tor-commits October 2013

tor-commits@lists.torproject.org

17 participants
1284 discussions

[tor/master] Merge remote-tracking branch 'public/bug6055_v2_024' into maint-0.2.4
by nickm＠torproject.org 31 Oct '13

31 Oct '13

commit 0e8ee795d901c1a5ac84e53bbea417fddace46bf Merge: 8f9fb63 ad763a3 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Oct 31 13:14:39 2013 -0400 Merge remote-tracking branch 'public/bug6055_v2_024' into maint-0.2.4 changes/bug6055 | 6 ++++++ src/common/tortls.c | 3 +++ 2 files changed, 9 insertions(+)

1 0

[tor/master] Merge remote-tracking branch 'origin/maint-0.2.4'
by nickm＠torproject.org 31 Oct '13

31 Oct '13

commit a19e3e26f467ecbf31f2c4174d699cd1989caf7a Merge: 4c60819 0e8ee79 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Oct 31 13:26:33 2013 -0400 Merge remote-tracking branch 'origin/maint-0.2.4'

1 0

[tor/maint-0.2.4] Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1e
by nickm＠torproject.org 31 Oct '13

31 Oct '13

commit ad763a336cb3655151383172bcfa658870ad8950 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Aug 13 23:43:39 2013 -0400 Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1e To fix #6033, we disabled TLS 1.1 and 1.2. Eventually, OpenSSL fixed the bug behind #6033. I've considered alternate implementations that do more testing to see if there's secretly an OpenSSL 1.0.1c or something that secretly has a backport of the OpenSSL 1.0.1e fix, and decided against it on the grounds of complexity. --- changes/bug6055 | 6 ++++++ src/common/tortls.c | 3 +++ 2 files changed, 9 insertions(+) diff --git a/changes/bug6055 b/changes/bug6055 new file mode 100644 index 0000000..0073007 --- /dev/null +++ b/changes/bug6055 @@ -0,0 +1,6 @@ + o Major enhancements: + - Re-enable TLS 1.1 and 1.2 when built with OpenSSL 1.0.1e or later. + (OpenSSL before 1.0.1 didn't have TLS 1.1 or 1.2. OpenSSL from 1.0.1 + through 1.0.1d had bugs that prevented renegotiation from working + with TLS 1.1 or 1.2, so we disabled them to solve bug 6033.) Fix for + issue #6055. diff --git a/src/common/tortls.c b/src/common/tortls.c index b7e5bc1..90ebb75 100644 --- a/src/common/tortls.c +++ b/src/common/tortls.c @@ -1269,12 +1269,15 @@ tor_tls_context_new(crypto_pk_t *identity, unsigned int key_lifetime, * version. Once some version of OpenSSL does TLS1.1 and TLS1.2 * renegotiation properly, we can turn them back on when built with * that version. */ +#if OPENSSL_VERSION_NUMBER < OPENSSL_V(1,0,1,'e') #ifdef SSL_OP_NO_TLSv1_2 SSL_CTX_set_options(result->ctx, SSL_OP_NO_TLSv1_2); #endif #ifdef SSL_OP_NO_TLSv1_1 SSL_CTX_set_options(result->ctx, SSL_OP_NO_TLSv1_1); #endif +#endif + /* Disable TLS tickets if they're supported. We never want to use them; * using them can make our perfect forward secrecy a little worse, *and* * create an opportunity to fingerprint us (since it's unusual to use them

1 0

[tor/maint-0.2.4] Merge remote-tracking branch 'public/bug6055_v2_024' into maint-0.2.4
by nickm＠torproject.org 31 Oct '13

31 Oct '13

1 0

[translation/torcheck] Update translations for torcheck
by translation＠torproject.org 31 Oct '13

