September 2015 - tor-commits - lists.torproject.org

[tor-browser/tor-browser-38.3.0esr-5.5-1] fixup! Bug #15502. Isolate blob, mediasource & mediastream URLs to first party
by gk＠torproject.org 18 Sep '15

18 Sep '15

commit e9de860b1e090eb56ce324f0baebc587a7ada374 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Thu Sep 17 15:13:52 2015 -0700 fixup! Bug #15502. Isolate blob, mediasource & mediastream URLs to first party --- dom/base/ThirdPartyUtil.cpp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/dom/base/ThirdPartyUtil.cpp b/dom/base/ThirdPartyUtil.cpp index 6f0a358..5cffc71 100644 --- a/dom/base/ThirdPartyUtil.cpp +++ b/dom/base/ThirdPartyUtil.cpp @@ -41,7 +41,8 @@ nsresult ThirdPartyUtil::GetFirstPartyHost(nsIChannel* aChannel, nsIDocument* aDocument, nsACString& aResult) { if (!gThirdPartyUtilService) { - CallGetService(THIRDPARTYUTIL_CONTRACTID, &gThirdPartyUtilService); + nsresult rv = CallGetService(THIRDPARTYUTIL_CONTRACTID, &gThirdPartyUtilService); + NS_ENSURE_SUCCESS(rv, rv); } nsCOMPtr<nsIURI> isolationURI; nsresult rv = gThirdPartyUtilService->GetFirstPartyIsolationURI(aChannel, aDocument, getter_AddRefs(isolationURI));

1 0

[tor-browser-bundle/maint-5.0] Bump gitian tag due to key expiration.
by mikeperry＠torproject.org 17 Sep '15

17 Sep '15

commit ca0f563c6da3a6ce496b034eb432e86289e05d9c Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Sep 17 16:26:42 2015 -0700 Bump gitian tag due to key expiration. --- gitian/versions | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/versions b/gitian/versions index f2d59d5..24f26ae 100755 --- a/gitian/versions +++ b/gitian/versions @@ -33,7 +33,7 @@ GO_X_CRYPTO_TAG=4ed45ec682102c643324fae5dff8dab085b6c300 GO_X_NET_TAG=7dbad50ab5b31073856416cdcfeb2796d682f844 OBFS4_TAG=obfs4proxy-0.0.5 -GITIAN_TAG=tor-browser-builder-3.x-8 +GITIAN_TAG=tor-browser-builder-3.x-8-gpgsux OPENSSL_VER=1.0.1p GMP_VER=5.1.3

1 0

[tor-browser-bundle/maint-5.0] Update keys for mikeperry.
by mikeperry＠torproject.org 17 Sep '15

17 Sep '15

commit 496972c5deda6cc34124047552777d95498b7edb Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Sep 17 16:12:08 2015 -0700 Update keys for mikeperry. --- gitian/gpg/mikeperry.gpg | Bin 15716 -> 21696 bytes gitian/gpg/torbrowser.gpg | Bin 18844 -> 18952 bytes gitian/gpg/torbutton.gpg | Bin 49582 -> 55562 bytes 3 files changed, 0 insertions(+), 0 deletions(-) diff --git a/gitian/gpg/mikeperry.gpg b/gitian/gpg/mikeperry.gpg index 7f14ee3..8615796 100644 Binary files a/gitian/gpg/mikeperry.gpg and b/gitian/gpg/mikeperry.gpg differ diff --git a/gitian/gpg/torbrowser.gpg b/gitian/gpg/torbrowser.gpg index dc44e33..d1033d4 100644 Binary files a/gitian/gpg/torbrowser.gpg and b/gitian/gpg/torbrowser.gpg differ diff --git a/gitian/gpg/torbutton.gpg b/gitian/gpg/torbutton.gpg index b60a95e..e4a03dd 100644 Binary files a/gitian/gpg/torbutton.gpg and b/gitian/gpg/torbutton.gpg differ

1 0

[tor-browser-bundle/maint-5.0] Bump browser to build 2.
by mikeperry＠torproject.org 17 Sep '15

