fb27991e152ec67f74cebbf3a23ba Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Jul 18 10:24:17 2012 -0400 Have the bug6252 commit message reflect its on-again/off-again status --- changes/bug6252 | 8 -------- changes/bug6252_again | 11 +++++++++++ 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/changes/bug6252 b/changes/bug6252 deleted file mode 100644 index 0d29203..0000000 --- a/changes/bug6252 +++ /dev/null @@ -1,8 +0,0 @@ - o Security fixes: - - Tear down the circuit if we get an unexpected SENDME cell. Clients - could use this trick to make their circuits receive cells faster - than our flow control would have allowed, or to gum up the network, - or possibly to do targeted memory denial-of-service attacks on - entry nodes. Fixes bug 6252. Bugfix on the 54th commit on Tor -- - from July 2002, before the release of Tor 0.0.0. - diff --git a/changes/bug6252_again b/changes/bug6252_again new file mode 100644 index 0000000..f7fd00c --- /dev/null +++ b/changes/bug6252_again @@ -0,0 +1,11 @@ + o Security fixes: + - Tear down the circuit if we get an unexpected SENDME cell. Clients + could use this trick to make their circuits receive cells faster + than our flow control would have allowed, or to gum up the network, + or possibly to do targeted memory denial-of-service attacks on + entry nodes. Fixes bug 6252. Bugfix on the 54th commit on Tor -- + from July 2002, before the release of Tor 0.0.0. We had committed + this patch previously, but we had to revert it because of bug 6271. + Now that 6271 is fixed, this appears to work. + +

1 0

[tor/master] Merge remote-tracking branch 'public/bug6252_again' into maint-0.2.3
by nickm＠torproject.org 09 Aug '12

09 Aug '12

commit 91b52a259a271df7ceeea6d8bf7adbd4d7e15a6c Merge: 93be3a8 393944d Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Aug 9 10:50:11 2012 -0400 Merge remote-tracking branch 'public/bug6252_again' into maint-0.2.3 changes/bug6252_again | 11 +++++++++++ src/or/relay.c | 14 ++++++++++++++ 2 files changed, 25 insertions(+), 0 deletions(-)

1 0

[tor/master] Merge remote-tracking branch 'origin/maint-0.2.3'
by nickm＠torproject.org 09 Aug '12

09 Aug '12

commit 0b21170085c2e868ac90f7771392681b5dfb0ad2 Merge: 0ea3a3a 91b52a2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Aug 9 10:52:45 2012 -0400 Merge remote-tracking branch 'origin/maint-0.2.3' changes/bug6252_again | 11 +++++++++++ src/or/relay.c | 14 ++++++++++++++ 2 files changed, 25 insertions(+), 0 deletions(-)

1 0