July 2015 - tor-commits - lists.torproject.org

[tor/release-0.2.6] Merge branch 'maint-0.2.6' into release-0.2.6
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 9aa7ebca2903ba666a1c42c8902265a94caeff0d Merge: 58c51dc 9d1801b Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 16:37:33 2015 -0400 Merge branch 'maint-0.2.6' into release-0.2.6 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --cc src/win32/orconfig.h index 14c0f70,82e7e65..0bdaf92 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@@ -232,9 -232,10 +232,9 @@@ #define USING_TWOS_COMPLEMENT /* Version number of package */ - #define VERSION "0.2.6.10" + #define VERSION "0.2.6.10-dev" - #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR #define RSHIFT_DOES_SIGN_EXTEND

1 0

[tor/maint-0.2.6] Bump maint-0.2.6 to 0.2.6.10-dev
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 9d1801b4b96d205d1896db754efbd54ecdf590d2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 16:37:20 2015 -0400 Bump maint-0.2.6 to 0.2.6.10-dev --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index 9ba67ad..3654024 100644 --- a/configure.ac +++ b/configure.ac @@ -3,7 +3,7 @@ dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson dnl Copyright (c) 2007-2015, The Tor Project, Inc. dnl See LICENSE for licensing information -AC_INIT([tor],[0.2.6.10]) +AC_INIT([tor],[0.2.6.10-dev]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) AM_INIT_AUTOMAKE diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index b88f092..4143cf4 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.6.10" +!define VERSION "0.2.6.10-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index d8e5245..82e7e65 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -232,7 +232,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.6.10" +#define VERSION "0.2.6.10-dev"

1 0

[tor/master] Forward-port the changelog and releasenotes
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 062497f9e7d9806a99f15e44aeaf89a3a5443b50 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 16:34:30 2015 -0400 Forward-port the changelog and releasenotes --- ChangeLog | 47 ++++++++++++++++++++++++++++++++++++++++++++++- ReleaseNotes | 43 +++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 89 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index a060eea..aa53893 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,49 @@ -Changes in version 0.2.7.2-alpha - 2015-0?-?? +Changes in version 0.2.7.2-alpha - 2015-07-?? + + +Changes in version 0.2.6.10 - 2015-07-12 + Tor version 0.2.6.10 fixes some significant stability and hidden + service client bugs, bulletproofs the cryptography init process, and + fixes a bug when using the sandbox code with some older versions of + Linux. Everyone running an older version, especially an older version + of 0.2.6, should upgrade. + + o Major bugfixes (hidden service clients, stability): + - Stop refusing to store updated hidden service descriptors on a + client. This reverts commit 9407040c59218 (which indeed fixed bug + 14219, but introduced a major hidden service reachability + regression detailed in bug 16381). This is a temporary fix since + we can live with the minor issue in bug 14219 (it just results in + some load on the network) but the regression of 16381 is too much + of a setback. First-round fix for bug 16381; bugfix + on 0.2.6.3-alpha. + + o Major bugfixes (stability): + - Stop crashing with an assertion failure when parsing certain kinds + of malformed or truncated microdescriptors. Fixes bug 16400; + bugfix on 