September 2015 - tor-commits - lists.torproject.org

[tor/master] fold 17148 into changelog
by nickm＠torproject.org 24 Sep '15

24 Sep '15

commit 2a902ae5251005aa565fdbeb53f8a84d8d52616d Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Sep 24 15:31:50 2015 -0400 fold 17148 into changelog --- ChangeLog | 4 ++++ changes/testscripts | 6 ------ 2 files changed, 4 insertions(+), 6 deletions(-) diff --git a/ChangeLog b/ChangeLog index a4f04a7..67de1b8 100644 --- a/ChangeLog +++ b/ChangeLog @@ -254,6 +254,10 @@ Changes in version 0.2.7.3-rc - 2015-09-24 - Autodetect CHUTNEY_PATH if the chutney and Tor sources are side- by-side in the same parent directory. Closes ticket 16903. Patch by "teor". + - Use environment variables rather than autoconf substitutions to + send variables from the build system to the test scripts. This + change should be easier to maintain, and cause 'make distcheck' to + work better than before. Fixes bug 17148. - Add a new set of callgraph analysis scripts that use clang to produce a list of which Tor functions are reachable from which other Tor functions. We're planning to use these to help simplify diff --git a/changes/testscripts b/changes/testscripts deleted file mode 100644 index d3ac79f..0000000 --- a/changes/testscripts +++ /dev/null @@ -1,6 +0,0 @@ - o Testing: - - Use environment variables rather than autoconf substitutions to send - variables from the build system to the test scripts. This change should - be easier to maintain, and cause 'make distcheck' to work better than - before. Fixes bug 17148. -

1 0

[tor/master] Stop trying to generate test scripts via autoconf substitution.
by nickm＠torproject.org 24 Sep '15

24 Sep '15

commit eb2188168e2eca96692ec5f60f298f7bc287e990 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Sep 24 15:07:39 2015 -0400 Stop trying to generate test scripts via autoconf substitution. Use environment variables instead. This repairs 'make distcheck', which was running into trouble when it tried to chmod the generated scripts. Fixes 17148. --- changes/testscripts | 6 ++++++ configure.ac | 3 --- src/test/include.am | 18 +++++++++--------- src/test/test_bt.sh | 9 +++++++++ src/test/test_bt.sh.in | 9 --------- src/test/test_ntor.sh | 9 +++++++++ src/test/test_ntor.sh.in | 9 --------- src/test/test_zero_length_keys.sh | 10 ++++++++++ src/test/test_zero_length_keys.sh.in | 10 ---------- 9 files changed, 43 insertions(+), 40 deletions(-) diff --git a/changes/testscripts b/changes/testscripts new file mode 100644 index 0000000..d3ac79f --- /dev/null +++ b/changes/testscripts @@ -0,0 +1,6 @@ + o Testing: + - Use environment variables rather than autoconf substitutions to send + variables from the build system to the test scripts. This change should + be easier to maintain, and cause 'make distcheck' to work better than + before. Fixes bug 17148. + diff --git a/configure.ac b/configure.ac index 98f8d30..798de27 100644 --- a/configure.ac +++ b/configure.ac @@ -1647,9 +1647,6 @@ AC_CONFIG_FILES([ src/config/torrc.minimal scripts/maint/checkOptionDocs.pl scripts/maint/updateVersions.pl - src/test/test_zero_length_keys.sh - src/test/test_ntor.sh - src/test/test_bt.sh ]) if test x$asciidoc = xtrue && test "$ASCIIDOC" = "none" ; then diff --git a/src/test/include.am b/src/test/include.am index f7c0204..0b64299 100644 --- a/src/test/include.am +++ b/src/test/include.am @@ -1,4 +1,9 @@ +export PYTHON=@PYTHON@ +export SHELL=@SHELL@ +export abs_top_srcdir +export builddir + TESTSCRIPTS = src/test/test_zero_length_keys.sh if USEPYTHON @@ -16,18 +21,11 @@ TEST_CHUTNEY_FLAVORS_IPV6 = bridges+ipv6-min ipv6-exit-min TEST_CHUTNEY_FLAVORS_MIXED = mixed ### This is a lovely feature, but it requires automake >= 1.12, and Tor -### doesn't require that yet. Below is a kludge to work around. +### doesn't require that yet. ### # TEST_EXTENSIONS = .sh # SH_LOG_COMPILER = $(SHELL) -check-am: set-test-permissions - -.PHONY: set-test-permissions -set-test-permissions: $(TESTSCRIPTS) - $(AM_V_at)chmod u+x $(TESTSCRIPTS) - - noinst_PROGRAMS+= src/test/bench if UNITTESTS_ENABLED noinst_PROGRAMS+= \ @@ -194,4 +192,6 @@ EXTRA_DIST += \ src/test/ntor_ref.py \ src/test/slownacl_curve25519.py \ src/test/zero_length_keys.sh \ - src/test/test_keygen.sh + src/test/test_keygen.sh \ + src/test/test_zero_length_keys.sh \ + src/test/test_ntor.sh src/test/test_bt.sh diff --git a/src/test/test_bt.sh b/src/test/test_bt.sh new file mode 100755 index 0000000..15d16cb --- /dev/null +++ b/src/test/test_bt.sh @@ -0,0 +1,9 @@ +#!/bin/sh +# Test backtrace functionality. + +exitcode=0 + +${builddir:-.}/src/test/test-bt-cl assert | ${PYTHON:-python} "${abs_top_srcdir:-.}/src/test/bt_test.py" || exitcode=1 +${builddir:-.}/src/test/test-bt-cl crash | ${PYTHON:-python} "${abs_top_srcdir:-.}/src/test/bt_test.py" || exitcode=1 + +exit ${exitcode} diff --git a/src/test/test_bt.sh.in b/src/test/test_bt.sh.in deleted file mode 100644 index ca8be96..0000000 --- a/src/test/test_bt.sh.in +++ /dev/null @@ -1,9 +0,0 @@ -#!@SHELL@ -# Test backtrace functionality. - -exitcode=0 - -@builddir@/src/test/test-bt-cl assert | @PYTHON@ @abs_top_srcdir@/src/test/bt_test.py || exitcode=1 -@builddir@/src/test/test-bt-cl crash | @PYTHON@ @abs_top_srcdir@/src/test/bt_test.py || exitcode=1 - -exit ${exitcode} diff --git a/src/test/test_ntor.sh b/src/test/test_ntor.sh new file mode 100755 index 0000000..3d9ef7a --- /dev/null +++ b/src/test/test_ntor.sh @@ -0,0 +1,9 @@ +#!/bin/sh +# Validate Tor's ntor implementation. + +exitcode=0 + +${PYTHON:-python} "${abs_top_srcdir:-.}/src/test/ntor_ref.py" test-tor || exitcode=1 +${PYTHON:-python} "${abs_top_srcdir:-.}/src/test/ntor_ref.py" self-test || exitcode=1 + +exit ${exitcode} diff --git a/src/test/test_ntor.sh.in b/src/test/test_ntor.sh.in deleted file mode 100644 index be35384..0000000 --- a/src/test/test_ntor.sh.in +++ /dev/null @@ -1,9 +0,0 @@ -#!@SHELL@ -# Validate Tor's ntor implementation. - -exitcode=0 - -@PYTHON@ @abs_top_srcdir@/src/test/ntor_ref.py test-tor || exitcode=1 -@PYTHON@ @abs_top_srcdir@/src/test/ntor_ref.py self-test || exitcode=1 - -exit ${exitcode} diff --git a/src/test/test_zero_length_keys.sh b/src/test/test_zero_length_keys.sh new file mode 100755 index 0000000..5471cc9 --- /dev/null +++ b/src/test/test_zero_length_keys.sh @@ -0,0 +1,10 @@ +#!/bin/sh +# Check that tor regenerates keys when key files are zero-length + +exitcode=0 + +${SHELL:-sh} "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -z || exitcode=1 +${SHELL:-sh} "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -d || exitcode=1 +${SHELL:-sh} "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -e || exitcode=1 + +exit ${exitcode} diff --git a/src/test/test_zero_length_keys.sh.in b/src/test/test_zero_length_keys.sh.in deleted file mode 100644 index d1492d5..0000000 --- a/src/test/test_zero_length_keys.sh.in +++ /dev/null @@ -1,10 +0,0 @@ -#!@SHELL@ -# Check that tor regenerates keys when key files are zero-length - -exitcode=0 - -@SHELL@ @abs_top_srcdir@/src/test/zero_length_keys.sh "@builddir@/src/or/tor" -z || exitcode=1 -@SHELL@ @abs_top_srcdir@/src/test/zero_length_keys.sh "@builddir@/src/or/tor" -d || exitcode=1 -@SHELL@ @abs_top_srcdir@/src/test/zero_length_keys.sh "@builddir@/src/or/tor" -e || exitcode=1 - -exit ${exitcode}

