tor-commits April 2015

tor-commits@lists.torproject.org

19 participants
1110 discussions

[translation/bridgedb_completed] Update translations for bridgedb_completed
by translation＠torproject.org 30 Apr '15

30 Apr '15

commit 7cc8b418fd41b52139572e939317679633dfde1f Author: Translation commit bot <translation(a)torproject.org> Date: Thu Apr 30 21:45:08 2015 +0000 Update translations for bridgedb_completed --- sv/LC_MESSAGES/bridgedb.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sv/LC_MESSAGES/bridgedb.po b/sv/LC_MESSAGES/bridgedb.po index 12e8451..6c3296b 100644 --- a/sv/LC_MESSAGES/bridgedb.po +++ b/sv/LC_MESSAGES/bridgedb.po @@ -16,7 +16,7 @@ msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'POT-Creation-Date: 2015-03-19 22:13+0000\n" -"PO-Revision-Date: 2015-04-30 12:41+0000\n" +"PO-Revision-Date: 2015-04-30 21:24+0000\n" "Last-Translator: Peter Michanek <peter(a)michanek.se>\n" "Language-Team: Swedish (http://www.transifex.com/projects/p/torproject/language/sv/)\n" "MIME-Version: 1.0\n"

1 0

[translation/bridgedb] Update translations for bridgedb
by translation＠torproject.org 30 Apr '15

30 Apr '15

commit 1b686f52bfa01f6b6c90cdff97b5aceddd352641 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Apr 30 21:45:02 2015 +0000 Update translations for bridgedb --- sv/LC_MESSAGES/bridgedb.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sv/LC_MESSAGES/bridgedb.po b/sv/LC_MESSAGES/bridgedb.po index 12e8451..6c3296b 100644 --- a/sv/LC_MESSAGES/bridgedb.po +++ b/sv/LC_MESSAGES/bridgedb.po @@ -16,7 +16,7 @@ msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'POT-Creation-Date: 2015-03-19 22:13+0000\n" -"PO-Revision-Date: 2015-04-30 12:41+0000\n" +"PO-Revision-Date: 2015-04-30 21:24+0000\n" "Last-Translator: Peter Michanek <peter(a)michanek.se>\n" "Language-Team: Swedish (http://www.transifex.com/projects/p/torproject/language/sv/)\n" "MIME-Version: 1.0\n"

1 0

[webwml/master] Do not mention the phone on the website; it is being deprecated for now.
by nickm＠torproject.org 30 Apr '15

30 Apr '15

commit 0296a1372fd0fb70655d4043a78746df461cda78 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Apr 30 16:39:09 2015 -0400 Do not mention the phone on the website; it is being deprecated for now. --- about/en/contact.wml | 4 ++-- about/en/corepeople.wml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/about/en/contact.wml b/about/en/contact.wml index f2581bf..81477b1 100644 --- a/about/en/contact.wml +++ b/about/en/contact.wml @@ -97,13 +97,13 @@ <a id="phone"></a> <h3><a class="anchor" href="#phone">Telephone</a></h3> - <p>The Tor office is reachable at +1-781-948-1982. Please be aware that your + <p>Please be aware that your phone company and ours (and everyone in between) could listen to the call. Please do not call for technical support. Instead, email <em>help(a)rt.torproject.org</em>. Technical support phone calls are not returned.</p> - <p>For press inquiries, please call +1-617-902-0208.</p> + <p>For press inquiries only, please call +1-617-902-0208.</p> <a id="mail"></a> <h3><a class="anchor" href="#mail">Mailing Address</a></h3> diff --git a/about/en/corepeople.wml b/about/en/corepeople.wml index d914c23..6409372 100644 --- a/about/en/corepeople.wml +++ b/about/en/corepeople.wml @@ -224,7 +224,7 @@ <dd>Manages the business operations of The Tor Project, Inc. Plays roles of finance, advocacy, project management, strategy, press, law enforcement liason, and victim of domestic violence - advocate. He can be contacted via andrew(a)torproject.is or +1-781-948-1982.</dd> + advocate. He can be contacted via andrew(a)torproject.is</dd> <dt>Dr. Karsten Loesing, Metrics Researcher and Developer</dt> <dd>Primary researcher and developer into

1 0

[tor-browser-spec/master] Fixing typos and minor things
by mikeperry＠torproject.org 30 Apr '15

30 Apr '15

commit 1bbff5085c226487cd2acc7d125d6cf7203c7493 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Apr 30 18:50:06 2015 +0000 Fixing typos and minor things --- design-doc/design.xml | 25 ++++++++++++------------- 1 file changed, 12 insertions(+), 13 deletions(-) diff --git a/design-doc/design.xml b/design-doc/design.xml index 7711d19..c0cb1b1 100644 --- a/design-doc/design.xml +++ b/design-doc/design.xml @@ -1184,8 +1184,7 @@ each cache key</ulink> to include an additional ID that includes the URL bar domain. This functionality can be observed by navigating to <ulink url="about:cache">about:cache</ulink> and viewing the key used for each cache entry. Each third party element should have an additional "id=string" -property prepended, which will list the FQDN that was used to source the third -party element. +property prepended, which will list the FQDN that was used to source it. </para> <para> @@ -1200,12 +1199,12 @@ this cache per url bar domain</ulink>. <listitem>HTTP Auth <para> -HTTP Authorization headers can be used by Javascript to encode <ulink +HTTP Authorization headers can be used to encode <ulink url="http://jeremiahgrossman.blogspot.com/2007/04/tracking-users-without-cookies…">silent third party tracking identifiers</ulink>. To prevent this, we remove HTTP authentication tokens for third party elements through a <ulink url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">patch -to nsHTTPChannel</ulink>. +to nsHTTPChannel</ulink>. </para> </listitem> @@ -1256,14 +1255,14 @@ url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e to Firefox</ulink>. To compensate for the increased round trip latency from disabling these performance optimizations, we also enable <ulink url="https://tools.ietf.org/html/draft-bmoeller-tls-falsestart-00">TLS -False Start</ulink> via the Firefox Pref +False Start</ulink> via the Firefox Pref <command>security.ssl.enable_false_start</command>. </para> </listitem> - <listitem>IP address, Tor Circuit, and HTTP Keep-Alive linkability + <listitem>IP address, Tor circuit, and HTTP Keep-Alive linkability <para> -IP addresses, Tor Circuits, and HTTP connections from a third party in one URL +IP addresses, Tor circuits, and HTTP connections from a third party in one URL bar origin MUST NOT be reused for that same third party in another URL bar origin. </para> @@ -1271,14 +1270,14 @@ origin. This isolation functionality is provided by the combination of a <ulink url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">Firefox -patch to allow SOCKS username and passwords</ulink>, as well as a Torbutton +patch to allow SOCKS usernames and passwords</ulink>, as well as a Torbutton component that <ulink linkend="https://gitweb.torproject.org/torbutton.git/tree/src/components/domain-isol…">sets the SOCKS username and password for each request</ulink>. The Tor client has logic to prevent connections with different SOCKS usernames and passwords from -using the same Tor Circuit, which provides us with IP address unlinkability. -Firefox has existing logic to ensure that connections with SOCKS proxy do not -re-use existing HTTP Keep Alive connections unless the proxy settings match. +using the same Tor circuit, which provides us with IP address unlinkability. +Firefox has existing logic to ensure that connections with SOCKS proxies do not +re-use existing HTTP Keep-Alive connections unless the proxy settings match. We extended this logic to cover SOCKS username and password authentication, providing us with HTTP Keep-Alive unlinkability. @@ -1325,7 +1324,7 @@ URIs created with URL.createObjectURL MUST be limited in scope to the first party URL bar domain that created them. We provide this isolation in Tor Browser via a <ulink url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">direct -patch to Firefox</ulink>. +patch to Firefox</ulink> and disable URL.createObjectURL in a worker context as a stopgap. </para> </listitem> @@ -1487,7 +1486,7 @@ do so only on a per-site basis via site permissions, to avoid linkability. <listitem><command>Device and Hardware Characteristics</command> <para> -Device and hardware characteristics can be determined three ways: they can be +Device and hardware characteristics can be determined in three ways: they can be reported explicitly by the browser, they can be inferred through API behavior, or they can be extracted through statistical measurements of system performance. We are most concerned with the cases where this information is

1 0

[tor/master] remove changes files for already-moved things
by nickm＠torproject.org 30 Apr '15

