February 2016 - tor-commits - lists.torproject.org

[tordnsel/master] Update more design doc links
by arlo＠torproject.org 03 Feb '16

03 Feb '16

commit 60cf36913c0b409b2d8514d2ac40af19ec89cd2e Author: Arlo Breault <arlolra(a)gmail.com> Date: Wed Feb 3 09:54:10 2016 -0800 Update more design doc links --- src/TorDNSEL/DNS/Server/Internals.hs | 2 +- src/TorDNSEL/Main.hsc | 2 +- src/tordnsel.hs | 2 +- tordnsel.cabal | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src/TorDNSEL/DNS/Server/Internals.hs b/src/TorDNSEL/DNS/Server/Internals.hs index 87ad170..008af72 100644 --- a/src/TorDNSEL/DNS/Server/Internals.hs +++ b/src/TorDNSEL/DNS/Server/Internals.hs @@ -216,7 +216,7 @@ dropAuthZone (DomainName authZone) (DomainName name) = -- | Queries asking whether there's a Tor exit node at a specific IP address. data ExitListQuery -- | Query type 1 from - -- <https://gitweb.torproject.org/tordnsel.git/blob/HEAD:/doc/torel-design.txt> + -- <https://gitweb.torproject.org/tordnsel.git/tree/doc/torel-design.txt> = IPPort { -- | The address of the candidate exit node. queryAddr :: {-# UNPACK #-} !HostAddress, diff --git a/src/TorDNSEL/Main.hsc b/src/TorDNSEL/Main.hsc index 609543f..5a76519 100644 --- a/src/TorDNSEL/Main.hsc +++ b/src/TorDNSEL/Main.hsc @@ -16,7 +16,7 @@ -- Implements a DNSBL-style interface providing information about whether a -- client for a network service is likely connecting through a Tor exit node. -- --- See <https://gitweb.torproject.org/tordnsel.git/blob/HEAD:/doc/torel-design.txt> for +-- See <https://gitweb.torproject.org/tordnsel.git/tree/doc/torel-design.txt> for -- details. -- ----------------------------------------------------------------------------- diff --git a/src/tordnsel.hs b/src/tordnsel.hs index 6218d89..d3f76da 100644 --- a/src/tordnsel.hs +++ b/src/tordnsel.hs @@ -11,7 +11,7 @@ -- Implements a DNSBL-style interface providing information about whether a -- client for a network service is likely connecting through a Tor exit node. -- --- See <https://gitweb.torproject.org/tordnsel.git/blob/HEAD:/doc/torel-design.txt> for +-- See <https://gitweb.torproject.org/tordnsel.git/tree/doc/torel-design.txt> for -- details. -- ----------------------------------------------------------------------------- diff --git a/tordnsel.cabal b/tordnsel.cabal index 243e026..8780326 100644 --- a/tordnsel.cabal +++ b/tordnsel.cabal @@ -3,7 +3,7 @@ Version: 0.1.1-dev Synopsis: provides a DNSBL-style interface for detecting Tor exit nodes Description: TorDNSEL implements a design for a DNSBL-style interface for detecting connections exiting the Tor network. This design and its rationale - is described at <https://gitweb.torproject.org/tordnsel.git/blob/HEAD:/doc/torel-design.txt>. + is described at <https://gitweb.torproject.org/tordnsel.git/tree/doc/torel-design.txt>. License: PublicDomain License-File: LICENSE Homepage: http://p56soo2ibjkx23xo.onion/

1 0

[tordnsel/master] Update design doc link in readme
by arlo＠torproject.org 03 Feb '16

03 Feb '16

commit 2a3cad8d041558aebd480d385c3cd47cbf660054 Author: Arlo Breault <arlolra(a)gmail.com> Date: Wed Feb 3 09:54:10 2016 -0800 Update design doc link in readme --- README | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README b/README index 9037af6..214b582 100644 --- a/README +++ b/README @@ -4,7 +4,7 @@ For an overview, see the man page at doc/tordnsel.8. The design document for TorDNSEL can be found at: - https://gitweb.torproject.org/tordnsel.git/blob/HEAD:/doc/torel-design.txt + https://gitweb.torproject.org/tordnsel.git/tree/doc/torel-design.txt Currently, only query type 1 from torel-design.txt is supported:

1 0

[tor/master] Start editing on the changelog entries
by nickm＠torproject.org 03 Feb '16