1 0

[tor/master] Add more quotes in the test scripts
by nickm＠torproject.org 24 Sep '15

24 Sep '15

commit 85b65bf29f2245eb1363640cddf82e57ba5e7957 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Sep 24 15:25:53 2015 -0400 Add more quotes in the test scripts --- src/test/test_bt.sh | 4 ++-- src/test/test_ntor.sh | 4 ++-- src/test/test_zero_length_keys.sh | 6 +++--- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/src/test/test_bt.sh b/src/test/test_bt.sh index 15d16cb..56e6cc4 100755 --- a/src/test/test_bt.sh +++ b/src/test/test_bt.sh @@ -3,7 +3,7 @@ exitcode=0 -${builddir:-.}/src/test/test-bt-cl assert | ${PYTHON:-python} "${abs_top_srcdir:-.}/src/test/bt_test.py" || exitcode=1 -${builddir:-.}/src/test/test-bt-cl crash | ${PYTHON:-python} "${abs_top_srcdir:-.}/src/test/bt_test.py" || exitcode=1 +"${builddir:-.}/src/test/test-bt-cl" assert | "${PYTHON:-python}" "${abs_top_srcdir:-.}/src/test/bt_test.py" || exitcode=1 +"${builddir:-.}/src/test/test-bt-cl" crash | "${PYTHON:-python}" "${abs_top_srcdir:-.}/src/test/bt_test.py" || exitcode=1 exit ${exitcode} diff --git a/src/test/test_ntor.sh b/src/test/test_ntor.sh index 3d9ef7a..5081dab 100755 --- a/src/test/test_ntor.sh +++ b/src/test/test_ntor.sh @@ -3,7 +3,7 @@ exitcode=0 -${PYTHON:-python} "${abs_top_srcdir:-.}/src/test/ntor_ref.py" test-tor || exitcode=1 -${PYTHON:-python} "${abs_top_srcdir:-.}/src/test/ntor_ref.py" self-test || exitcode=1 +"${PYTHON:-python}" "${abs_top_srcdir:-.}/src/test/ntor_ref.py" test-tor || exitcode=1 +"${PYTHON:-python}" "${abs_top_srcdir:-.}/src/test/ntor_ref.py" self-test || exitcode=1 exit ${exitcode} diff --git a/src/test/test_zero_length_keys.sh b/src/test/test_zero_length_keys.sh index 5471cc9..f85edb6 100755 --- a/src/test/test_zero_length_keys.sh +++ b/src/test/test_zero_length_keys.sh @@ -3,8 +3,8 @@ exitcode=0 -${SHELL:-sh} "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -z || exitcode=1 -${SHELL:-sh} "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -d || exitcode=1 -${SHELL:-sh} "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -e || exitcode=1 +"${SHELL:-sh}" "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -z || exitcode=1 +"${SHELL:-sh}" "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -d || exitcode=1 +"${SHELL:-sh}" "${abs_top_srcdir:-.}/src/test/zero_length_keys.sh" "${builddir:-.}/src/or/tor" -e || exitcode=1 exit ${exitcode}