30 Apr '15

commit 16409449482686a6c650b28960b22135c54f287c Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Apr 30 15:04:41 2015 -0400 remove changes files for already-moved things --- changes/bug11447 | 5 ----- changes/bug15600 | 5 ----- changes/bug15601 | 4 ---- 3 files changed, 14 deletions(-) diff --git a/changes/bug11447 b/changes/bug11447 deleted file mode 100644 index 8cd4f5b..0000000 --- a/changes/bug11447 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (DoS-resistance): - - Decrease the amount of reattempts that a hidden service is - willing to perform when its rendezvous circuits fail. This - reduces the computational cost for hidden service under heavy - load. Resolves ticket #11447. \ No newline at end of file diff --git a/changes/bug15600 b/changes/bug15600 deleted file mode 100644 index ee1d6cf..0000000 --- a/changes/bug15600 +++ /dev/null @@ -1,5 +0,0 @@ - o Major bugfixes (security, hidden service): - - Fix an issue that would allow a malicious client to trigger - an assertion failure and halt a hidden service. Fixes - bug 15600; bugfix on 0.2.1.6-alpha. Reported by "skruffy". - diff --git a/changes/bug15601 b/changes/bug15601 deleted file mode 100644 index 2cc880a..0000000 --- a/changes/bug15601 +++ /dev/null @@ -1,4 +0,0 @@ - o Major bugfixes (security, hidden service): - - Fix a bug that could cause a client to crash with an assertion - failure when parsing a malformed hidden service descriptor. - Fixes bug 15601; bugfix on 0.2.1.5-alpha. Found by "DonnCha".

1 0

[tor/master] Make lintChanges happy
by nickm＠torproject.org 30 Apr '15

30 Apr '15

commit 174598f3ef95423bcc9d1614638a4cc9e7dd9f52 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Apr 30 15:11:19 2015 -0400 Make lintChanges happy --- changes/bug-15771-reachability | 2 +- changes/bug14391 | 1 - changes/bug14806 | 4 ++-- changes/bug15269 | 2 +- changes/bug15515 | 2 +- changes/bug15850 | 2 +- changes/deprecated-libevents | 2 +- 7 files changed, 7 insertions(+), 8 deletions(-) diff --git a/changes/bug-15771-reachability b/changes/bug-15771-reachability index aff6268..0ca914f 100644 --- a/changes/bug-15771-reachability +++ b/changes/bug-15771-reachability @@ -4,5 +4,5 @@ The previous fix used TestingTorNetwork, which implies ExtendAllowPrivateAddresses, but this excluded rare configs where ExtendAllowPrivateAddresses is set but TestingTorNetwork is not. - Fixes bug 15771; bugfix on 0.2.6.1-alpha, bug #13924. + Fixes bug 15771; bugfix on 0.2.6.1-alpha. Patch by "teor", issue discovered by CJ Ess. diff --git a/changes/bug14391 b/changes/bug14391 index 5907372..2edd274 100644 --- a/changes/bug14391 +++ b/changes/bug14391 @@ -1,4 +1,3 @@ - o Code simplification and refactoring: - Refactor hidden service client-side cache lookup to intelligently report its various failure cases, and disentangle failure cases diff --git a/changes/bug14806 b/changes/bug14806 index dd85e78..6a72145 100644 --- a/changes/bug14806 +++ b/changes/bug14806 @@ -1,3 +1,3 @@ - o Minor bugfixes (testing): - - Commandline argument tests moved to Stem. Fixes bug 14806. + o Minor features (testing): + - Commandline argument tests moved to Stem. Resolves ticket 14806. diff --git a/changes/bug15269 b/changes/bug15269 index e6b2b24..c511c6c 100644 --- a/changes/bug15269 +++ b/changes/bug15269 @@ -1,7 +1,7 @@ o Minor bugfixes (logs): - When building Tor under Clang, do not include an extra set of parentheses in log messages that include function names. - Fixes bug 15053; bugfix on every released version of Tor when + Fixes bug 15269; bugfix on every released version of Tor when compiled with recent enough Clang. diff --git a/changes/bug15515 b/changes/bug15515 index dda7c2f..93172d5 100644 --- a/changes/bug15515 +++ b/changes/bug15515 @@ -1,4 +1,4 @@ o Minor features (DoS-resistance): - Make it harder for attackers to overwhelm hidden services with introductions, by blocking multiple introduction requests on the - same circuit. Resolves ticket #15515. + same circuit. Resolves ticket 15515. diff --git a/changes/bug15850 b/changes/bug15850 index 48a7c7b..0d0a6e4 100644 --- a/changes/bug15850 +++ b/changes/bug15850 @@ -1,4 +1,4 @@ o Major bugfix - Revert commit that made directory authority assign the HSDir flag to relay without a DirPort which is bad because relay can't handle - BEGIN_DIR cells. Fixes #15850. Bugfix on tor-0.2.6.3-alpha; + BEGIN_DIR cells. Fixes bug 15850; bugfix on tor-0.2.6.3-alpha. diff --git a/changes/deprecated-libevents b/changes/deprecated-libevents index 4ea0175..2eb6195 100644 --- a/changes/deprecated-libevents +++ b/changes/deprecated-libevents @@ -1,3 +1,3 @@ o New system requirements: - Tor no longer includes workarounds for Libevent versions before 1.3e. - Libevent 2.0 or later is recommended. Closes ticket #15248. + Libevent 2.0 or later is recommended. Closes ticket 15248.

1 0

[tor/master] Move changes entries into changelog for 0.2.7.1-alpha
by nickm＠torproject.org 30 Apr '15