31 Oct '13

commit 5af59d2acfdb6c80d7c01353b401cafa48f6c086 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Oct 31 17:15:46 2013 +0000 Update translations for torcheck --- hi/torcheck.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hi/torcheck.po b/hi/torcheck.po index 1638804..64c77ff 100644 --- a/hi/torcheck.po +++ b/hi/torcheck.po @@ -10,7 +10,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-02-16 20:28+PDT\n" -"PO-Revision-Date: 2013-10-31 16:43+0000\n" +"PO-Revision-Date: 2013-10-31 16:50+0000\n" "Last-Translator: meghana <meghana.cse11(a)gmail.com>\n" "Language-Team: Hindi (http://www.transifex.com/projects/p/torproject/language/hi/)\n" "MIME-Version: 1.0\n"

1 0

[torbrowser/master] Merge branch 'maint-2.4'
by erinn＠torproject.org 31 Oct '13

31 Oct '13

commit 1166edb3a11b70eb17ce9107ee62ab2b65646ab5 Merge: 25a4e60 1a2ab46 Author: Erinn Clark <erinn(a)torproject.org> Date: Thu Oct 31 14:47:45 2013 -0200 Merge branch 'maint-2.4' changelog.linux-2.3 | 16 ++++++++++++++-- changelog.linux-2.4 | 16 ++++++++++++++-- changelog.osx-2.3 | 16 ++++++++++++++-- changelog.osx-2.4 | 16 ++++++++++++++-- changelog.windows-2.3 | 17 ++++++++++++++--- changelog.windows-2.4 | 16 ++++++++++++++-- 6 files changed, 84 insertions(+), 13 deletions(-)

1 0

[torbrowser/maint-2.4] update changelogs with Firefox patch changes
by erinn＠torproject.org 31 Oct '13