1 0

[tor-messenger-build/master] Update patch for Firefox bug 1151345
by sukhbir＠torproject.org 24 Sep '15

24 Sep '15

commit 333d233b4c2bbb96f6b415ffa43379aba25c11f8 Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Thu Sep 24 14:17:25 2015 -0400 Update patch for Firefox bug 1151345 --- ...refox-app-menu-sometimes-contains-only.mozpatch | 46 -------------------- 1 file changed, 46 deletions(-) diff --git a/projects/instantbird/Bug-1151345-Firefox-app-menu-sometimes-contains-only.mozpatch b/projects/instantbird/Bug-1151345-Firefox-app-menu-sometimes-contains-only.mozpatch index 191ae56..b8b798f 100644 --- a/projects/instantbird/Bug-1151345-Firefox-app-menu-sometimes-contains-only.mozpatch +++ b/projects/instantbird/Bug-1151345-Firefox-app-menu-sometimes-contains-only.mozpatch @@ -1,15 +1,3 @@ -From bfb108f8d8ba5c748ac0daa027271b063fd503b1 Mon Sep 17 00:00:00 2001 -From: Steven Michaud <smichaud(a)pobox.com> -Date: Wed, 3 Jun 2015 16:19:51 -0500 -Subject: [PATCH] Bug 1151345 - Firefox app menu sometimes contains only "Quit" - on OS X. r=spohl - ---- - widget/cocoa/nsAppShell.mm | 2 ++ - widget/cocoa/nsMenuBarX.h | 1 + - widget/cocoa/nsMenuBarX.mm | 8 ++++++++ - 3 files changed, 11 insertions(+) - diff --git a/widget/cocoa/nsAppShell.mm b/widget/cocoa/nsAppShell.mm index 10e0f0e..c89cee9 100644 --- a/widget/cocoa/nsAppShell.mm @@ -30,37 +18,3 @@ index 10e0f0e..c89cee9 100644 NS_OBJC_TRY_ABORT([NSApp run]); -diff --git a/widget/cocoa/nsMenuBarX.h b/widget/cocoa/nsMenuBarX.h -index a27d373..50f76cb 100644 ---- a/widget/cocoa/nsMenuBarX.h -+++ b/widget/cocoa/nsMenuBarX.h -@@ -127,6 +127,7 @@ public: - void ForceUpdateNativeMenuAt(const nsAString& indexString); - void ForceNativeMenuReload(); // used for testing - static char GetLocalizedAccelKey(const char *shortcutID); -+ static void ResetNativeApplicationMenu(); - - protected: - void ConstructNativeMenus(); -diff --git a/widget/cocoa/nsMenuBarX.mm b/widget/cocoa/nsMenuBarX.mm -index 90c681f..5e13538 100644 ---- a/widget/cocoa/nsMenuBarX.mm -+++ b/widget/cocoa/nsMenuBarX.mm -@@ -498,6 +498,14 @@ char nsMenuBarX::GetLocalizedAccelKey(const char *shortcutID) - return retval; - } - -+/* static */ -+void nsMenuBarX::ResetNativeApplicationMenu() -+{ -+ [sApplicationMenu removeAllItems]; -+ [sApplicationMenu release]; -+ sApplicationMenu = nil; -+} -+ - // Hide the item in the menu by setting the 'hidden' attribute. Returns it in |outHiddenNode| so - // the caller can hang onto it if they so choose. It is acceptable to pass nsull - // for |outHiddenNode| if the caller doesn't care about the hidden node. --- -2.1.4 -

1 0

[tor/master] fix tor-fw-helper url
by nickm＠torproject.org 24 Sep '15

24 Sep '15

commit 3f52a33739944c53ecb2fd516a7cdab9fc14b1ba Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Sep 24 14:12:45 2015 -0400 fix tor-fw-helper url --- ChangeLog | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/ChangeLog b/ChangeLog index 0c76405..a4f04a7 100644 --- a/ChangeLog +++ b/ChangeLog @@ -234,10 +234,10 @@ Changes in version 0.2.7.3-rc - 2015-09-24 o Removed code: - The internal pure-C tor-fw-helper tool is now removed from the Tor distribution, in favor of the pure-Go clone available from - https://github.com/Yawning/tor-fw-helper . The libraries used by - the C tor-fw-helper are not, in our opinion, very confidence- - inspiring in their secure-programming techniques. Closes - ticket 13338. + https://gitweb.torproject.org/tor-fw-helper.git/ . The libraries + used by the C tor-fw-helper are not, in our opinion, very + confidence- inspiring in their secure-programming techniques. + Closes ticket 13338. - Remove the code that would try to aggressively flush controller connections while writing to them. This code was introduced in 0.1.2.7-alpha, in order to keep output buffers from exceeding

1 0

[tor/master] Changelog: more clarity and fixing
by nickm＠torproject.org 24 Sep '15