30 Apr '15

commit ef7ef4abb4f28d0d7615cd1bcae42c38f3c08e48 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Apr 30 15:29:56 2015 -0400 Move changes entries into changelog for 0.2.7.1-alpha --- ChangeLog | 225 ++++++++++++++++++++++- changes/15542 | 3 - changes/bug-15642-default-fallback-default-dirs | 10 - changes/bug-15771-reachability | 8 - changes/bug13736 | 5 - changes/bug14018 | 4 - changes/bug14391 | 4 - changes/bug14784 | 4 - changes/bug14806 | 3 - changes/bug14922 | 3 - changes/bug14987b-doc | 4 - changes/bug14994 | 8 - changes/bug15053 | 4 - changes/bug15211 | 6 - changes/bug15269 | 7 - changes/bug15296 | 3 - changes/bug15515 | 4 - changes/bug15541 | 5 - changes/bug15546 | 4 - changes/bug15591 | 4 - changes/bug15604 | 7 - changes/bug15745 | 7 - changes/bug15759 | 6 - changes/bug15850 | 4 - changes/coverage | 6 - changes/deprecated-libevents | 3 - changes/doc15550 | 4 - changes/feature15026 | 5 - changes/feature15180 | 3 - changes/feature15344 | 3 - changes/feature15435 | 5 - changes/feature15471 | 5 - changes/feature15652 | 9 - changes/feature6411 | 7 - changes/geoip-april2015 | 3 - changes/geoip6-april2015 | 2 - changes/no_digests | 5 - changes/remove_old_version_checks | 5 - changes/test-memwipe | 3 - changes/ticket14710 | 10 - changes/ticket14840 | 5 - changes/ticket14845 | 4 - changes/ticket14847 | 3 - changes/ticket15024 | 4 - changes/ticket15431 | 6 - changes/ticket15542 | 3 - changes/ticket8766 | 7 - 47 files changed, 224 insertions(+), 228 deletions(-) diff --git a/ChangeLog b/ChangeLog index 58cbec4..6a86744 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,227 @@ -Changes in version 0.2.7.1-alpha - 2015-0?-?? +Changes in version 0.2.7.1-alpha - 2015-05-?? + Tor 0.2.7.1-alpha is the first alpha release in its series. + + o Major features (controller): + - Add the ADD_ONION and DEL_ONION commands that allows the creation + and management of hidden services via the controller. Closes + ticket 6411. + - New "GETINFO onions/current" and "GETINFO onions/detached" to get + information about hidden services created via the controller. + Part of ticket 6411. + - New HSFETCH command to launch a request for a hidden service descriptor. + Closes ticket 14847. + + o Major bugfixes (hidden services): + - Revert commit that made directory authority assign the HSDir flag to + relay without a DirPort which is bad because relay can't handle + BEGIN_DIR cells. Fixes bug 15850; bugfix on tor-0.2.6.3-alpha. + + o Minor features (HS popularity countermeasure): + - To avoid leaking HS popularity, don't cycle the introduction point + when we've handled a fixed number of INTRODUCE2 cells but instead + cycle it when a random value of introductions is reached thus making + it more difficult for an attacker to find out the amount of clients + that has passed through the introduction point for a specific HS. + Closes ticket 15745. + + o Minor features (command-line interface): + - Make --hash-password imply --hush to prevent unnecessary noise. Closes + ticket 15542. + + o Minor features (controller) + - Controllers can now use GETINFO hs/client/desc/id/... to + retrieve items from the client's hidden service descriptor + cache. Closes ticket 14845. + + o Minor features (DoS-resistance): + - Make it harder for attackers to overwhelm hidden services with + introductions, by blocking multiple introduction requests on the + same circuit. Resolves ticket 15515. + + o Minor features (logging): + - Include the Tor version in all LD_BUG log messages, since people + tend to cut and paste those into the bugtracker. Implements + ticket 15026. + + o Minor features (pluggable transports): + - When launching managed pluggable transports, setup a valid open stdin + in the child process that can be used to detect if tor has terminated. + The "TOR_PT_EXIT_ON_STDIN_CLOSE" enviornment variable can be used by + implementations to detect this new behavior. Resolves ticket 15435. + - When launching managed pluggable transports on linux systems, + attempt to have the kernel deliver a SIGTERM on tor exit if + the pluggable transport process is still running. Resolves + ticket 15471. + + + o Minor features (testing): + - Add make rule `check-changes` to verify the format of changes files. + Closes ticket 15180. + - Add unit tests for control_event_is_interesting(). + Add a compile-time check that the number of events doesn't exceed + the capacity of control_event_t.event_mask. + Closes ticket 15431, checks for bugs similar to 13085. + Patch by "teor". + - Commandline argument tests moved to Stem. Resolves ticket 14806. + - Integrate the ntor, backtrace and zero lengths keys tests into the + automake test suite. Closes ticket 15344. + - Remove assertions during builds to determine Tor's test coverage. + We don't want to trigger these even in assertions, so including + them artificially makes our branch coverage look worse than it is. + This patch provides the new test-stem-full and coverage-html-full + configure options. Implements ticket 15400. + - Add a test to verify that the compiler does not eliminate our + memwipe() implementation. Closes ticket 15377. + + o Minor features (controller): + - Add DirAuthority lines for default directory authorities to output + of the GETINFO config/defaults controller command if not already + present. Implements ticket 14840. + - Implement a new controller command "status/fresh-relay-descs" to + fetch a descriptor/extrainfo pair that was generated on demand + just for the controller's use. Implements ticket 14784. + + o Minor features (command-line interface): + - Print a warning whenever we find a relative + file path being used as torrc option. Resolves issue 14018. + - The "--hash-password" option now implies "--hush" to avoid needless + noise. Closes ticket 15542. Patch from "cypherpunks". + + o Minor features (clock-jump tolerance): + - Recover better when our clock jumps back many hours, like might + happen for Tails or Whonix users who start with a very wrong + hardware clock, use Tor to discover a more accurate time, and then + fix their clock. Resolves part of ticket 8766. + [I'd call this a major feature if it actually fixed all of the issues.] + + o Minor features (geoip): + - Update geoip to the April 8 2015 Maxmind GeoLite2 Country database. + - Update geoip6 to the April 8 2015 Maxmind GeoLite2 Country database. + + o Minor bugfixes (statistics): + - Disregard the ConnDirectionStatistics torrc options when Tor is + not a relay since in that mode of operation no sensible data is + being collected and because Tor might run into measurement hiccups + when running as a client for some time, then becoming a relay. Fixes + bug 15604; bugfix on 0.2.2.35. + + o Minor bugfixes (build): + - Improve out-of-tree builds by making non-standard rules work and clean up + additional files and directories. Fixes bug 15053; bugfix on + 0.2.7.0-alpha. + + o Minor bugfixes (command-line interface): + - When "--quiet" is provided along with "--validate-config", do not + write anything to stdout on success. Fixes bug 14994; bugfix on + 0.2.3.3-alpha. + - When complaining about bad arguments to "--dump-config", use + stderr, not stdout. + + o Minor bugfixes (configuration, unit tests): + - Only add the default fallback directories when the DirAuthorities, + AlternateDirAuthority, and FallbackDir directory config options + are set to their defaults. + The default fallback directory list is currently empty, this fix + will only change tor's behaviour when it has default fallback + directories. + Includes unit tests for consider_adding_dir_servers(). + Fixes bug 15642; bugfix on 90f6071d8dc0 in 0.2.4.7-alpha. + Patch by "teor". + + o Minor bugfixes (hidden service): + - Remove an extraneous newline character from the end of hidden + service descriptors. Fixes bug 15296; bugfix on 0.2.0.10-alpha. + + o Minor bugfixes (interface): + - Print usage information for --dump-config when it is used without + an argument. Also, fix the error message to use different wording + and add newline at the end. Fixes bug 15541; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (logs): + - When building Tor under Clang, do not include an extra set of + parentheses in log messages that include function names. + Fixes bug 15269; bugfix on every released version of Tor when + compiled with recent enough Clang. + + o Minor bugfixes (test networks) + - When self-testing reachability, use ExtendAllowPrivateAddresses + to determine if local/private addresses imply reachability. + The previous fix used TestingTorNetwork, which implies + ExtendAllowPrivateAddresses, but this excluded rare configs where + ExtendAllowPrivateAddresses is set but TestingTorNetwork is not. + Fixes bug 15771; bugfix on 0.2.6.1-alpha. + Patch by "teor", issue discovered by CJ Ess. + + o Minor bugfixes (testing): + - Set the severity correctly when testing get_interface_addresses_ifaddrs() + and get_interface_addresses_win32(), so that the tests fail gracefully + instead of triggering an assertion. Fixes bug 15759; bugfix on + 0.2.6.3-alpha. Reported by Nicolas Derive. + - Check for matching value in server response in ntor_ref.py. + Fixes bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed + by "joelanders". + + o Minor bugfixes (correctness): + - Remove side-effects from tor_assert() calls. This was harmless, + because we never disable assertions, but it is bad style and + unnecessary. Fixes bug 15211; bugfix on 0.2.5.5, 0.2.2.36, and + 0.2.0.10. + - For correctness, avoid modifying a constant string in + handle_control_postdescriptor. Fixes bug 15546; bugfix on + 0.1.1.16-rc. + + o Minor bugfixes (network): + - When attempting to use fallback technique for network interface + lookup, disregard loopback and multicast addresses since they are + unsuitable for public communications. + + o Code simplification and refactoring: + - Move the hacky fallback code out of get_interface_address6() + into separate function and get it covered with unit-tests. Resolves + ticket 14710. + - Refactor hidden service client-side cache lookup to intelligently + report its various