31 Oct '13

commit 1a2ab46e2a38e9a9853f3fbd812c7d731a0c9155 Author: Erinn Clark <erinn(a)torproject.org> Date: Thu Oct 31 14:47:18 2013 -0200 update changelogs with Firefox patch changes --- changelog.linux-2.3 | 16 ++++++++++++++-- changelog.linux-2.4 | 16 ++++++++++++++-- changelog.osx-2.3 | 16 ++++++++++++++-- changelog.osx-2.4 | 16 ++++++++++++++-- changelog.windows-2.3 | 17 ++++++++++++++--- changelog.windows-2.4 | 16 ++++++++++++++-- 6 files changed, 84 insertions(+), 13 deletions(-) diff --git a/changelog.linux-2.3 b/changelog.linux-2.3 index 9278246..5a9763b 100644 --- a/changelog.linux-2.3 +++ b/changelog.linux-2.3 @@ -1,11 +1,23 @@ Tor Browser Bundle (2.3.25-14); suite=linux * Update Firefox to 17.0.10esr + https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#fire… * Update LibPNG to 1.6.6 * Update NoScript to 2.6.8.4 * Update HTTPS-Everywhere to 3.4.2 - - -- Erinn Clark <erinn(a)torproject.org> Wed Oct 30 20:03:42 BRST 2013 + * Firefox patch changes: + - Hide infobar for missing plugins. (closes: #9012) + - Change the default entry page for the addons tab to the + installed addons page. (closes: #8364) + - Make flash objects really be click-to-play if flash is + enabled. (closes: #9867) + - Make getFirstPartyURI log+handle errors internally to + simplify caller usage of the API. (closes: #3661) + - Remove polipo and privoxy from the banned ports list. (closes: #3661) + - misc: Fix a potential memory leak in the Image Cache isolation + - misc: Fix a potential crash if OS theme information is ever absent + + -- Erinn Clark <erinn(a)torproject.org> Thu Oct 31 14:30:45 BRST 2013 Tor Browser Bundle (2.3.25-13); suite=linux diff --git a/changelog.linux-2.4 b/changelog.linux-2.4 index 0a8cd6f..9f79a20 100644 --- a/changelog.linux-2.4 +++ b/changelog.linux-2.4 @@ -1,12 +1,24 @@ Tor Browser Bundle (2.4.17-rc-1); suite=linux * Update Firefox to 17.0.10esr + https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#fire… * Update LibPNG to 1.6.6 * Update NoScript to 2.6.8.4 * Downgrade HTTPS-Everywhere to 3.4.2 in preparation for this becoming the stable bundle - - -- Erinn Clark <erinn(a)torproject.org> Wed Oct 30 20:09:43 BRST 2013 + * Firefox patch changes: + - Hide infobar for missing plugins. (closes: #9012) + - Change the default entry page for the addons tab to the + installed addons page. (closes: #8364) + - Make flash objects really be click-to-play if flash is + enabled. (closes: #9867) + - Make getFirstPartyURI log+handle errors internally to + simplify caller usage of the API. (closes: #3661) + - Remove polipo and privoxy from the banned ports list. (closes: #3661) + - misc: Fix a potential memory leak in the Image Cache isolation + - misc: Fix a potential crash if OS theme information is ever absent + + -- Erinn Clark <erinn(a)torproject.org> Thu Oct 31 14:30:45 BRST 2013 Tor Browser Bundle (2.4.17-beta-2); suite=linux diff --git a/changelog.osx-2.3 b/changelog.osx-2.3 index 9f04b53..4f1203c 100644 --- a/changelog.osx-2.3 +++ b/changelog.osx-2.3 @@ -1,10 +1,22 @@ Tor Browser Bundle (2.3.25-14); suite=osx * Update Firefox to 17.0.10esr + https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#fire… * Update NoScript to 2.6.8.4 * Update HTTPS-Everywhere to 3.4.2 - - -- Erinn Clark <erinn(a)torproject.org> Wed Oct 30 20:03:36 BRST 2013 + * Firefox patch changes: + - Hide infobar for missing plugins. (closes: #9012) + - Change the default entry page for the addons tab to the + installed addons page. (closes: #8364) + - Make flash objects really be click-to-play if flash is + enabled. (closes: #9867) + - Make getFirstPartyURI log+handle errors internally to + simplify caller usage of the API. (closes: #3661) + - Remove polipo and privoxy from the banned ports list. (closes: #3661) + - misc: Fix a potential memory leak