0.2.6.1-alpha. Found by "torkeln"; fix based on a patch + by "cypherpunks_backup". + - Stop random client-side assertion failures that could occur when + connecting to a busy hidden service, or connecting to a hidden + service while a NEWNYM is in progress. Fixes bug 16013; bugfix + on 0.1.0.1-rc. + + o Minor features (geoip): + - Update geoip to the June 3 2015 Maxmind GeoLite2 Country database. + - Update geoip6 to the June 3 2015 Maxmind GeoLite2 Country database. + + o Minor bugfixes (crypto error-handling): + - Check for failures from crypto_early_init, and refuse to continue. + A previous typo meant that we could keep going with an + uninitialized crypto library, and would have OpenSSL initialize + its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced + when implementing ticket 4900. Patch by "teor". + + o Minor bugfixes (Linux seccomp2 sandbox): + - Allow pipe() and pipe2() syscalls in the seccomp2 sandbox: we need + these when eventfd2() support is missing. Fixes bug 16363; bugfix + on 0.2.6.3-alpha. Patch from "teor". + Changes in version 0.2.6.9 - 2015-06-11 Tor 0.2.6.9 fixes a regression in the circuit isolation code, increases the diff --git a/ReleaseNotes b/ReleaseNotes index d9ddac0..44cda49 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,49 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.2.6.10 - 2015-07-12 + Tor version 0.2.6.10 fixes some significant stability and hidden + service client bugs, bulletproofs the cryptography init process, and + fixes a bug when using the sandbox code with some older versions of + Linux. Everyone running an older version, especially an older version + of 0.2.6, should upgrade. + + o Major bugfixes (hidden service clients, stability): + - Stop refusing to store updated hidden service descriptors on a + client. This reverts commit 9407040c59218 (which indeed fixed bug + 14219, but introduced a major hidden service reachability + regression detailed in bug 16381). This is a temporary fix since + we can live with the minor issue in bug 14219 (it just results in + some load on the network) but the regression of 16381 is too much + of a setback. First-round fix for bug 16381; bugfix + on 0.2.6.3-alpha. + + o Major bugfixes (stability): + - Stop crashing with an assertion failure when parsing certain kinds + of malformed or truncated microdescriptors. Fixes bug 16400; + bugfix on 0.2.6.1-alpha. Found by "torkeln"; fix based on a patch + by "cypherpunks_backup". + - Stop random client-side assertion failures that could occur when + connecting to a busy hidden service, or connecting to a hidden + service while a NEWNYM is in progress. Fixes bug 16013; bugfix + on 0.1.0.1-rc. + + o Minor features (geoip): + - Update geoip to the June 3 2015 Maxmind GeoLite2 Country database. + - Update geoip6 to the June 3 2015 Maxmind GeoLite2 Country database. + + o Minor bugfixes (crypto error-handling): + - Check for failures from crypto_early_init, and refuse to continue. + A previous typo meant that we could keep going with an + uninitialized crypto library, and would have OpenSSL initialize + its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced + when implementing ticket 4900. Patch by "teor". + + o Minor bugfixes (Linux seccomp2 sandbox): + - Allow pipe() and pipe2() syscalls in the seccomp2 sandbox: we need + these when eventfd2() support is missing. Fixes bug 16363; bugfix + on 0.2.6.3-alpha. Patch from "teor". + Changes in version 0.2.6.9 - 2015-06-11 Tor 0.2.6.9 fixes a regression in the circuit isolation code, increases the