failure cases, and disentangle failure cases + involving a lack of introduction points. Closes ticket 14391. + - Use our own Base64 encoder instead of OpenSSL's, to allow more control + over the output. Part of ticket 15652. + + o Removed code: + - Remove `USE_OPENSSL_BASE64` and the corresponding fallback code and + always use the internal Base64 decoder. The internal decoder has been + part of tor since tor-0.2.0.10-alpha, and no one should be using the + OpenSSL one. Part of ticket 15652. + + o Documentation: + - Improve the descriptions of statistics-related torrc options in + the manpage to describe rationale and possible uses cases. Fixes + issue 15550. + - Improve the layout and formatting of ./configure --help messages. + Closes ticket 15024. Patch from "cypherpunks". + - Standardize on the term "server descriptor" in the manual page. + Previously, we had used "router descriptor", "server descriptor", + and "relay descriptor" interchangeably. Part of ticket 14987. + + o New system requirements: + - Tor no longer includes workarounds for Libevent versions before 1.3e. + Libevent 2.0 or later is recommended. Closes ticket 15248. + + o Removed code: + - Remove the 'tor_strclear()' function; use memwipe() instead. + Closes ticket 14922. + + o Removed features: + - Remove the (seldom-used) DynamicDHGroups feature. For + anti-fingerprinting we now recommend pluggable transports; for + forward-secrecy in TLS, we now use the P-256 group. + Closes ticket 13736. + - Remove the undocumented "--digests" command-line option. It + complicated our build process, caused subtle build issues + on multiple platforms, and is now redundant since we started + including git version identifiers. Closes ticket 14742. + - Tor no longer contains workarounds for stat files generated by + super-old versions of Tor that didn't choose guards sensibly. + - Tor no longer contains checks for ancient directory cache versions + that didn't know about microdescriptors. Changes in version 0.2.4.27 - 2015-04-06 diff --git a/changes/15542 b/changes/15542 deleted file mode 100644 index bf289c9..0000000 --- a/changes/15542 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features: - - The "--hash-password" option now implies "--hush" to avoid needless - noise. Closes ticket 15542. Patch from "cypherpunks". diff --git a/changes/bug-15642-default-fallback-default-dirs b/changes/bug-15642-default-fallback-default-dirs deleted file mode 100644 index a1e194b..0000000 --- a/changes/bug-15642-default-fallback-default-dirs +++ /dev/null @@ -1,10 +0,0 @@ - o Minor bugfixes (configuration, unit tests): - - Only add the default fallback directories when the DirAuthorities, - AlternateDirAuthority, and FallbackDir directory config options - are set to their defaults. - The default fallback directory list is currently empty, this fix - will only change tor's behaviour when it has default fallback - directories. - Includes unit tests for consider_adding_dir_servers(). - Fixes bug 15642; bugfix on 90f6071d8dc0 in 0.2.4.7-alpha. - Patch by "teor". diff --git a/changes/bug-15771-reachability b/changes/bug-15771-reachability deleted file mode 100644 index 0ca914f..0000000 --- a/changes/bug-15771-reachability +++ /dev/null @@ -1,8 +0,0 @@ - o Minor bugfixes (test networks) - - When self-testing reachability, use ExtendAllowPrivateAddresses - to determine if local/private addresses imply reachability. - The previous fix used TestingTorNetwork, which implies - ExtendAllowPrivateAddresses, but this excluded rare configs where - ExtendAllowPrivateAddresses is set but TestingTorNetwork is not. - Fixes bug 15771; bugfix on 0.2.6.1-alpha. - Patch by "teor", issue discovered by CJ Ess. diff --git a/changes/bug13736 b/changes/bug13736 deleted file mode 100644 index 686d2f1..0000000 --- a/changes/bug13736 +++ /dev/null @@ -1,5 +0,0 @@ - o Removed features: - - Remove the (seldom-used) DynamicDHGroups feature. For - anti-fingerprinting we now recommend pluggable transports; for - forward-secrecy in TLS, we now use the P-256 group. - Closes ticket 13736. diff --git a/changes/bug14018 b/changes/bug14018 deleted file mode 100644 index 165e042..0000000 --- a/changes/bug14018 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Complain (i.e. print a warning) whenever we find a relative - file path being used as torrc option. Resolves issue 14018. - diff --git a/changes/bug14391 b/changes/bug14391 deleted file mode 100644 index 2edd274..0000000 --- a/changes/bug14391 +++ /dev/null @@ -1,4 +0,0 @@ - o Code simplification and refactoring: - - Refactor hidden service client-side cache lookup to intelligently - report its various failure cases, and disentangle failure cases - involving a lack of introduction points. Closes ticket 14391. diff --git a/changes/bug14784 b/changes/bug14784 deleted file mode 100644 index 1f50142..0000000 --- a/changes/bug14784 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Implement a new controller command "status/fresh-relay-descs" to - fetch a descriptor/extrainfo pair that was generated on demand - just for the controller's use. Implements ticket 14784. diff --git a/changes/bug14806 b/changes/bug14806 deleted file mode 100644 index 6a72145..0000000 --- a/changes/bug14806 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (testing): - - Commandline argument tests moved to Stem. Resolves ticket 14806. - diff --git a/changes/bug14922 b/changes/bug14922 deleted file mode 100644 index 65396e4..0000000 --- a/changes/bug14922 +++ /dev/null @@ -1,3 +0,0 @@ - o Removed code: - - Remove the 'tor_strclear()' function; use memwipe() instead. - Closes ticket 14922. \ No newline at end of file diff --git a/changes/bug14987b-doc b/changes/bug14987b-doc deleted file mode 100644 index b8b2392..0000000 --- a/changes/bug14987b-doc +++ /dev/null @@ -1,4 +0,0 @@ - o Documentation: - - Standardize on the term "server descriptor" in the manual page. - Previously, we had used "router descriptor", "server descriptor", - and "relay descriptor" interchangeably. Part of ticket 14987. diff --git a/changes/bug14994 b/changes/bug14994 deleted file mode 100644 index aafeac4..0000000 --- a/changes/bug14994 +++ /dev/null @@ -1,8 +0,0 @@ - o Minor bugfixes (command-line interface): - - When "--quiet" is provided along with "--validate-config", do not - write anything to stdout on success. Fixes bug 14994; bugfix on - 0.2.3.3-alpha. - - When complaining about bad arguments to "--dump-config", use - stderr, not stdout. - - diff --git a/changes/bug15053 b/changes/bug15053 deleted file mode 100644 index 5dde9d7..0000000 --- a/changes/bug15053 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (build): - - Improve out-of-tree builds by making non-standard rules work and clean up - additional files and directories. Fixes bug 15053; bugfix on - 0.2.7.0-alpha. diff --git a/changes/bug15211 b/changes/bug15211 deleted file mode 100644 index 24c189d..0000000 --- a/changes/bug15211 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes: - - Remove side-effects from tor_assert() calls. This was harmless, - because we never disable assertions, but it is bad style and - unnecessary. Fixes bug 15211; bugfix on 0.2.5.5, 0.2.2.36, and - 0.2.0.10. - diff --git a/changes/bug15269 b/changes/bug15269 deleted file mode 100644 index c511c6c..0000000 --- a/changes/bug15269 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor bugfixes (logs): - - When building Tor under Clang, do not include an extra set of - parentheses in log messages that include function names. - Fixes bug 15269; bugfix on every released version of Tor when - compiled with recent enough Clang. - - diff --git a/changes/bug15296 b/changes/bug15296 deleted file mode 100644 index 5230a41..0000000 --- a/changes/bug15296 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (hidden service): - - Remove an extraneous newline character from the end of hidden - service descriptors. Fixes bug 15296; bugfix on 0.2.0.10-alpha. diff --git a/changes/bug15515 b/changes/bug15515 deleted file mode 100644 index 93172d5..0000000 --- a/changes/bug15515 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (DoS-resistance): - - Make it harder for attackers to overwhelm hidden services with - introductions, by blocking multiple introduction requests on the - same circuit. Resolves ticket 15515. diff --git a/changes/bug15541 b/changes/bug15541 deleted file mode 100644 index f73ce5f..0000000 --- a/changes/bug15541 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (interface): - - Print usage information for --dump-config when it is used without - an argument. Also, fix the error message to use different wording - and add newline at the end. Fixes bug 15541; bugfix on 0.2.5.1-alpha. - diff --git a/changes/bug15546 b/changes/bug15546 deleted file mode 100644 index b33b0aa..0000000 --- a/changes/bug15546 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - For correctness, avoid modifying a constant string in - handle_control_postdescriptor. Fixes bug 15546; bugfix on - 0.1.1.16-rc. \ No newline at end of file diff --git a/changes/bug15591 b/changes/bug15591 deleted file mode 100644 index 1398a02..0000000 --- a/changes/bug15591 +++ /dev/null @@ -1,4 +0,0 @@ - o Testing: - - Check for matching value in server response in ntor_ref.py. - Fixes bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed - by "joelanders". diff --git a/changes/bug15604 b/changes/bug15604 deleted file mode 100644 index de29380..0000000 --- a/changes/bug15604 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor bugfixes - - Disregard the ConnDirectionStatistics torrc options when Tor is - not a relay since in that mode of operation no sensible data is - being collected and because Tor might run into measurement hiccups - when running as a client for some time, then becoming a relay. Fixes - bug 15604; bugfix on 0.2.2.35. - diff --git a/changes/bug15745 b/changes/bug15745 deleted file mode 100644 index 6e4bfa4..0000000 --- a/changes/bug15745 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor feature (HS popularity countermeasure): - - To avoid leaking HS popularity, don't cycle