17 Sep '15

commit f182615a6825601ad0ddb6879eabff64db49754d Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Sep 17 14:28:33 2015 -0700 Bump browser to build 2. Also clean up changelog a bit. --- Bundle-Data/Docs/ChangeLog.txt | 9 +++++---- gitian/versions | 2 +- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 095968f..ade00f3 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -7,18 +7,19 @@ Tor Browser 5.0.3 -- September 22 2015 * Bug 16797: brandShorterName is missing from brand.properties * Bug 14429: Make sure the automatic resizing is disabled * Translation updates - * Bug 7446: Torbutton should not fix up .onion domains + * Bug 7446: Tor Browser should not "fix up" .onion domains (or any domains) * Bug 16837: Disable Firefox Hotfix updates - * Bug 16855: Allow blobs to be download on first-party pages + * Bug 16855: Allow blobs to be download on first-party pages (fixes mega.nz) * Bug 16781: Allow saving pdf files in built-in pdf viewer * Bug 16842: Restore Media tab on Page information dialog * Bug 16727: Disable about:healthreport page * Bug 16783: Normalize NoScript default whitelist - * Bug 16775: Fix preferences dialog with slider set to "High" + * Bug 16775: Fix preferences dialog with security slider set to "High" * Bug 13579: Update download progress bar automatically - * Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent + * Bug 15646: Reduce keyboard layout fingerprinting in KeyboardEvent * Bug 17046: Event.timeStamp should not reveal startup time * Bug 16872: Fix warnings when opening about:downloads + * Bug 17097: Fix intermittent crashes when using the print dialog * Windows * Bug 16906: Fix Mingw-w64 compilation breakage * OS X diff --git a/gitian/versions b/gitian/versions index deecc7f..f2d59d5 100755 --- a/gitian/versions +++ b/gitian/versions @@ -8,7 +8,7 @@ FIREFOX_VERSION=38.3.0esr TORBROWSER_UPDATE_CHANNEL=release -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.0-2-build1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.0-2-build2 TOR_TAG=tor-0.2.6.10 TORLAUNCHER_TAG=0.2.7.7 TORBUTTON_TAG=1.9.3.4

1 0

[tor-browser/tor-browser-38.3.0esr-5.5-1] fixup! Bug #5742: API allows you to get the url bar URI for a channel or nsIDocument.
by mikeperry＠torproject.org 17 Sep '15

17 Sep '15

commit baca89fcad30603ccac4a2fe1f51ab3f0d0b8518 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Thu Sep 17 12:46:45 2015 -0700 fixup! Bug #5742: API allows you to get the url bar URI for a channel or nsIDocument. --- dom/base/ThirdPartyUtil.cpp | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/dom/base/ThirdPartyUtil.cpp b/dom/base/ThirdPartyUtil.cpp index e8ec06c..6f0a358 100644 --- a/dom/base/ThirdPartyUtil.cpp +++ b/dom/base/ThirdPartyUtil.cpp @@ -648,13 +648,17 @@ ThirdPartyUtil::GetFirstPartyURIInternal(nsIChannel *aChannel, if (aDoc->GetWindow()) { aDoc->GetWindow()->GetTop(getter_AddRefs(top)); - top->GetDocument(getter_AddRefs(topDDoc)); - - nsCOMPtr<nsIDocument> topDoc(do_QueryInterface(topDDoc)); - docURI = topDoc->GetOriginalURI(); - if (docURI) { - // Give us a mutable URI and also addref - rv = NS_EnsureSafeToReturn(docURI, aOutput); + if (top) { + top->GetDocument(getter_AddRefs(topDDoc)); + + nsCOMPtr<nsIDocument> topDoc(do_QueryInterface(topDDoc)); + if (topDoc) { + docURI = topDoc->GetOriginalURI(); + if (docURI) { + // Give us a mutable URI and also addref + rv = NS_EnsureSafeToReturn(docURI, aOutput); + } + } } } else { // XXX: Chrome callers (such as NoScript) can end up here

1 0

[tor-browser/tor-browser-38.3.0esr-5.0-2] fixup! Bug #5742: API allows you to get the url bar URI for a channel or nsIDocument.
by mikeperry＠torproject.org 17 Sep '15

17 Sep '15

commit bf0222961ed34874922c51ba1948439839f8d715 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Thu Sep 17 12:46:45 2015 -0700 fixup! Bug #5742: API allows you to get the url bar URI for a channel or nsIDocument. --- dom/base/ThirdPartyUtil.cpp | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/dom/base/ThirdPartyUtil.cpp b/dom/base/ThirdPartyUtil.cpp index e8ec06c..6f0a358 100644 --- a/dom/base/ThirdPartyUtil.cpp +++ b/dom/base/ThirdPartyUtil.cpp @@ -648,13 +648,17 @@ ThirdPartyUtil::GetFirstPartyURIInternal(nsIChannel *aChannel, if (aDoc->GetWindow()) { aDoc->GetWindow()->GetTop(getter_AddRefs(top)); - top->GetDocument(getter_AddRefs(topDDoc)); - - nsCOMPtr<nsIDocument> topDoc(do_QueryInterface(topDDoc)); - docURI = topDoc->GetOriginalURI(); - if (docURI) { - // Give us a mutable URI and also addref - rv = NS_EnsureSafeToReturn(docURI, aOutput); + if (top) { + top->GetDocument(getter_AddRefs(topDDoc)); + + nsCOMPtr<nsIDocument> topDoc(do_QueryInterface(topDDoc)); + if (topDoc) { + docURI = topDoc->GetOriginalURI(); + if (docURI) { + // Give us a mutable URI and also addref + rv = NS_EnsureSafeToReturn(docURI, aOutput); + } + } } } else { // XXX: Chrome callers (such as NoScript) can end up here

1 0

[tor-browser-bundle/maint-5.0] Updating config.yml
by gk＠torproject.org 17 Sep '15