03 Feb '16

commit 957cdb54699937818b539c75e413e88760ee34cd Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Feb 3 09:19:05 2016 -0500 Start editing on the changelog entries --- ChangeLog | 67 ++++++++++++++++++++++++++++++++++----------------------------- 1 file changed, 36 insertions(+), 31 deletions(-) diff --git a/ChangeLog b/ChangeLog index 7179877..44d4c88 100644 --- a/ChangeLog +++ b/ChangeLog @@ -6,8 +6,9 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? subsystem. o Major key updates: - - Update the V3 identity key for dannenberg: it was changed on 18 - November 2015. Closes task 17906. Patch by "teor". + - Update the V3 identity key for the dannenberg directory authority: + it was changed on 18 November 2015. Closes task 17906. Patch by + "teor". o Removed features: - Remove client-side support for connecting to Tor servers running @@ -17,55 +18,57 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? patches by Tom van der Woerdt. o Major features (security, Linux): - - When Tor is started as root on Linux and told to switch user ID, - it can now retain the capabilitity to bind to low ports. By + - When Tor starts as root on Linux and is told to switch user ID, + it can now retain the capability to bind to low ports. By default, Tor will do this only when it's switching user ID and some low ports have been configured. You can change this behavior with the new option KeepBindCapabilities. Closes ticket 8195. o Major features (directory system): - - Schedule multiple in-progress consensus downloads during client - bootstrap. Use the first one that starts downloading, close the - rest. This reduces failures when authorities are slow or down. - Together with the code for feature 15775, it reduces failures due - to fallback churn. Implements ticket 4483 (reduce failures when - authorities are down). Patch by "teor". Implements IPv4 portions + - When bootstrapping we not launch multiple consensus downloads + at a time, use the first one that starts downloading, and close the + rest. This reduces failures when authorities or fallback directories are slow or down. + Together with the code for feature 15775, this feature should reduces failures due + to fallback churn. Implements ticket 4483. + Patch by "teor". Implements IPv4 portions of proposal 210 by "mikeperry" and "teor". - - Include an opt-in trial list of default fallback directories in - add_default_fallback_dir_servers(). Doing this should improve - client reliability and initial bootstrap performance, and reduce + - Include a trial list of default fallback directories, based + on an opt-in survey of suitable relays. Doing this should make + clients bootstrap more quickly and reliably, and reduce the load on the directory authorities. Closes ticket 15775. Patch by - "teor". OnionOO script by "weasel", "teor", "gsathya", + "teor". Candidates identified using an OnionOO script by "weasel", "teor", "gsathya", and "karsten". - - Previously only relays who explicitly opened a directory port + - Previously only relays that explicitly opened a directory port (DirPort) accepted directory requests from clients. Now all - relays, with and without a DirPort, who do not disable the - DirCache option accept and serve directory requests sent - (tunnelled) through their ORPort. Closes ticket 12538. + relays, with and without a DirPort, + accept and serve tunneled directory requests that they + receive through their ORPort. You can disable this behavior using + the new DirCache option. + Closes ticket 12538. o Minor features (security, clock): - - Warn when the system clock is set back in time (when the state + - Warn when the system clock appears to move back in time (when the state file was last written in the future). Tor doesn't know that consensuses have expired if the clock is in the past. Patch by "teor". Implements ticket 17188. o Minor features (security, exit policies): - - ExitPolicyRejectPrivate rejects more private addresses by default. - Specifically, it rejects the relay's outbound bind addresses (if + - ExitPolicyRejectPrivate now rejects more private addresses by default. + Specifically, it now rejects the relay's outbound bind addresses (if configured), and the relay's configured port addresses (such as ORPort and DirPort). Fixes bug 17027; bugfix on 0.2.0.11-alpha. Patch by "teor". o Minor features (security, memory erasure): - - Set unused entires in a smartlist to NULL. This helped catch + - Set the unused entires in a smartlist to NULL. This helped catch a (harmless) bug, and shouldn't affect performance too much. Implements ticket 17026. - Use SecureMemoryWipe() function to securely clean memory on - Windows. Implements feature 17986. + Windows. Previously we'd use OpenSSL's OPENSSL_cleanse() function. Implements feature 17986. - Use explicit_bzero or memset_s when present. Previously, we'd use OpenSSL's OPENSSL_cleanse() function. Closes ticket 7419; patches from <logan(a)hackers.mu> and <selven(a)hackers.mu>. - - Make memwipe() do nothing when passed a NULL pointer or zero size. + - Make memwipe() do nothing when passed a NULL pointer or buffer of zero size. Check size argument to memwipe() for underflow. Fixes bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", patch by "teor". @@ -73,25 +76,27 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? o Minor features (security, RNG): - Adjust Tor's use of OpenSSL's RNG APIs so that they absolutely, positively are not allowed to fail. Previously we depended on - internals about OpenSSL behavior. Closes ticket 17686. + internal details of OpenSSL's behavior. Closes ticket 17686. - Never use the system entropy output directly for anything besides seeding the PRNG. When we want to generate important keys, instead - of using system entropy directly, hash it with the PRNG stream. + of using system entropy directly, we now hash it with the PRNG stream. This may help resist certain attacks based on broken OS entropy implementations. Closes part of ticket 17694. - - Use modern system calls to generate strong entropy on platforms - that provide them. Closes ticket 13696. + - Use modern system calls (like getentropy() or getrandom()) to generate strong entropy on platforms + that have them. Closes ticket 13696. o Minor features (accounting): - - Added two modes to AccountingRule in torrc for limiting just input - or just output. Closes ticket 15989; patch from "unixninja92". + - Added two modes to AccountingRule in torrc for limiting just the + number of bytes sent ("AccountingRule out") or the number of bytes + received ("AccountingRule in"). + Closes ticket 15989; patch from "unixninja92". o Minor features (build): - Since our build process now uses 'make distcheck', we no longer force "make dist" to depend on "make check". Closes ticket 17893; patch from "cypherpunks." - Repair some compilation issues with some recent (unreleased, - alpha) vesions of OpenSSL 1.1. Closes ticket 17549. + alpha) versions of OpenSSL 1.1. Closes ticket 17549. o Minor features (controller): - Adds FallbackDir entries to 'GETINFO config/defaults'. Closes