the introduction point - when we've handled a fixed number of INTRODUCE2 cells but instead - cycle it when a random value of introductions is reached thus making - it more difficult for an attacker to find out the amount of clients - that has passed through the introduction point for a specific HS. - Closes ticket 15745. diff --git a/changes/bug15759 b/changes/bug15759 deleted file mode 100644 index 24c5eb0..0000000 --- a/changes/bug15759 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (testing): - - Set the severity correctly when testing get_interface_addresses_ifaddrs() - and get_interface_addresses_win32(), so that the tests fail gracefully - instead of triggering an assertion. Fixes bug 15759; bugfix on - 0.2.6.3-alpha. Reported by Nicolas Derive. - diff --git a/changes/bug15850 b/changes/bug15850 deleted file mode 100644 index 0d0a6e4..0000000 --- a/changes/bug15850 +++ /dev/null @@ -1,4 +0,0 @@ - o Major bugfix - - Revert commit that made directory authority assign the HSDir flag to - relay without a DirPort which is bad because relay can't handle - BEGIN_DIR cells. Fixes bug 15850; bugfix on tor-0.2.6.3-alpha. diff --git a/changes/coverage b/changes/coverage deleted file mode 100644 index bb7c7cf..0000000 --- a/changes/coverage +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features: - - Remove assertions during builds to determine Tor's test coverage. - We don't want to trigger these even in assertions, so including - them artificially makes our branch coverage look worse than it is. - This patch provides the new test-stem-full and coverage-html-full - configure options. Implements ticket 15400. diff --git a/changes/deprecated-libevents b/changes/deprecated-libevents deleted file mode 100644 index 2eb6195..0000000 --- a/changes/deprecated-libevents +++ /dev/null @@ -1,3 +0,0 @@ - o New system requirements: - - Tor no longer includes workarounds for Libevent versions before 1.3e. - Libevent 2.0 or later is recommended. Closes ticket 15248. diff --git a/changes/doc15550 b/changes/doc15550 deleted file mode 100644 index f953bbf..0000000 --- a/changes/doc15550 +++ /dev/null @@ -1,4 +0,0 @@ - o Documentation: - - Improve the descriptions of statistics-related torrc options in - the manpage to describe rationale and possible uses cases. Fixes - issue 15550. diff --git a/changes/feature15026 b/changes/feature15026 deleted file mode 100644 index c732b41..0000000 --- a/changes/feature15026 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (logging): - - Include the Tor version in all LD_BUG log messages, since people - tend to cut and paste those into the bugtracker. Implements - ticket 15026. - diff --git a/changes/feature15180 b/changes/feature15180 deleted file mode 100644 index f73ab96..0000000 --- a/changes/feature15180 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (testing): - - Add make rule `check-changes` to verify the format of changes files. - Closes ticket 15180. diff --git a/changes/feature15344 b/changes/feature15344 deleted file mode 100644 index 3bd640a..0000000 --- a/changes/feature15344 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (testing): - - Integrate the ntor, backtrace and zero lengths keys tests into the - automake test suite. Closes ticket 15344. diff --git a/changes/feature15435 b/changes/feature15435 deleted file mode 100644 index afe3603..0000000 --- a/changes/feature15435 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (pluggable Transports): - - When launching managed pluggable transports, setup a valid open stdin - in the child process that can be used to detect if tor has terminated. - The "TOR_PT_EXIT_ON_STDIN_CLOSE" enviornment variable can be used by - implementations to detect this new behavior. Resolves ticket 15435. diff --git a/changes/feature15471 b/changes/feature15471 deleted file mode 100644 index 594adf0..0000000 --- a/changes/feature15471 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (pluggable transports): - - When launching managed pluggable transports on linux systems, - attempt to have the kernel deliver a SIGTERM on tor exit if - the pluggable transport process is still running. Resolves - ticket 15471. diff --git a/changes/feature15652 b/changes/feature15652 deleted file mode 100644 index 61d2b22..0000000 --- a/changes/feature15652 +++ /dev/null @@ -1,9 +0,0 @@ - o Code simplifications and refactoring: - - Use our own Base64 encoder instead of OpenSSL's, to allow more control - over the output. Part of ticket 15652. - - o Removed code: - - Remove `USE_OPENSSL_BASE64` and the corresponding fallback code and - always use the internal Base64 decoder. The internal decoder has been - part of tor since tor-0.2.0.10-alpha, and no one should be using the - OpenSSL one. Part of ticket 15652. diff --git a/changes/feature6411 b/changes/feature6411 deleted file mode 100644 index 6024364..0000000 --- a/changes/feature6411 +++ /dev/null @@ -1,7 +0,0 @@ - o Major features (controller): - - Add the ADD_ONION and DEL_ONION commands that allows the creation - and management of hidden services via the controller. Closes - ticket 6411. - - New "GETINFO onions/current" and "GETINFO onions/detached" to get - information about hidden services created via the controller. - Part of ticket 6411. diff --git a/changes/geoip-april2015 b/changes/geoip-april2015 deleted file mode 100644 index 7db38ed..0000000 --- a/changes/geoip-april2015 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features: - - Update geoip to the April 8 2015 Maxmind GeoLite2 Country database. - diff --git a/changes/geoip6-april2015 b/changes/geoip6-april2015 deleted file mode 100644 index 241c911..0000000 --- a/changes/geoip6-april2015 +++ /dev/null @@ -1,2 +0,0 @@ - o Minor features: - - Update geoip6 to the April 8 2015 Maxmind GeoLite2 Country database. diff --git a/changes/no_digests b/changes/no_digests deleted file mode 100644 index 1327ac3..0000000 --- a/changes/no_digests +++ /dev/null @@ -1,5 +0,0 @@ - o Removed features: - - Remove the undocumented "--digests" command-line option. It - complicated our build process, caused subtle build issues - on multiple platforms, and is now redundant since we started - including git version identifiers. Closes ticket 14742. diff --git a/changes/remove_old_version_checks b/changes/remove_old_version_checks deleted file mode 100644 index fe4dab9..0000000 --- a/changes/remove_old_version_checks +++ /dev/null @@ -1,5 +0,0 @@ - o Removed features: - - Tor no longer contains workarounds for stat files generated by - super-old versions of Tor that didn't choose guards sensibly. - - Tor no longer contains checks for ancient directory cache versions - that didn't know about microdescriptors. diff --git a/changes/test-memwipe b/changes/test-memwipe deleted file mode 100644 index 04a21f7..0000000 --- a/changes/test-memwipe +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - Add a test to verify that the compiler does not eliminate our - memwipe() implementation. Closes ticket 15377. diff --git a/changes/ticket14710 b/changes/ticket14710 deleted file mode 100644 index 2b6cb20..0000000 --- a/changes/ticket14710 +++ /dev/null @@ -1,10 +0,0 @@ - o Code simplification and refactoring: - - Move the hacky fallback code out of get_interface_address6() - into separate function and get it covered with unit-tests. Resolves - ticket 14710. - - o Minor bugfixes: - - When attempting to use fallback technique for network interface - lookup, disregard loopback and multicast addresses since they are - unsuitable for public communications. - diff --git a/changes/ticket14840 b/changes/ticket14840 deleted file mode 100644 index a2103f2..0000000 --- a/changes/ticket14840 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features: - - Add DirAuthority lines for default directory authorities to output - of the GETINFO config/defaults controller command if not already - present. Implements ticket 14840. - diff --git a/changes/ticket14845 b/changes/ticket14845 deleted file mode 100644 index d771f88..0000000 --- a/changes/ticket14845 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (controller) - - Controllers can now use GETINFO hs/client/desc/id/... to - retrieve items from the client's hidden service descriptor - cache. Closes ticket 14845. diff --git a/changes/ticket14847 b/changes/ticket14847 deleted file mode 100644 index f519db7..0000000 --- a/changes/ticket14847 +++ /dev/null @@ -1,3 +0,0 @@ - o Major features (controller): - - New HSFETCH command to launch a request for a hidden service descriptor. - Closes ticket 14847. diff --git a/changes/ticket15024 b/changes/ticket15024 deleted file mode 100644 index 9081771..0000000 --- a/changes/ticket15024 +++ /dev/null @@ -1,4 +0,0 @@ - o Documentation: - - Improve the layout and formatting of ./configure --help messages. - Closes ticket 15024. Patch from "cypherpunks". - diff --git a/changes/ticket15431 b/changes/ticket15431 deleted file mode 100644 index ea6821a..0000000 --- a/changes/ticket15431 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (testing): - - Add unit tests for control_event_is_interesting(). - Add a compile-time check that the number of events doesn't exceed - the capacity of control_event_t.event_mask. - Closes ticket 15431, checks for bugs similar to 13085. - Patch by "teor". diff --git a/changes/ticket15542 b/changes/ticket15542 deleted file mode 100644 index fcf293e..0000000 --- a/changes/ticket15542 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (command-line interface): - - Make --hash-password imply --hush to prevent unnecessary noise. Closes - ticket 15542. diff --git a/changes/ticket8766 b/changes/ticket8766 deleted file mode 100644 index 33bfc33..0000000 --- a/changes/ticket8766 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor features: - - Recover better when our clock jumps back many hours, like might - happen for Tails or Whonix users who start with a very wrong - hardware clock, use Tor to discover a more accurate time, and then - fix their clock. Resolves part of ticket 8766. - [I'd call this a major feature if it actually fixed all of the issues.] -