17 Sep '15

commit b20a6fce3916ab81f5f2243f66820789fae6b73d Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 17 19:18:01 2015 +0000 Updating config.yml --- tools/update-responses/config.yml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 442e4a0..deba4cf 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -10,15 +10,14 @@ build_targets: osx64: Darwin_x86_64-gcc3 channels: alpha: 5.5a1 - release: 5.0.2 + release: 5.0.3 versions: - 5.0.2: - platformVersion: 38.2.1 + 5.0.3: + platformVersion: 38.3.0 detailsURL: https://www.torproject.org/projects/torbrowser.html.en - download_url: https://www.torproject.org/dist/torbrowser/5.0.2 + download_url: https://www.torproject.org/dist/torbrowser/5.0.3 incremental_from: - - 5.0 - - 5.0.1 + - 5.0.2 migrate_archs: osx32: osx64 osx32:

1 0

[tor-browser-bundle/maint-5.0] Changelog fixup
by gk＠torproject.org 17 Sep '15

17 Sep '15

commit 1e8e8d5bc49bfa2880da18f4ca3996e30f0c3a4b Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 17 19:12:38 2015 +0000 Changelog fixup --- Bundle-Data/Docs/ChangeLog.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 105148b..095968f 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -18,6 +18,7 @@ Tor Browser 5.0.3 -- September 22 2015 * Bug 13579: Update download progress bar automatically * Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent * Bug 17046: Event.timeStamp should not reveal startup time + * Bug 16872: Fix warnings when opening about:downloads * Windows * Bug 16906: Fix Mingw-w64 compilation breakage * OS X

1 0

[stem/master] TypeError under python3 when using 'use_mirrors = True'
by atagar＠torproject.org 17 Sep '15

17 Sep '15

commit d7079a71bed67a88e45d72358ca8562899d71582 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 17 08:15:10 2015 -0700 TypeError under python3 when using 'use_mirrors = True' Great catch from trodun. Under python3 filter is an iterable rather than returning a list, causing random.choice() to balk on us... https://trac.torproject.org/projects/tor/ticket/17083 --- docs/change_log.rst | 1 + stem/descriptor/remote.py | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/change_log.rst b/docs/change_log.rst index 6de73f4..273dc26 100644 --- a/docs/change_log.rst +++ b/docs/change_log.rst @@ -57,6 +57,7 @@ The following are only available within Stem's `git repository * Server descriptor validation fails with 'extra-info-digest line had an invalid value' from additions in proposal 228 (:trac:`16227`) * :class:`~stem.descriptor.server_descriptor.BridgeDescriptor` now has 'ntor_onion_key' like its unsanitized counterparts * Replaced the :class:`~stem.descriptor.microdescriptor.Microdescriptor` identifier and identifier_type attributes with an identifiers hash since it can now appear multiple times (:spec:`09ff9e2`) + * TypeError under python3 when using 'use_mirrors = True' (:trac:`17083`) * **Website** diff --git a/stem/descriptor/remote.py b/stem/descriptor/remote.py index 389182d..fbc9d96 100644 --- a/stem/descriptor/remote.py +++ b/stem/descriptor/remote.py @@ -344,7 +344,7 @@ class Query(object): """ if use_authority or not self.endpoints: - authority = random.choice(filter(HAS_V3IDENT, get_authorities().values())) + authority = random.choice(list(filter(HAS_V3IDENT, get_authorities().values()))) address, dirport = authority.address, authority.dir_port else: address, dirport = random.choice(self.endpoints)

1 0

[doctor/master] Re-suppress notifications for urras
by atagar＠torproject.org 17 Sep '15

17 Sep '15

commit 74f430475c983a713a19a6a0791aac4fa76850d9 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 17 07:58:21 2015 -0700 Re-suppress notifications for urras Well, that didn't last very long. Just hours after resuming the checks it went down again. --- consensus_health_checker.py | 7 ++++++- descriptor_checker.py | 5 +++++ 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/consensus_health_checker.py b/consensus_health_checker.py index 1be5794..8733cb4 100755 --- a/consensus_health_checker.py +++ b/consensus_health_checker.py @@ -599,7 +599,7 @@ def has_authority_flag(latest_consensus, consensuses, votes): if Flag.AUTHORITY in desc.flags: seen_authorities.add(desc.nickname) - known_authorities = set(DIRECTORY_AUTHORITIES.keys()) + known_authorities = set(DIRECTORY_AUTHORITIES.keys()) - set(['urras']) missing_authorities = known_authorities.difference(seen_authorities) extra_authorities = seen_authorities.difference(known_authorities) @@ -724,6 +724,11 @@ def _get_documents(label, resource): queries, documents, issues = {}, {}, [] for authority in DIRECTORY_AUTHORITIES.values(): + # skip urras, it's having a long outage + + if authority.nickname == 'urras': + continue + if authority.v3ident is None: continue # not a voting authority diff --git a/descriptor_checker.py b/descriptor_checker.py index 6b28d95..8050ca8 100755 --- a/descriptor_checker.py +++ b/descriptor_checker.py @@ -60,6 +60,11 @@ def main(): # download the consensus from each authority for authority in stem.descriptor.remote.get_authorities().values(): + # skip urras, it's having a long outage + + if authority.nickname == 'urras': + continue + # skip authorities that don't vote in the consensus if authority.v3ident is None:

1 0