1 0

[webwml/master] I just tagged 0.2.6.10
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 500d5318969a0259b61f0bbaa35382b8cddfa3f8 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 16:29:18 2015 -0400 I just tagged 0.2.6.10 --- Makefile | 2 +- include/versions.wmi | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index 68aae9e..72f919f 100644 --- a/Makefile +++ b/Makefile @@ -14,7 +14,7 @@ # branch to your personal webwml repository, open a trac ticket in the # website component, and set it to needs_review. -export STABLETAG=tor-0.2.6.9 +export STABLETAG=tor-0.2.6.10 export DEVTAG=tor-0.2.7.1-alpha WMLBASE=. diff --git a/include/versions.wmi b/include/versions.wmi index 6b1a34b..6ac2dc4 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,4 +1,4 @@ -<define-tag version-stable whitespace=delete>0.2.6.9</define-tag> +<define-tag version-stable whitespace=delete>0.2.6.10</define-tag> <define-tag version-alpha whitespace=delete>0.2.7.1-alpha</define-tag> <define-tag version-win32-stable whitespace=delete>0.2.6.9</define-tag>

1 0

[tor/release-0.2.6] Pick today as the release date; copy changes into ReleaseNotes
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 58c51dc6087b093690ab15b7cd0ce627a6115e80 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 16:14:43 2015 -0400 Pick today as the release date; copy changes into ReleaseNotes --- ChangeLog | 2 +- ReleaseNotes | 44 ++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 45 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 7f68e6b..ac52b2a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.2.6.10 - 2015-07-14 +Changes in version 0.2.6.10 - 2015-07-12 Tor version 0.2.6.10 fixes some significant stability and hidden service client bugs, bulletproofs the cryptography init process, and fixes a bug when using the sandbox code with some older versions of diff --git a/ReleaseNotes b/ReleaseNotes index c30fca0..38b9e5f 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -3,6 +3,50 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.2.6.10 - 2015-07-12 + Tor version 0.2.6.10 fixes some significant stability and hidden + service client bugs, bulletproofs the cryptography init process, and + fixes a bug when using the sandbox code with some older versions of + Linux. Everyone running an older version, especially an older version + of 0.2.6, should upgrade. + + o Major bugfixes (hidden service clients, stability): + - Stop refusing to store updated hidden service descriptors on a + client. This reverts commit 9407040c59218 (which indeed fixed bug + 14219, but introduced a major hidden service reachability + regression detailed in bug 16381). This is a temporary fix since + we can live with the minor issue in bug 14219 (it just results in + some load on the network) but the regression of 16381 is too much + of a setback. First-round fix for bug 16381; bugfix + on 0.2.6.3-alpha. + + o Major bugfixes (stability): + - Stop crashing with an assertion failure when parsing certain kinds + of malformed or truncated microdescriptors. Fixes bug 16400; + bugfix on 0.2.6.1-alpha. Found by "torkeln"; fix based on a patch + by "cypherpunks_backup". + - Stop random client-side assertion failures that could occur when + connecting to a busy hidden service, or connecting to a hidden + service while a NEWNYM is in progress. Fixes bug 16013; bugfix + on 0.1.0.1-rc. + + o Minor features (geoip): + - Update geoip to the June 3 2015 Maxmind GeoLite2 Country database. + - Update geoip6 to the June 3 2015 Maxmind GeoLite2 Country database. + + o Minor bugfixes (crypto error-handling): + - Check for failures from crypto_early_init, and refuse to continue. + A previous typo meant that we could keep going with an + uninitialized crypto library, and would have OpenSSL initialize + its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced + when implementing ticket 4900. Patch by "teor". + + o Minor bugfixes (Linux seccomp2 sandbox): + - Allow pipe() and pipe2() syscalls in the seccomp2 sandbox: we need + these when eventfd2() support is missing. Fixes bug 16363; bugfix + on 0.2.6.3-alpha. Patch from "teor". + + Changes in version 0.2.6.9 - 2015-06-11 Tor 0.2.6.9 fixes a regression in the circuit isolation code, increases the requirements for receiving an HSDir flag, and addresses some other small

1 0

[tor/release-0.2.6] Re-run format_changelog
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 3c4cbcb0733c063881dd1b4fc20eaebbf960c3a0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 16:07:53 2015 -0400 Re-run format_changelog --- ChangeLog | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 30344fa..7f68e6b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,10 +9,11 @@ Changes in version 0.2.6.10 - 2015-07-14 - Stop refusing to store updated hidden service descriptors on a client. This reverts commit 9407040c59218 (which indeed fixed bug 14219, but introduced a major hidden service reachability - regression detailed in bug 16381). This is a temporary fix since we - can live with the minor issue in bug 14219 (it just results in + regression detailed in bug 16381). This is a temporary fix since + we can live with the minor issue in bug 14219 (it just results in some load on the network) but the regression of 16381 is too much - of a setback. First-round fix for bug 16381; bugfix on 0.2.6.3-alpha. + of a setback. First-round fix for bug 16381; bugfix + on 0.2.6.3-alpha. o Major bugfixes (stability): - Stop crashing with an assertion failure when parsing certain kinds

1 0

[tor/release-0.2.6] Arma moved a paren into a better, but not grammatical, place. Fix that.
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 014f860205abfbbc2e7fe6afdaad2e77b631ed48 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 16:05:28 2015 -0400 Arma moved a paren into a better, but not grammatical, place. Fix that. According to all the usage guides I have, parentheses should contain the close-of-sentence punctuation only when the whole sentence is in parentheses. So you would write this sentence like this (because it's correct). (Does that make sense?) --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 981454b..30344fa 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,7 +9,7 @@ Changes in version 0.2.6.10 - 2015-07-14 - Stop refusing to store updated hidden service descriptors on a client. This reverts commit 9407040c59218 (which indeed fixed bug 14219, but introduced a major hidden service reachability - regression detailed in bug 16381.) This is a temporary fix since we + regression detailed in bug 16381). This is a temporary fix since we can live with the minor issue in bug 14219 (it just results in some load on the network) but the regression of 16381 is too much of a setback. First-round fix for bug 16381; bugfix on 0.2.6.3-alpha.