in the Image Cache isolation + - misc: Fix a potential crash if OS theme information is ever absent + + -- Erinn Clark <erinn(a)torproject.org> Thu Oct 31 14:30:45 BRST 2013 Tor Browser Bundle (2.3.25-13); suite=osx diff --git a/changelog.osx-2.4 b/changelog.osx-2.4 index 5b5ab72..6d033db 100644 --- a/changelog.osx-2.4 +++ b/changelog.osx-2.4 @@ -1,11 +1,23 @@ Tor Browser Bundle (2.4.17-rc-1); suite=osx * Update Firefox to 17.0.10esr + https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#fire… * Update NoScript to 2.6.8.4 * Downgrade HTTPS-Everywhere to 3.4.2 in preparation for this becoming the stable bundle - - -- Erinn Clark <erinn(a)torproject.org> Wed Oct 30 20:09:38 BRST 2013 + * Firefox patch changes: + - Hide infobar for missing plugins. (closes: #9012) + - Change the default entry page for the addons tab to the + installed addons page. (closes: #8364) + - Make flash objects really be click-to-play if flash is + enabled. (closes: #9867) + - Make getFirstPartyURI log+handle errors internally to + simplify caller usage of the API. (closes: #3661) + - Remove polipo and privoxy from the banned ports list. (closes: #3661) + - misc: Fix a potential memory leak in the Image Cache isolation + - misc: Fix a potential crash if OS theme information is ever absent + + -- Erinn Clark <erinn(a)torproject.org> Thu Oct 31 14:30:45 BRST 2013 Tor Browser Bundle (2.4.17-beta-2); suite=osx diff --git a/changelog.windows-2.3 b/changelog.windows-2.3 index b0661d3..f32cc3a 100644 --- a/changelog.windows-2.3 +++ b/changelog.windows-2.3 @@ -1,11 +1,22 @@ Tor Browser Bundle (2.3.25-14); suite=windows * Update Firefox to 17.0.10esr - * Update LibPNG to 1.6.6 + https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#fire… * Update NoScript to 2.6.8.4 * Update HTTPS-Everywhere to 3.4.2 - - -- Erinn Clark <erinn(a)torproject.org> Wed Oct 30 20:03:38 BRST 2013 + * Firefox patch changes: + - Hide infobar for missing plugins. (closes: #9012) + - Change the default entry page for the addons tab to the + installed addons page. (closes: #8364) + - Make flash objects really be click-to-play if flash is + enabled. (closes: #9867) + - Make getFirstPartyURI log+handle errors internally to + simplify caller usage of the API. (closes: #3661) + - Remove polipo and privoxy from the banned ports list. (closes: #3661) + - misc: Fix a potential memory leak in the Image Cache isolation + - misc: Fix a potential crash if OS theme information is ever absent + + -- Erinn Clark <erinn(a)torproject.org> Thu Oct 31 14:30:45 BRST 2013 Tor Browser Bundle (2.3.25-13); suite=windows diff --git a/changelog.windows-2.4 b/changelog.windows-2.4 index 3cb2bb1..2bbc781 100644 --- a/changelog.windows-2.4 +++ b/changelog.windows-2.4 @@ -1,11 +1,23 @@ Tor Browser Bundle (2.4.17-rc-1); suite=windows * Update Firefox to 17.0.10esr + https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#fire… * Update NoScript to 2.6.8.4 * Downgrade HTTPS-Everywhere to 3.4.2 in preparation for this becoming the stable bundle - - -- Erinn Clark <erinn(a)torproject.org> Wed Oct 30 20:09:41 BRST 2013 + * Firefox patch changes: + - Hide infobar for missing plugins. (closes: #9012) + - Change the default entry page for the addons tab to the + installed addons page. (closes: #8364) + - Make flash objects really be click-to-play if flash is + enabled. (closes: #9867) + - Make getFirstPartyURI log+handle errors internally to + simplify caller usage of the API. (closes: #3661) + - Remove polipo and privoxy from the banned ports list. (closes: #3661) + - misc: Fix a potential memory leak in the Image Cache isolation + - misc: Fix a potential crash if OS theme information is ever absent + + -- Erinn Clark <erinn(a)torproject.org> Thu Oct 31 14:30:45 BRST 2013 Tor Browser Bundle (2.4.17-beta-2); suite=windows