24 Sep '15

commit f55cdee0db53a638111391f0e51d79b62198dc38 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Sep 24 14:08:30 2015 -0400 Changelog: more clarity and fixing --- ChangeLog | 54 ++++++++++++++++++++++++++++++------------------------ 1 file changed, 30 insertions(+), 24 deletions(-) diff --git a/ChangeLog b/ChangeLog index c6a2a10..0c76405 100644 --- a/ChangeLog +++ b/ChangeLog @@ -10,19 +10,23 @@ Changes in version 0.2.7.3-rc - 2015-09-24 connection) raise the coverage to 64.49%. o Major features (security, hidden services): - - Hidden services are required to use more than one EntryNode, to - avoid a guard discovery attack. See ticket for more information. - Fixes ticket 14917. + - Hidden services, if using the EntryNodes option, are required to + use more than one EntryNode, in order to avoid a guard discovery + attack. (This would only affect people who had configured hidden + services and manually specified the EntryNodes option with a + single entry-node. The impact was that it would be easy to + remotely identify the guard node used by such a hidden service. + See ticket for more information.) Fixes ticket 14917. o Major features (Ed25519 keys, keypinning): - The key-pinning option on directory authorities is now advisory- only by default. In a future version, or when the AuthDirPinKeys option is set, pins are enforced again. Disabling key-pinning seemed like a good idea so that we can survive the fallout of any - usability problems associated with ed25519 keys. Closes + usability problems associated with Ed25519 keys. Closes ticket 17135. - o Major features (ed25519 performance): + o Major features (Ed25519 performance): - Improve the speed of Ed25519 operations and Curve25519 keypair generation when built targeting 32 bit x86 platforms with SSE2 available. Implements ticket 16535. @@ -41,9 +45,9 @@ Changes in version 0.2.7.3-rc - 2015-09-24 failure conditions. Thanks to "s7r" for reporting and diagnosing so many of these! - Add a new OfflineMasterKey option to tell Tor never to try loading - or generating a secret ed25519 identity key. You can use this in + or generating a secret Ed25519 identity key. You can use this in combination with tor --keygen to manage offline and/or encrypted - ed25519 keys. Implements ticket 16944. + Ed25519 keys. Implements ticket 16944. - Add a --newpass option to allow changing or removing the passphrase of an encrypted key with tor --keygen. Implements part of ticket 16769. @@ -82,7 +86,9 @@ Changes in version 0.2.7.3-rc - 2015-09-24 drop. This change should make some attacks against the hidden service directory system harder. Fixes ticket 15963. - Turn on hidden service statistics collection by setting the torrc - option HiddenServiceStatistics to "1" by default. Closes + option HiddenServiceStatistics to "1" by default. (This keeps + track only of the fraction of traffic used by hidden services, and + the total number of hidden services in existence.) Closes ticket 15254. - Client now uses an introduction point failure cache to know when to fetch or keep a descriptor in their cache. Previously, failures @@ -91,13 +97,13 @@ Changes in version 0.2.7.3-rc - 2015-09-24 o Minor features (testing, authorities, documentation): - New TestingDirAuthVote{Exit,Guard,HSDir}IsStrict flags to - explicitly manage consensus flags in t3esting networks. Patch by + explicitly manage consensus flags in testing networks. Patch by "robgjansen", modified by "teor". Implements part of ticket 14882. o Minor bugfixes (security, exit policies): - ExitPolicyRejectPrivate now also rejects the relay's published IPv6 address (if any), and any publicly routable IPv4 or IPv6 - addresses on any local interfacesn. ticket 17027. Patch by "teor". + addresses on any local interfaces. ticket 17027. Patch by "teor". Fixes bug 17027; bugfix on 0.2.0.11-alpha. o Minor bug fixes (torrc exit policies): @@ -112,7 +118,7 @@ Changes in version 0.2.7.3-rc - 2015-09-24 including any ExitPolicy lines after accept *:* or reject *:*. Related to ticket 16069. - When parsing torrc ExitPolicies, we now issue an info-level - message: when expanding an "accept/reject *" line to include both + message when expanding an "accept/reject *" line to include both IPv4 and IPv6 wildcard addresses. Related to ticket 16069. - In each instance above, usage advice is provided to avoid the message. Resolves ticket 16069. Patch by "teor". Fixes part of bug @@ -121,8 +127,8 @@ Changes in version 0.2.7.3-rc - 2015-09-24 o Minor bugfixes (authority): - Don't assign "HSDir" to a router if it isn't Valid and Running. Fixes bug 16524; bugfix on 0.2.7.2-alpha. - - Downgrade log messages about Ed25519 key issues, if they are in - old cached router descriptors. Fixes part of bug 16286; bugfix + - Downgrade log messages about Ed25519 key issues if they are in old + cached router descriptors. Fixes part of bug 16286; bugfix on 0.2.7.2-alpha. - When we find an Ed25519 key issue in a cached descriptor, stop saying the descriptor was just "uploaded". Fixes another part of @@ -140,8 +146,8 @@ Changes in version 0.2.7.3-rc - 2015-09-24 incorrectly removed. Fixes bug 16924; bugfix on 0.2.4.4-alpha. o Minor bugfixes (documentation): - - Advise users how to configure separate IPv4 and IPv6 exit policies - in the manpage and sample torrcs. Related to ticket 16069. + - Advise users on how to configure separate IPv4 and IPv6 exit + policies in the manpage and sample torrcs. Related to ticket 16069. - Fix the usage message of tor-resolve(1) so that it no longer lists the removed -F option. Fixes bug 16913; bugfix on 0.2.2.28-beta. - Fix an error in the manual page and comments for @@ -171,7 +177,7 @@ Changes in version 0.2.7.3-rc - 2015-09-24 - Try harder to normalize the exit status of the Tor process to the standard-provided range. Fixes bug 16975; bugfix on every version of Tor ever. - - Check correctly for windows socket errors in the workqueue + - Check correctly for Windows socket errors in the workqueue backend. Fixes bug 16741; bugfix on 0.2.6.3-alpha. - Fix the behavior of crypto_rand_time_range() when told to consider times before 1970. (These times were possible when running in a @@ -183,7 +189,7 @@ Changes in version 0.2.7.3-rc - 2015-09-24 o Minor bugfixes (relay): - Ensure that worker threads actually exit when a fatal error or shutdown is indicated. This fix doesn't currently affect the - behaviour of Tor, because Tor workers never indicates fatal error + behavior of Tor, because Tor workers never indicates fatal error or shutdown except in the unit tests. Fixes bug 16868; bugfix on 0.2.6.3-alpha. - Unblock threads before releasing the work queue mutex to ensure @@ -206,14 +212,14 @@ Changes in version 0.2.7.3-rc - 2015-09-24 directory_all_unreachable() into a callback. Closes ticket 16762. - Treat the loss of an owning controller as equivalent to a SIGTERM signal. This removes a tiny amount of duplicated code, and - simplifies our callgraph. Closes ticekt 16788. + simplifies our callgraph. Closes ticket 16788. - When generating an event to send to the controller, we no longer put the event over the network immediately. Instead, we queue these events, and use a Libevent callback to deliver them. This change simplifies Tor's callgraph by reducing the number of functions from which all other Tor functions are reachable. Closes ticket 16695. - - Wrap windows-only C files inside '#ifdef _WIN32' so that tools + - Wrap Windows-only C files inside '#ifdef _WIN32' so that tools that try to scan or compile every file on Unix won't decide that they are broken. - Remove the unused "nulterminate" argument from buf_pullup(). @@ -230,7 +236,7 @@ Changes in version 0.2.7.3-rc - 2015-09-24 distribution, in favor of the pure-Go clone available from https://github.com/Yawning/tor-fw-helper . The libraries used by the C tor-fw-helper are not, in our opinion, very confidence- - inspiring in their secure-proggramming techniques. Closes + inspiring in their secure-programming techniques. Closes ticket 13338. - Remove the code that would try to aggressively flush controller connections while writing to them. This code was introduced in @@ -243,9 +249,9 @@ Changes in version 0.2.7.3-rc - 2015-09-24 - Make "bridges+hs" the default test network. This tests almost all tor functionality during make test-network, while allowing tests to succeed on non-IPv6 systems. Requires chutney commit 396da92 in - test-network-bridges-hs. Closes tickets 16945 (tor), 16946 - (chutney) . Patches by "teor". - - Autodetect CHUTNEY_PATH if the chutney and tor sources are side- + test-network-bridges-hs. Closes tickets 16945 (tor) and 16946 + (chutney). Patches by "teor". + - Autodetect CHUTNEY_PATH if the chutney and Tor sources are side- by-side in the same parent directory. Closes ticket 16903. Patch by "teor". - Add a new set of callgraph analysis scripts that use clang to @@ -254,7 +260,7 @@ Changes in version 0.2.7.3-rc - 2015-09-24 our code structure by identifying illogical dependencies. - Add new 'test-full' and 'test-full-online' targets to run all tests, including integration tests with stem and chutney. - - Make the test-workqueue test work on windows by initializing the + - Make the test-workqueue test work on Windows by initializing the network before we begin. - New make target (make test-network-all) to run multiple applicable chutney test cases. Patch from Teor; closes 16953.