1 0

[tor/master] Okay, this time it was my fault
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 19f9803f8e56992d735d0faca88061d7d5cca07e Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 15:44:43 2015 -0400 Okay, this time it was my fault --- src/common/compat.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/common/compat.c b/src/common/compat.c index 12ad52d..07f011d 100644 --- a/src/common/compat.c +++ b/src/common/compat.c @@ -80,7 +80,7 @@ wint_t _getwch(void); #define WEOF (wchar_t)(0xFFFF) #endif #if defined(HAVE_DECL_SECUREZEROMEMORY) && !HAVE_DECL_SECUREZEROMEMORY -static void inline SecureZeroMemory(PVOID ptr, SIZE_T cnt) +static inline void SecureZeroMemory(PVOID ptr, SIZE_T cnt) { volatile char *vcptr = (volatile char*)ptr; while (cnt--)

1 0

[tor/master] Fine, mingw! fine! are you happy now??
by nickm＠torproject.org 12 Jul '15

12 Jul '15

commit 58cd21f6014a9d8dcd54669fb7fcc760b33ca6b2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jul 12 15:30:35 2015 -0400 Fine, mingw! fine! are you happy now?? --- src/common/compat.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/common/compat.c b/src/common/compat.c index 01eccac..12ad52d 100644 --- a/src/common/compat.c +++ b/src/common/compat.c @@ -80,8 +80,12 @@ wint_t _getwch(void); #define WEOF (wchar_t)(0xFFFF) #endif #if defined(HAVE_DECL_SECUREZEROMEMORY) && !HAVE_DECL_SECUREZEROMEMORY -#define SecureZeroMemory RtlSecureZeroMemory -PVOID WINAPI SecureZeroMemory(PVOID ptr, SIZE_T cnt); +static void inline SecureZeroMemory(PVOID ptr, SIZE_T cnt) +{ + volatile char *vcptr = (volatile char*)ptr; + while (cnt--) + *vcptr++ = 0; +} #endif #elif defined(HAVE_READPASSPHRASE_H) #include <readpassphrase.h>

1 0

[tor/release-0.2.6] tiny changelog updates
by arma＠torproject.org 12 Jul '15

12 Jul '15

commit 24f056c25d80029267e7b31f1b9190f2313e36c0 Author: Roger Dingledine <arma(a)torproject.org> Date: Sun Jul 12 15:24:48 2015 -0400 tiny changelog updates the only substantive one was moving a paren around in the #16381 entry. --- ChangeLog | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/ChangeLog b/ChangeLog index f13cf11..981454b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -8,22 +8,21 @@ Changes in version 0.2.6.10 - 2015-07-14 o Major bugfixes (hidden service clients, stability): - Stop refusing to store updated hidden service descriptors on a client. This reverts commit 9407040c59218 (which indeed fixed bug - 14219), but introduced a major hidden service reachability - regression detailed in bug 16381. This is a temporary fix since we + 14219, but introduced a major hidden service reachability + regression detailed in bug 16381.) This is a temporary fix since we can live with the minor issue in bug 14219 (it just results in some load on the network) but the regression of 16381 is too much - of a setback. - - First-round fix for bug 16381; bugfix on tor-0.2.6.3-alpha. + of a setback. First-round fix for bug 16381; bugfix on 0.2.6.3-alpha. o Major bugfixes (stability): - Stop crashing with an assertion failure when parsing certain kinds of malformed or truncated microdescriptors. Fixes bug 16400; bugfix on 0.2.6.1-alpha. Found by "torkeln"; fix based on a patch by "cypherpunks_backup". - - Stop random assertion failures that could occur when connecting to - a busy hidden service, or connecting to a hidden service while a - NEWNYM is in progress. Fixes bug 16013; bugfix on 0.1.0.1-rc. + - Stop random client-side assertion failures that could occur when + connecting to a busy hidden service, or connecting to a hidden + service while a NEWNYM is in progress. Fixes bug 16013; bugfix + on 0.1.0.1-rc. o Minor features (geoip): - Update geoip to the June 3 2015 Maxmind GeoLite2 Country database. @@ -34,7 +33,7 @@ Changes in version 0.2.6.10 - 2015-07-14 A previous typo meant that we could keep going with an uninitialized crypto library, and would have OpenSSL initialize its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced - when implementing 4900. Patch by "teor". + when implementing ticket 4900. Patch by "teor". o Minor bugfixes (Linux seccomp2 sandbox): - Allow pipe() and pipe2() syscalls in the seccomp2 sandbox: we need

1 0