1 0

[tor/master] reformat 0.2.7.1-alpha changelog
by nickm＠torproject.org 30 Apr '15

30 Apr '15

commit 411049d0d44963b8d9ec6f96c8dc62a106d6cc30 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Apr 30 15:30:20 2015 -0400 reformat 0.2.7.1-alpha changelog --- ChangeLog | 247 ++++++++++++++++++++++++++++++------------------------------- 1 file changed, 121 insertions(+), 126 deletions(-) diff --git a/ChangeLog b/ChangeLog index 6a86744..250fb2e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,67 +1,94 @@ Changes in version 0.2.7.1-alpha - 2015-05-?? Tor 0.2.7.1-alpha is the first alpha release in its series. + o New system requirements: + - Tor no longer includes workarounds for Libevent versions before + 1.3e. Libevent 2.0 or later is recommended. Closes ticket 15248. + o Major features (controller): - Add the ADD_ONION and DEL_ONION commands that allows the creation and management of hidden services via the controller. Closes ticket 6411. - New "GETINFO onions/current" and "GETINFO onions/detached" to get - information about hidden services created via the controller. - Part of ticket 6411. - - New HSFETCH command to launch a request for a hidden service descriptor. - Closes ticket 14847. + information about hidden services created via the controller. Part + of ticket 6411. + - New HSFETCH command to launch a request for a hidden service + descriptor. Closes ticket 14847. o Major bugfixes (hidden services): - - Revert commit that made directory authority assign the HSDir flag to - relay without a DirPort which is bad because relay can't handle + - Revert commit that made directory authority assign the HSDir flag + to relay without a DirPort which is bad because relay can't handle BEGIN_DIR cells. Fixes bug 15850; bugfix on tor-0.2.6.3-alpha. - o Minor features (HS popularity countermeasure): - - To avoid leaking HS popularity, don't cycle the introduction point - when we've handled a fixed number of INTRODUCE2 cells but instead - cycle it when a random value of introductions is reached thus making - it more difficult for an attacker to find out the amount of clients - that has passed through the introduction point for a specific HS. - Closes ticket 15745. + o Minor features (clock-jump tolerance): + - Recover better when our clock jumps back many hours, like might + happen for Tails or Whonix users who start with a very wrong + hardware clock, use Tor to discover a more accurate time, and then + fix their clock. Resolves part of ticket 8766. [I'd call this a + major feature if it actually fixed all of the issues.] o Minor features (command-line interface): - - Make --hash-password imply --hush to prevent unnecessary noise. Closes - ticket 15542. + - Make --hash-password imply --hush to prevent unnecessary noise. + Closes ticket 15542. + - Print a warning whenever we find a relative file path being used + as torrc option. Resolves issue 14018. + - The "--hash-password" option now implies "--hush" to avoid + needless noise. Closes ticket 15542. Patch from "cypherpunks". + + o Minor features (controller): + - Controllers can now use GETINFO hs/client/desc/id/... to retrieve + items from the client's hidden service descriptor cache. Closes + ticket 14845. - o Minor features (controller) - - Controllers can now use GETINFO hs/client/desc/id/... to - retrieve items from the client's hidden service descriptor - cache. Closes ticket 14845. + o Minor features (controller): + - Add DirAuthority lines for default directory authorities to output + of the GETINFO config/defaults controller command if not already + present. Implements ticket 14840. + - Implement a new controller command "status/fresh-relay-descs" to + fetch a descriptor/extrainfo pair that was generated on demand + just for the controller's use. Implements ticket 14784. o Minor features (DoS-resistance): - Make it harder for attackers to overwhelm hidden services with introductions, by blocking multiple introduction requests on the same circuit. Resolves ticket 15515. + o Minor features (geoip): + - Update geoip to the April 8 2015 Maxmind GeoLite2 Country database. + - Update geoip6 to the April 8 2015 Maxmind GeoLite2 + Country database. + + o Minor features (HS popularity countermeasure): + - To avoid leaking HS popularity, don't cycle the introduction point + when we've handled a fixed number of INTRODUCE2 cells but instead + cycle it when a random value of introductions is reached thus + making it more difficult for an attacker to find out the amount of + clients that has passed through the introduction point for a + specific HS. Closes ticket 15745. + o Minor features (logging): - Include the Tor version in all LD_BUG log messages, since people tend to cut and paste those into the bugtracker. Implements ticket 15026. o Minor features (pluggable transports): - - When launching managed pluggable transports, setup a valid open stdin - in the child process that can be used to detect if tor has terminated. - The "TOR_PT_EXIT_ON_STDIN_CLOSE" enviornment variable can be used by - implementations to detect this new behavior. Resolves ticket 15435. + - When launching managed pluggable transports, setup a valid open + stdin in the child process that can be used to detect if tor has + terminated. The "TOR_PT_EXIT_ON_STDIN_CLOSE" enviornment variable + can be used by implementations to detect this new behavior. + Resolves ticket 15435. - When launching managed pluggable transports on linux systems, - attempt to have the kernel deliver a SIGTERM on tor exit if - the pluggable transport process is still running. Resolves + attempt to have the kernel deliver a SIGTERM on tor exit if the + pluggable transport process is still running. Resolves ticket 15471. - o Minor features (testing): - - Add make rule `check-changes` to verify the format of changes files. - Closes ticket 15180. - - Add unit tests for control_event_is_interesting(). - Add a compile-time check that the number of events doesn't exceed - the capacity of control_event_t.event_mask. - Closes ticket 15431, checks for bugs similar to 13085. - Patch by "teor". + - Add make rule `check-changes` to verify the format of changes + files. Closes ticket 15180. + - Add unit tests for control_event_is_interesting(). Add a compile- + time check that the number of events doesn't exceed the capacity + of control_event_t.event_mask. Closes ticket 15431, checks for + bugs similar to 13085. Patch by "teor". - Commandline argument tests moved to Stem. Resolves ticket 14806. - Integrate the ntor, backtrace and zero lengths keys tests into the automake test suite. Closes ticket 15344. @@ -73,60 +100,35 @@ Changes in version 0.2.7.1-alpha - 2015-05-?? - Add a test to verify that the compiler does not eliminate our memwipe() implementation. Closes ticket 15377. - o Minor features (controller): - - Add DirAuthority lines for default directory authorities to output - of the GETINFO config/defaults controller command if not already - present. Implements ticket 14840. - - Implement a new controller command "status/fresh-relay-descs" to - fetch a descriptor/extrainfo pair that was generated on demand - just for the controller's use. Implements ticket 14784. - - o Minor features (command-line interface): - - Print a warning whenever we find a relative - file path being used as torrc option. Resolves issue 14018. - - The "--hash-password" option now implies "--hush" to avoid needless - noise. Closes ticket 15542. Patch from "cypherpunks". - - o Minor features (clock-jump tolerance): - - Recover better when our clock jumps back many hours, like might - happen for Tails or Whonix users who start with a very wrong - hardware clock, use Tor to discover a more accurate time, and then - fix their clock. Resolves part of ticket 8766. - [I'd call this a major feature if it actually fixed all of the issues.] - - o Minor features (geoip): - - Update geoip to the April 8 2015 Maxmind GeoLite2 Country database. - - Update geoip6 to the April 8 2015 Maxmind GeoLite2 Country database. - - o Minor bugfixes (statistics): - - Disregard the ConnDirectionStatistics torrc options when Tor is - not a relay since in that mode of operation no sensible data is - being collected and because Tor might run into