1 0

[tor/master] Increment version.
by nickm＠torproject.org 24 Sep '15

24 Sep '15

commit 744f8c827716c5916018361a9ee1bed3f4e061d9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Sep 24 12:18:24 2015 -0400 Increment version. --- ChangeLog | 2 +- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/ChangeLog b/ChangeLog index d8ad4cb..c6a2a10 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.2.7.3-rc - 2015-09-2? +Changes in version 0.2.7.3-rc - 2015-09-24 Tor 0.2.7.3-rc is the first release candidate in the 0.2.7 series. It contains numerous usability fixes for Ed25519 keys, safeguards against several misconfiguration problems, significant simplifications to diff --git a/configure.ac b/configure.ac index 2220c18..98f8d30 100644 --- a/configure.ac +++ b/configure.ac @@ -3,7 +3,7 @@ dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson dnl Copyright (c) 2007-2015, The Tor Project, Inc. dnl See LICENSE for licensing information -AC_INIT([tor],[0.2.7.2-alpha-dev]) +AC_INIT([tor],[0.2.7.3-rc]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) AM_INIT_AUTOMAKE diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 36b1533..314522f 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.7.2-alpha-dev" +!define VERSION "0.2.7.3-rc" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 6447741..e69ebeb 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -232,7 +232,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.7.2-alpha-dev" +#define VERSION "0.2.7.3-rc"

1 0

[translation/tails-misc] Update translations for tails-misc
by translation＠torproject.org 24 Sep '15