1 0

[torbrowser/master] update changelogs with Firefox patch changes
by erinn＠torproject.org 31 Oct '13

31 Oct '13

1 0

[translation/torcheck] Update translations for torcheck
by translation＠torproject.org 31 Oct '13

31 Oct '13

commit fe9f5b36c615957188786791e8dd5a9f8b5aa613 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Oct 31 16:45:45 2013 +0000 Update translations for torcheck --- hi/torcheck.po | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/hi/torcheck.po b/hi/torcheck.po index 1344652..1638804 100644 --- a/hi/torcheck.po +++ b/hi/torcheck.po @@ -2,6 +2,7 @@ # Copyright (C) 2008-2013 The Tor Project, Inc # # Translators: +# meghana <meghana.cse11(a)gmail.com>, 2013 # inoui.im <inoui_iam(a)hotmail.com>, 2013 # ubaid <ushowkat(a)gmail.com>, 2012 msgid "" @@ -9,8 +10,8 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-02-16 20:28+PDT\n" -"PO-Revision-Date: 2013-10-03 09:07+0000\n" -"Last-Translator: runasand <runa.sandvik(a)gmail.com>\n" +"PO-Revision-Date: 2013-10-31 16:43+0000\n" +"Last-Translator: meghana <meghana.cse11(a)gmail.com>\n" "Language-Team: Hindi (http://www.transifex.com/projects/p/torproject/language/hi/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -20,7 +21,7 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1);\n" msgid "Congratulations. This browser is configured to use Tor." -msgstr "" +msgstr "बाधाई हो। यह ब्रौसेर तोर के उपयोग के लिये कॉन्फ़िगर हैं।" msgid "" "Please refer to the <a href=\"https://www.torproject.org/\">Tor website</a> " @@ -29,7 +30,7 @@ msgid "" msgstr "टोर का सुरक्षित रूप से उपयोग करने के लिये और अधिक जानकारी के लिए <a href=\"https://www.torproject.org/\">Tor website</a> पर जाएँ। अब आप गुमनाम रूप से इंटरनेट ब्राउज़ कर सकते हैं।" msgid "There is a security update available for the Tor Browser Bundle." -msgstr "टो ब्राउज़र बंडल के लिए एक सुरक्षा अद्यतन उपलब्ध है।" +msgstr "टोर ब्राउज़र बंडल के लिए एक सुरक्षा अद्यतन उपलब्ध है।" msgid "" "<a href=\"https://www.torproject.org/download/download-easy.html\">Click " @@ -58,10 +59,10 @@ msgid "Your IP address appears to be: " msgstr "आप का IP पता है:" msgid "Are you using Tor?" -msgstr "" +msgstr "क्या आप टोर उपयोग कर रहे हैं?" msgid "This page is also available in the following languages:" -msgstr "" +msgstr "यह पृष्ठ निम्नलिखित भाषाओं मे उप्लब्ध हैं।" msgid "For more information about this exit relay, see:" msgstr ""

1 0

[tor/master] Only use -Wlogical-op with GCC 4.6 and later
by nickm＠torproject.org 31 Oct '13

31 Oct '13

commit 4c6081910d4c0f5848c6ebfba65798a0985111bb Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Oct 31 11:57:50 2013 -0400 Only use -Wlogical-op with GCC 4.6 and later It generates an apparently spurious warning with gcc 4.4 in debian; we haven't tested 4.5. --- configure.ac | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index 974ff27..536a2b3 100644 --- a/configure.ac +++ b/configure.ac @@ -1446,6 +1446,12 @@ if test x$enable_gcc_warnings = xyes || test x$enable_gcc_warnings_advisory = xy #error #endif])], have_gcc43=yes, have_gcc43=no) + AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [ +#if !defined(__GNUC__) || (__GNUC__ < 4) || (__GNUC__ == 4 && __GNUC_MINOR__ < 6) +#error +#endif])], have_gcc46=yes, have_gcc46=no) + + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wshorten-64-to-32" AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [])], have_shorten64_flag=yes, @@ -1494,13 +1500,21 @@ if test x$enable_gcc_warnings = xyes || test x$enable_gcc_warnings_advisory = xy if test x$have_gcc43 = xyes ; then # These warnings break gcc 4.2 and work on gcc 4.3 # XXXX020 See if any of these work with earlier versions. - CFLAGS="$CFLAGS -Wextra -Warray-bounds -Wlogical-op" + CFLAGS="$CFLAGS -Wextra -Warray-bounds" + fi + + if test x$have_gcc46 = xyes ; then + # This warning was added in gcc 4.3, but it appears to generate + # spurious warnings in gcc 4.4. I don't know if it works in 4.5. + CFLAGS="$CFLAGS -Wlogical-op" fi if test x$have_shorten64_flag = xyes ; then CFLAGS="$CFLAGS -Wshorten-64-to-32" fi + + ##This will break the world on some 64-bit architectures # CFLAGS="$CFLAGS -Winline" fi

1 0

← Newer
1
2
3
4
5
6
7
...
129
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits October 2013