measurement hiccups - when running as a client for some time, then becoming a relay. Fixes - bug 15604; bugfix on 0.2.2.35. - o Minor bugfixes (build): - - Improve out-of-tree builds by making non-standard rules work and clean up - additional files and directories. Fixes bug 15053; bugfix on - 0.2.7.0-alpha. + - Improve out-of-tree builds by making non-standard rules work and + clean up additional files and directories. Fixes bug 15053; bugfix + on 0.2.7.0-alpha. o Minor bugfixes (command-line interface): - When "--quiet" is provided along with "--validate-config", do not - write anything to stdout on success. Fixes bug 14994; bugfix on - 0.2.3.3-alpha. + write anything to stdout on success. Fixes bug 14994; bugfix + on 0.2.3.3-alpha. - When complaining about bad arguments to "--dump-config", use stderr, not stdout. o Minor bugfixes (configuration, unit tests): - Only add the default fallback directories when the DirAuthorities, AlternateDirAuthority, and FallbackDir directory config options - are set to their defaults. - The default fallback directory list is currently empty, this fix - will only change tor's behaviour when it has default fallback - directories. - Includes unit tests for consider_adding_dir_servers(). - Fixes bug 15642; bugfix on 90f6071d8dc0 in 0.2.4.7-alpha. - Patch by "teor". + are set to their defaults. The default fallback directory list is + currently empty, this fix will only change tor's behaviour when it + has default fallback directories. Includes unit tests for + consider_adding_dir_servers(). Fixes bug 15642; bugfix on + 90f6071d8dc0 in 0.2.4.7-alpha. Patch by "teor". + + o Minor bugfixes (correctness): + - Remove side-effects from tor_assert() calls. This was harmless, + because we never disable assertions, but it is bad style and + unnecessary. Fixes bug 15211; bugfix on 0.2.5.5, 0.2.2.36, + and 0.2.0.10. + - For correctness, avoid modifying a constant string in + handle_control_postdescriptor. Fixes bug 15546; bugfix + on 0.1.1.16-rc. o Minor bugfixes (hidden service): - Remove an extraneous newline character from the end of hidden @@ -135,61 +137,55 @@ Changes in version 0.2.7.1-alpha - 2015-05-?? o Minor bugfixes (interface): - Print usage information for --dump-config when it is used without an argument. Also, fix the error message to use different wording - and add newline at the end. Fixes bug 15541; bugfix on 0.2.5.1-alpha. + and add newline at the end. Fixes bug 15541; bugfix + on 0.2.5.1-alpha. o Minor bugfixes (logs): - When building Tor under Clang, do not include an extra set of - parentheses in log messages that include function names. - Fixes bug 15269; bugfix on every released version of Tor when - compiled with recent enough Clang. - - o Minor bugfixes (test networks) - - When self-testing reachability, use ExtendAllowPrivateAddresses - to determine if local/private addresses imply reachability. - The previous fix used TestingTorNetwork, which implies + parentheses in log messages that include function names. Fixes bug + 15269; bugfix on every released version of Tor when compiled with + recent enough Clang. + + o Minor bugfixes (network): + - When attempting to use fallback technique for network interface + lookup, disregard loopback and multicast addresses since they are + unsuitable for public communications. + + o Minor bugfixes (statistics): + - Disregard the ConnDirectionStatistics torrc options when Tor is + not a relay since in that mode of operation no sensible data is + being collected and because Tor might run into measurement hiccups + when running as a client for some time, then becoming a relay. + Fixes bug 15604; bugfix on 0.2.2.35. + + o Minor bugfixes (test networks): + - When self-testing reachability, use ExtendAllowPrivateAddresses to + determine if local/private addresses imply reachability. The + previous fix used TestingTorNetwork, which implies ExtendAllowPrivateAddresses, but this excluded rare configs where ExtendAllowPrivateAddresses is set but TestingTorNetwork is not. - Fixes bug 15771; bugfix on 0.2.6.1-alpha. - Patch by "teor", issue discovered by CJ Ess. + Fixes bug 15771; bugfix on 0.2.6.1-alpha. Patch by "teor", issue + discovered by CJ Ess. o Minor bugfixes (testing): - - Set the severity correctly when testing get_interface_addresses_ifaddrs() - and get_interface_addresses_win32(), so that the tests fail gracefully + - Set the severity correctly when testing + get_interface_addresses_ifaddrs() and + get_interface_addresses_win32(), so that the tests fail gracefully instead of triggering an assertion. Fixes bug 15759; bugfix on 0.2.6.3-alpha. Reported by Nicolas Derive. - - Check for matching value in server response in ntor_ref.py. - Fixes bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed + - Check for matching value in server response in ntor_ref.py. Fixes + bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed by "joelanders". - o Minor bugfixes (correctness): - - Remove side-effects from tor_assert() calls. This was harmless, - because we never disable assertions, but it is bad style and - unnecessary. Fixes bug 15211; bugfix on 0.2.5.5, 0.2.2.36, and - 0.2.0.10. - - For correctness, avoid modifying a constant string in - handle_control_postdescriptor. Fixes bug 15546; bugfix on - 0.1.1.16-rc. - - o Minor bugfixes (network): - - When attempting to use fallback technique for network interface - lookup, disregard loopback and multicast addresses since they are - unsuitable for public communications. - o Code simplification and refactoring: - - Move the hacky fallback code out of get_interface_address6() - into separate function and get it covered with unit-tests. Resolves + - Move the hacky fallback code out of get_interface_address6() into + separate function and get it covered with unit-tests. Resolves ticket 14710. - Refactor hidden service client-side cache lookup to intelligently report its various failure cases, and disentangle failure cases involving a lack of introduction points. Closes ticket 14391. - - Use our own Base64 encoder instead of OpenSSL's, to allow more control - over the output. Part of ticket 15652. - - o Removed code: - - Remove `USE_OPENSSL_BASE64` and the corresponding fallback code and - always use the internal Base64 decoder. The internal decoder has been - part of tor since tor-0.2.0.10-alpha, and no one should be using the - OpenSSL one. Part of ticket 15652. + - Use our own Base64 encoder instead of OpenSSL's, to allow more + control over the output. Part of ticket 15652. o Documentation: - Improve the descriptions of statistics-related torrc options in @@ -201,22 +197,21 @@ Changes in version 0.2.7.1-alpha - 2015-05-?? Previously, we had used "router descriptor", "server descriptor", and "relay descriptor" interchangeably. Part of ticket 14987. - o New system requirements: - - Tor no longer includes workarounds for Libevent versions before 1.3e. - Libevent 2.0 or later is recommended. Closes ticket 15248. - o Removed code: + - Remove `USE_OPENSSL_BASE64` and the corresponding fallback code + and always use the internal Base64 decoder. The internal decoder + has been part of tor since tor-0.2.0.10-alpha, and no one should + be using the OpenSSL one. Part of ticket 15652. - Remove the 'tor_strclear()' function; use memwipe() instead. Closes ticket 14922. o Removed features: - - Remove the (seldom-used) DynamicDHGroups feature. For - anti-fingerprinting we now recommend pluggable transports; for - forward-secrecy in TLS, we now use the P-256 group. - Closes ticket 13736. + - Remove the (seldom-used) DynamicDHGroups feature. For anti- + fingerprinting we now recommend pluggable transports; for forward- + secrecy in TLS, we now use the P-256 group. Closes ticket 13736. - Remove the undocumented "--digests" command-line option. It - complicated our build process, caused subtle build issues - on multiple platforms, and is now redundant since we started + complicated our build process, caused subtle build issues on + multiple platforms, and is now redundant since we started including git version identifiers. Closes ticket 14742. - Tor no longer contains workarounds for stat files generated by super-old versions of Tor that didn't choose guards sensibly.