24 Sep '15

commit bc815bc4b93291218c458e5e742880bfdeb585f2 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Sep 24 16:15:40 2015 +0000 Update translations for tails-misc --- ca.po | 72 ++++++++++++++++++++++++++++++++--------------------------------- 1 file changed, 36 insertions(+), 36 deletions(-) diff --git a/ca.po b/ca.po index 5f677c2..f77b562 100644 --- a/ca.po +++ b/ca.po @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2015-09-20 19:32+0200\n" -"PO-Revision-Date: 2015-09-24 15:45+0000\n" +"PO-Revision-Date: 2015-09-24 16:10+0000\n" "Last-Translator: laia_\n" "Language-Team: Catalan (http://www.transifex.com/otf/torproject/language/ca/)\n" "MIME-Version: 1.0\n" @@ -98,7 +98,7 @@ msgstr "_Desxifra/Verifica el Portapapers" #: config/chroot_local-includes/usr/local/bin/gpgApplet:204 msgid "_Manage Keys" -msgstr "_Gestió de Claus" +msgstr "_Gestiona les Claus" #: config/chroot_local-includes/usr/local/bin/gpgApplet:208 msgid "_Open Text Editor" @@ -154,17 +154,17 @@ msgstr "Cap (no signat)" #: config/chroot_local-includes/usr/local/bin/gpgApplet:496 msgid "Select recipients:" -msgstr "Sel·lecciona destinataris" +msgstr "Selecciona els destinataris" #: config/chroot_local-includes/usr/local/bin/gpgApplet:504 msgid "Hide recipients" -msgstr "Oculta destinataris" +msgstr "Oculta els destinataris" #: config/chroot_local-includes/usr/local/bin/gpgApplet:507 msgid "" "Hide the user IDs of all recipients of an encrypted message. Otherwise " "anyone that sees the encrypted message can see who the recipients are." -msgstr "Oculta els IDs d'usuari de tots els receptors del missatge xifrat. Altrament, qualsevol persona que vegi el missatge xifrat veurà qui són els destinataris." +msgstr "Oculta els IDs d'usuari de tots els destinataris del missatge xifrat. Altrament, qualsevol que vegi el missatge xifrat veurà qui són els destinataris." #: config/chroot_local-includes/usr/local/bin/gpgApplet:513 msgid "Sign message as:" @@ -176,7 +176,7 @@ msgstr "Tria les claus" #: config/chroot_local-includes/usr/local/bin/gpgApplet:557 msgid "Do you trust these keys?" -msgstr "Confies en aquestes claus?" +msgstr "Confieu en aquestes claus?" #: config/chroot_local-includes/usr/local/bin/gpgApplet:560 msgid "The following selected key is not fully trusted:" @@ -188,17 +188,17 @@ msgstr[1] "Les claus seleccionades no són de plena confiança:" msgid "Do you trust this key enough to use it anyway?" msgid_plural "Do you trust these keys enough to use them anyway?" msgstr[0] "Tens prou confiança amb aquesta clau per fer-ne ús?" -msgstr[1] "Tens prou confiança amb aquestes claus per usar-les?" +msgstr[1] "Confieu prou en aquestes claus per usar-les igualment?" #: config/chroot_local-includes/usr/local/bin/gpgApplet:591 msgid "No keys selected" -msgstr "Cap clau seleccionada" +msgstr "No hi ha cap clau seleccionada" #: config/chroot_local-includes/usr/local/bin/gpgApplet:593 msgid "" "You must select a private key to sign the message, or some public keys to " "encrypt the message, or both." -msgstr "Has de seleccionar una clau privada per signar el missatge, o alguna clau pública per xifrar el missatge, o ambdues." +msgstr "Heu de seleccionar una clau privada per signar el missatge o alguna clau pública per xifrar el missatge, o les dues." #: config/chroot_local-includes/usr/local/bin/gpgApplet:621 msgid "No keys available" @@ -207,23 +207,23 @@ msgstr "No hi ha claus disponibles" #: config/chroot_local-includes/usr/local/bin/gpgApplet:623 msgid "" "You need a private key to sign messages or a public key to encrypt messages." -msgstr "Necessites una clau privada per signar missatges o una clau pública per xifrar missatges." +msgstr "Necessiteu una clau privada per signar missatges o una clau pública per xifrar missatges." #: config/chroot_local-includes/usr/local/bin/gpgApplet:751 msgid "GnuPG error" -msgstr "Error GnuPG" +msgstr "Hi ha hagut un error de GnuPG" #: config/chroot_local-includes/usr/local/bin/gpgApplet:772 msgid "Therefore the operation cannot be performed." -msgstr "Per tant, la operació no es pot realitzar." +msgstr "Per tant, l'operació no es pot realitzar." #: config/chroot_local-includes/usr/local/bin/gpgApplet:822 msgid "GnuPG results" -msgstr "Resultats GnuPG" +msgstr "Resultats del GnuPG" #: config/chroot_local-includes/usr/local/bin/gpgApplet:828 msgid "Output of GnuPG:" -msgstr "Sortida de GnuPG:" +msgstr "Sortida del GnuPG:" #: config/chroot_local-includes/usr/local/bin/gpgApplet:853 msgid "Other messages provided by GnuPG:" @@ -235,7 +235,7 @@ msgstr "Apaga immediatament" #: config/chroot_local-includes/usr/local/lib/shutdown-helper-applet:40 msgid "Reboot Immediately" -msgstr "Re-inicia immediatament " +msgstr "Reinicia immediatament " #: config/chroot_local-includes/usr/local/bin/tails-about:16 msgid "not available" @@ -260,13 +260,13 @@ msgstr "Construir informació:\n%s" #: config/chroot_local-includes/usr/local/bin/tails-about:27 #: ../config/chroot_local-includes/usr/share/applications/tails-about.desktop.in.h:1 msgid "About Tails" -msgstr "Sobre Tails" +msgstr "Quant a Tails" #: config/chroot_local-includes/usr/local/sbin/tails-additional-software:118 #: config/chroot_local-includes/usr/local/sbin/tails-additional-software:124 #: config/chroot_local-includes/usr/local/sbin/tails-additional-software:128 msgid "Your additional software" -msgstr "El teu software adicional" +msgstr "Programari addicional" #: config/chroot_local-includes/usr/local/sbin/tails-additional-software:119 #: config/chroot_local-includes/usr/local/sbin/tails-additional-software:129 @@ -288,15 +288,15 @@ msgstr "Sincronitzant el rellotge del sistema" msgid "" "Tor needs an accurate clock to work properly, especially for Hidden " "Services. Please wait..." -msgstr "Tor necessita un rellotge precís per a funcionar correctament, especialment per als serveis ocults. Siusplau espera...." +msgstr "Tor necessita un rellotge precís per funcionar correctament, especialment per als serveis ocults. Espereu...." #: config/chroot_local-includes/usr/local/bin/tails-htp-notify-user:87 msgid "Failed to synchronize the clock!" -msgstr "Error al sincronitzar el rellotge" +msgstr "Error en sincronitzar el rellotge" #: config/chroot_local-includes/usr/local/sbin/tails-restricted-network-detector:38 msgid "Network connection blocked?" -msgstr "Connexió de xarxa bloquejada?" +msgstr "La connexió de xarxa està bloquejada?" #: config/chroot_local-includes/usr/local/sbin/tails-restricted-network-detector:40 msgid "" @@ -304,7 +304,7 @@ msgid "" "MAC spoofing feature. For more information, see the <a " "href=\\\"file:///usr/share/doc/tails/website/doc/first_steps/startup_options/mac_spoofing.en.html#blocked\\\">MAC" " spoofing documentation</a>." -msgstr "Sembla que esteu bloquejats de la xarxa. Això pot estar relacionat amb la propietat MAC spoofing. PEr a més informació, visiteu la <a href=\\\"file:///usr/share/doc/tails/website/doc/first_steps/startup_options/mac_spoofing.en.html#blocked\\\">documentació MAC spoofing</a>." +msgstr "Sembla que esteu bloquejats de la xarxa. Això pot estar relacionat amb la propietat MAC spoofing. Per a més informació, visiteu la <a href=\\\"file:///usr/share/doc/tails/website/doc/first_steps/startup_options/mac_spoofing.en.html#blocked\\\">documentació MAC spoofing</a>." #: config/chroot_local-includes/usr/local/bin/tails-security-check:151 msgid "This version of Tails has known security issues:" @@ -313,30 +313,30 @@ msgstr "Aquesta versió de Tails té problemes de seguretat coneguts:" #: config/chroot_local-includes/usr/local/sbin/tails-spoof-mac:45 #, sh-format msgid "Network card ${nic} disabled" -msgstr "Targeta de xarxa ${nic} deshabilitada" +msgstr "La targeta de xarxa ${nic} està deshabilitada" #: config/chroot_local-includes/usr/local/sbin/tails-spoof-mac:46 #, sh-format msgid "" "MAC spoofing failed for network card ${nic_name} (${nic}) so it is temporarily disabled.\n" "You might prefer to restart Tails and disable MAC spoofing. See the <a href='file:///usr/share/doc/tails/website/doc/first_steps/startup_options/mac_spoofing.en.html'>documentation</a>." -msgstr "MAC spoofing ha fallat per la tarja de xarxa ${nic_name} (${nic}) i està temporalment deshabilitada. \nPotser preferiu reiniciar Tails i desactivar el MAC spoofing. Vegeu la <a href='file:///usr/share/doc/tails/website/doc/first_steps/startup_options/mac_spoofing.en.html'>documentació</a>. " +msgstr "El MAC spoofing ha fallat per la targeta de xarxa ${nic_name} (${nic}) i està temporalment deshabilitada. \nPotser preferiu reiniciar Tails i desactivar el MAC spoofing. Vegeu la <a href='file:///usr/share/doc/tails/website/doc/first_steps/startup_options/mac_spoofing.en.html'>documentació</a>. " #: config/chroot_local-includes/usr/local/sbin/tails-spoof-mac:55 msgid "All networking disabled" -msgstr "Totes les xarxes deshabilitades" +msgstr "Totes les xarxes estan deshabilitades" #: config/chroot_local-includes/usr/local/sbin/tails-spoof-mac:56 #, sh-format msgid "" "MAC spoofing failed for network card ${nic_name} (${nic}). The error recovery also failed so all networking is disabled.\n" "You might prefer to restart Tails and disable MAC spoofing. See the <a href='file:///usr/share/doc/first_steps/startup_options/mac_spoofing.en.html'>documentation</a>." -msgstr "MAC spoofing ha fallat per a la tarja de xarxa ${nic_name} (${nic}). La recuperació d'errors també ha fallat i totes les connexions de xarxa estan deshabilitades. \nPotser preferiu reiniciar Tails i desactivar el MAC spoofing. Vegeu la <a href='file:///usr/share/doc/first_steps/startup_options/mac_spoofing.en.html'>documentació</a>." +msgstr "El MAC spoofing ha fallat per la tageta de xarxa ${nic_name} (${nic}). La recuperació d'errors també ha fallat i totes les connexions de xarxa estan deshabilitades. \nPotser preferiu reiniciar Tails i desactivar el MAC spoofing. Vegeu la <a href='file:///usr/share/doc/first_steps/startup_options/mac_spoofing.en.html'>documentació</a>." #: config/chroot_local-includes/usr/local/bin/tails-upgrade-frontend-wrapper:19 #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:22 msgid "error:" -msgstr "error:" +msgstr "Hi ha hagut un error:" #: config/chroot_local-includes/usr/local/bin/tails-upgrade-frontend-wrapper:20 #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:23 @@ -354,17 +354,17 @@ msgid "" "\n" "Or do a manual upgrade.\n" "See https://tails.boum.org/doc/first_steps/upgrade#manual" -msgstr "No hi ha memòria suficient per a buscar actualitzacions.\n\nAssegureu-vos que aquest sistema compleix els requisits tècnics per a executar Tails. \nVegeu file:///usr/share/doc/tails/website/doc/about/requirements.en.html\n\nIntenteu reiniciar Tails per cercar actualitzacions una altra vegada. \n\nO feu una actualització manual. \nVegeu https://tails.boum.org/doc/first_steps/upgrade#manual" +msgstr "No hi ha memòria suficient per cercar actualitzacions.\n\nAssegureu-vos que aquest sistema compleix els requisits tècnics per a executar Tails. \nVegeu file:///usr/share/doc/tails/website/doc/about/requirements.en.html\n\nIntenteu reiniciar Tails per cercar actualitzacions una altra vegada. \n\nO feu una actualització manual. \nVegeu https://tails.boum.org/doc/first_steps/upgrade#manual" #: config/chroot_local-includes/usr/local/bin/tails-virt-notify-user:53 msgid "Warning: virtual machine detected!" -msgstr "Alerta: Màquina virtual detectada!" +msgstr "Alerta: S'ha detectat una màquina virtual." #: config/chroot_local-includes/usr/local/bin/tails-virt-notify-user:55 msgid "" "Both the host operating system and the virtualization software are able to " "monitor what you are doing in Tails." -msgstr "Tant el sistema operatiu instal·lat com el programari de virtualització estan preparats per gravar el que feu a Tails. " +msgstr "Tant el sistema operatiu instal·lat com el programari de virtualització estan preparats per fer un seguiment del que feu a Tails. " #: config/chroot_local-includes/usr/local/bin/tails-virt-notify-user:57 msgid "" @@ -375,11 +375,11 @@ msgstr "<a href='file:///usr/share/doc/tails/website/doc/advanced_topics/virtual #: config/chroot_local-includes/usr/local/bin/tor-browser:29 msgid "Tor is not ready" -msgstr "Tor no es troba actiu" +msgstr "El Tor no està preparat" #: config/chroot_local-includes/usr/local/bin/tor-browser:30 msgid "Tor is not ready. Start Tor Browser anyway?" -msgstr "Tor no es troba actiu. Iniciar el navegador Tor indiferentment?" +msgstr "El Tor no està preparat. Voleu iniciar el navegador Tor igualment?" #: config/chroot_local-includes/usr/local/bin/tor-browser:31 msgid "Start Tor Browser" @@ -391,14 +391,14 @@ msgstr "Cancel·la" #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:33 msgid "Do you really want to launch the Unsafe Browser?" -msgstr "De debò vols obrir el Browser Insegur?" +msgstr "Segur que voleu executar el navegador insegur?" #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:35 msgid "" "Network activity within the Unsafe Browser is not anonymous. Only use" " the Unsafe Browser if necessary, for example if you have to login or " "register to activate your Internet connection." -msgstr "L'activitat de xarxa amb el navegador insegur no és anònim. Utilitzeu només el navegador insegur si és necessari, per exemple si heu d'iniciar sessió o registrar-vos per a activar la vostra connexió a internet. " +msgstr "L'activitat de xarxa amb el navegador insegur no és anònim. Utilitzeu només el navegador insegur si és necessari, per exemple si heu d'iniciar sessió o registrar-vos per activar la vostra connexió a internet. " #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:47 msgid "Starting the Unsafe Browser..." @@ -406,7 +406,7 @@ msgstr "Iniciant el Navegador Insegur..." #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:48 msgid "This may take a while, so please be patient." -msgstr "Això pot portar una estona, siusplau esperi." +msgstr "Això pot trigar una estona, espereu." #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:53 msgid "Shutting down the Unsafe Browser..." @@ -416,7 +416,7 @@ msgstr "Apagant el Navegador Insegur" msgid "" "This may take a while, and you may not restart the Unsafe Browser until it " "is properly shut down." -msgstr "Això pot tardar una mica, no reinicii el Browser Insegur fins que no s'hagi tancat correctament." +msgstr "Això pot tardar una estona, no reinicieu el navegador insegur fins que no s'hagi apagat correctament." #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:66 msgid "Failed to restart Tor." @@ -473,7 +473,7 @@ msgstr "La consola I2P està preparada" #: config/chroot_local-includes/usr/local/sbin/tails-i2p:44 msgid "You can now access I2P's router console in the I2P Browser." -msgstr "" +msgstr "Ara podeu accedir a la consola I2P al navegador I2P" #: config/chroot_local-includes/usr/local/sbin/tails-i2p:49 msgid "I2P is not ready"