1 0

[tor/master] whitespace fixes
by nickm＠torproject.org 30 Apr '15

30 Apr '15

commit e8814816c752846d72cf9a55c6f785f3c483e3e2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Apr 30 13:38:39 2015 -0400 whitespace fixes --- src/or/control.c | 8 +++----- src/or/rendclient.c | 6 +++--- src/or/rendcommon.c | 7 ++++--- 3 files changed, 10 insertions(+), 11 deletions(-) diff --git a/src/or/control.c b/src/or/control.c index 4578f2d..950e989 100644 --- a/src/or/control.c +++ b/src/or/control.c @@ -3414,13 +3414,13 @@ handle_control_hsfetch(control_connection_t *conn, uint32_t len, * always send a fetch command. */ rend_client_fetch_v2_desc(rend_query, hsdirs); -done: + done: SMARTLIST_FOREACH(args, char *, cp, tor_free(cp)); smartlist_free(args); /* Contains data pointer that we don't own thus no cleanup. */ smartlist_free(hsdirs); rend_data_free(rend_query); -exit: + exit: return 0; } @@ -5753,7 +5753,6 @@ node_describe_longname_by_id,(const char *id_digest)) return longname; } - /** Return either the onion address if the given pointer is a non empty * string else the unknown string. */ static const char * @@ -5773,11 +5772,10 @@ rend_hsaddress_str_or_unknown(const char *onion_address) /* All checks are good so return the given onion address. */ str_ret = onion_address; -end: + end: return str_ret; } - /** send HS_DESC requested event. * * <b>rend_query</b> is used to fetch requested onion address and auth type. diff --git a/src/or/rendclient.c b/src/or/rendclient.c index 834759c..d0c4b87 100644 --- a/src/or/rendclient.c +++ b/src/or/rendclient.c @@ -780,7 +780,7 @@ fetch_v2_desc_by_descid(const char *desc_id, const rend_data_t *rend_query, /* Everything went well. */ ret = 0; -end: + end: return ret; } @@ -847,7 +847,7 @@ fetch_v2_desc_by_addr(rend_data_t *query, smartlist_t *hsdirs) "we already tried them all unsuccessfully."); ret = 0; -end: + end: memwipe(descriptor_id, 0, sizeof(descriptor_id)); return ret; } @@ -877,7 +877,7 @@ rend_client_fetch_v2_desc(rend_data_t *query, smartlist_t *hsdirs) goto error; } -error: + error: return ret; } diff --git a/src/or/rendcommon.c b/src/or/rendcommon.c index 5fe00da..9384220 100644 --- a/src/or/rendcommon.c +++ b/src/or/rendcommon.c @@ -934,7 +934,7 @@ rend_valid_descriptor_id(const char *query) return 1; -invalid: + invalid: return 0; } @@ -1429,7 +1429,7 @@ compute_desc_id(rend_data_t *rend_data) } } -end: + end: return ret; } @@ -1498,7 +1498,8 @@ rend_data_client_create(const char *onion_address, const char *desc_id, return rend_data; -error: + error: rend_data_free(rend_data); return NULL; } +

1 0

[tor/master] Use rend_data_client/service_create() in code
by nickm＠torproject.org 30 Apr '15

30 Apr '15

commit 9a364026d314bfe76410318849e179dbd2e0b34d Author: David Goulet <dgoulet(a)ev0ke.net> Date: Mon Apr 27 15:08:31 2015 -0400 Use rend_data_client/service_create() in code Every callsite that use to allocate a rend_data_t object now use the rend_data_client/service_create() function. Signed-off-by: David Goulet <dgoulet(a)ev0ke.net> --- src/or/connection_edge.c | 34 ++++++++++++++++++---------------- src/or/control.c | 28 ++++++++++++---------------- src/or/rendservice.c | 19 ++++++++----------- 3 files changed, 38 insertions(+), 43 deletions(-) diff --git a/src/or/connection_edge.c b/src/or/connection_edge.c index 670905f..4e1c7ca 100644 --- a/src/or/connection_edge.c +++ b/src/or/connection_edge.c @@ -1499,12 +1499,27 @@ connection_ap_handshake_rewrite_and_attach(entry_connection_t *conn, return -1; } + /* Look up if we have client authorization configured for this hidden + * service. If we do, associate it with the rend_data. */ + rend_service_authorization_t *client_auth = + rend_client_lookup_service_authorization(socks->address); + + const char *cookie = NULL; + rend_auth_type_t auth_type = REND_NO_AUTH; + if (client_auth) { + log_info(LD_REND, "Using previously configured client authorization " + "for hidden service request."); + auth_type = client_auth->auth_type; + cookie = client_auth->descriptor_cookie; + } + /* Fill in the rend_data field so we can start doing a connection to * a hidden service. */ rend_data_t *rend_data = ENTRY_TO_EDGE_CONN(conn)->rend_data = - tor_malloc_zero(sizeof(rend_data_t)); - strlcpy(rend_data->onion_address, socks->address, - sizeof(rend_data->onion_address)); + rend_data_client_create(socks->address, NULL, cookie, auth_type); + if (rend_data == NULL) { + return -1; + } log_info(LD_REND,"Got a hidden service request for ID '%s'", safe_str_client(rend_data->onion_address)); @@ -1547,19 +1562,6 @@ connection_ap_handshake_rewrite_and_attach(entry_connection_t *conn, return 0; } - /* Look up if we have client authorization configured for this hidden - * service. If we do, associate it with the rend_data. */ - rend_service_authorization_t *client_auth = - rend_client_lookup_service_authorization( - rend_data->onion_address); - if (client_auth) { - log_info(LD_REND, "Using previously configured client authorization " - "for hidden service request."); - memcpy(rend_data->descriptor_cookie, - client_auth->descriptor_cookie, REND_DESC_COOKIE_LEN); - rend_data->auth_type = client_auth->auth_type; - } - /* We have the descriptor so launch a connection to the HS. */ base_conn->state = AP_CONN_STATE_CIRCUIT_WAIT; log_info(LD_REND, "Descriptor is here. Great."); diff --git a/src/or/control.c b/src/or/control.c index 7c8a6c4..4578f2d 100644 --- a/src/or/control.c +++ b/src/or/control.c @@ -3389,25 +3389,21 @@ handle_control_hsfetch(control_connection_t *conn, uint32_t len, } } - rend_query = tor_malloc_zero(sizeof(*rend_query)); - - if (hsaddress) { - strncpy(rend_query->onion_address, hsaddress, - sizeof(rend_query->onion_address)); - } else if (desc_id) { - /* Using a descriptor ID, we force the user to provide at least one - * hsdir server using the SERVER= option. */ - if (!hsdirs || !smartlist_len(hsdirs)) { + rend_query = rend_data_client_create(hsaddress, desc_id, NULL, + REND_NO_AUTH); + if (rend_query == NULL) { + connection_printf_to_buf(conn, "551 Error creating the HS query\r\n"); + goto done; + } + + /* Using a descriptor ID, we force the user to provide at least one + * hsdir server using the SERVER= option. */ + if (desc_id && (!hsdirs || !smartlist_len(hsdirs))) { connection_printf_to_buf(conn, "512 %s option is required\r\n", opt_server); goto done; - } - memcpy(rend_query->descriptor_id, desc_id, - sizeof(rend_query->descriptor_id)); - } else { - /* We can't get in here because of the first argument check. */ - tor_assert(0); } + /* We are about to trigger HSDir fetch so send the OK now because after * that 650 event(s) are possible so better to have the 250 OK before them * to avoid out of order replies. */ @@ -3423,7 +3419,7 @@ done: smartlist_free(args); /* Contains data pointer that we don't own thus no cleanup. */ smartlist_free(hsdirs); - tor_free(rend_query); + rend_data_free(rend_query); exit: return 0; } diff --git a/src/or/rendservice.c b/src/or/rendservice.c index f257f6e..eb94202 100644 --- a/src/or/rendservice.c +++ b/src/or/rendservice.c @@ -1735,13 +1735,11 @@ rend_service_introduce(origin_circuit_t *circuit, const uint8_t *request, hexcookie, serviceid); tor_assert(launched->build_state); /* Fill in the circuit's state. */ - launched->rend_data = tor_malloc_zero(sizeof(rend_data_t)); - memcpy(launched->rend_data->rend_pk_digest, - circuit->rend_data->rend_pk_digest, - DIGEST_LEN); - memcpy(launched->rend_data->rend_cookie, parsed_req->rc, REND_COOKIE_LEN); - strlcpy(launched->rend_data->onion_address, service->service_id, - sizeof(launched->rend_data->onion_address)); + + launched->rend_data = + rend_data_service_create(service->service_id, + circuit->rend_data->rend_pk_digest, + parsed_req->rc, service->auth_type); launched->build_state->service_pending_final_cpath_ref = tor_malloc_zero(sizeof(crypt_path_reference_t)); @@ -2713,10 +2711,9 @@ rend_service_launch_establish_intro(rend_service_t *service, intro->extend_info = extend_info_dup(launched->build_state->chosen_exit); } - launched->rend_data = tor_malloc_zero(sizeof(rend_data_t)); - strlcpy(launched->rend_data->onion_address, service->service_id, - sizeof(launched->rend_data->onion_address)); - memcpy(launched->rend_data->rend_pk_digest, service->pk_digest, DIGEST_LEN); + launched->rend_data = rend_data_service_create(service->service_id, + service->pk_digest, NULL, + service->auth_type); launched->intro_key = crypto_pk_dup_key(intro->intro_key); if (launched->base_.state == CIRCUIT_STATE_OPEN) rend_service_intro_has_opened(launched);

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits April 2015