1 0

[tor/master] Now I have a number here. (Had to use OSX becaue of #17146)
by nickm＠torproject.org 24 Sep '15

24 Sep '15

commit 8b0707405e0ec12789ef45a7e4e123224c68a9d8 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Sep 24 12:15:20 2015 -0400 Now I have a number here. (Had to use OSX becaue of #17146) --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index d4b1c2e..d8ad4cb 100644 --- a/ChangeLog +++ b/ChangeLog @@ -7,7 +7,7 @@ Changes in version 0.2.7.3-rc - 2015-09-2? This is the most tested release of Tor to date. The unit tests cover 39.40% of the code, and the integration tests (accessible with "make test-full-online", requiring stem and chutney and a network - connection) raise the coverage to XXX. + connection) raise the coverage to 64.49%. o Major features (security, hidden services): - Hidden services are required to use more than one EntryNode, to

1 0

[tor/master] fold 17135 into changelog
by nickm＠torproject.org 24 Sep '15

24 Sep '15

commit 458ccd38dda51babe6787ef9bc361136ead1d53b Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Sep 24 11:56:00 2015 -0400 fold 17135 into changelog --- ChangeLog | 14 ++++++++------ changes/bug17135 | 7 ------- 2 files changed, 8 insertions(+), 13 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5559e05..d4b1c2e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,17 +9,19 @@ Changes in version 0.2.7.3-rc - 2015-09-2? test-full-online", requiring stem and chutney and a network connection) raise the coverage to XXX. - If this is your first time upgrading a relay to Tor 0.2.7, your Tor - relay will, by default, generate a new Ed25519 identity key. If you - would prefer to keep your Ed25519 identity key offline or encrypted - for improved security, you can do so by following the instructions - at XXX. - o Major features (security, hidden services): - Hidden services are required to use more than one EntryNode, to avoid a guard discovery attack. See ticket for more information. Fixes ticket 14917. + o Major features (Ed25519 keys, keypinning): + - The key-pinning option on directory authorities is now advisory- + only by default. In a future version, or when the AuthDirPinKeys + option is set, pins are enforced again. Disabling key-pinning + seemed like a good idea so that we can survive the fallout of any + usability problems associated with ed25519 keys. Closes + ticket 17135. + o Major features (ed25519 performance): - Improve the speed of Ed25519 operations and Curve25519 keypair generation when built targeting 32 bit x86 platforms with SSE2 diff --git a/changes/bug17135 b/changes/bug17135 deleted file mode 100644 index 0a0c57e..0000000 --- a/changes/bug17135 +++ /dev/null @@ -1,7 +0,0 @@ - o Major features (Ed25519 keys, keypinning) - - The key-pinning option on directory authorities is now - advisory-only by default. In a future version, or when the - AuthDirPinKeys option is set, pins are enforced again. - Disabling key-pinning seemed like a good idea so that we can - survive the fallout of any usability problems associated with - ed25519 keys. Closes ticket 17135.

1 0