1 0

[tor-messenger-build/master] Update changelog for b443cc69
by arlo＠torproject.org 03 Feb '16

03 Feb '16

commit ef112518876a3a0b8da6d5d88da896a219f33ef9 Author: Arlo Breault <arlolra(a)gmail.com> Date: Tue Feb 2 16:21:11 2016 -0800 Update changelog for b443cc69 --- ChangeLog | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index c78ed29..92f886b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,7 @@ Tor Messenger -- * All Platforms - * Remove SPI root certificate because Debian no longer ships it (#13795) + * Bug 13795: Remove SPI root certificate because Debian no longer ships it + * Bug 18094: Remove references to torbutton from start-tor-messenger script Tor Messenger 0.1.0b4 -- November 22 2015 * All Platforms

1 0

[tor/master] draft a blurb, mostly stolen from 0.2.7.1-alpha
by nickm＠torproject.org 02 Feb '16

02 Feb '16

commit f087a895d31f72c74d415719eafd1ac55d3526d9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 2 13:57:55 2016 -0500 draft a blurb, mostly stolen from 0.2.7.1-alpha --- ChangeLog | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index d06f403..7179877 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,11 +1,15 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - XXXX Blurb goes here XXXX + Tor 0.2.8.1-alpha is the first alpha release in its series. It + includes numerous small features and bugfixes against previous Tor + versions, and numerous small infrastructure improvements. The most + notable features are a set of improvements to the directory + subsystem. o Major key updates: - Update the V3 identity key for dannenberg: it was changed on 18 November 2015. Closes task 17906. Patch by "teor". - o Removed features: + o Removed features: - Remove client-side support for connecting to Tor servers running versions of Tor before 0.2.3.6-alpha. These servers didn't support the v3 TLS handshake protocol, and are no longer allowed on the

1 0

[tor/master] Sort changelog more.
by nickm＠torproject.org 02 Feb '16

02 Feb '16

commit 15416596efba3653c0880c2d925ca2c314e10da7 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 2 12:46:57 2016 -0500 Sort changelog more. --- ChangeLog | 50 ++++++++++++++++++++------------------------------ 1 file changed, 20 insertions(+), 30 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5010e87..d06f403 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,17 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? XXXX Blurb goes here XXXX + o Major key updates: + - Update the V3 identity key for dannenberg: it was changed on 18 + November 2015. Closes task 17906. Patch by "teor". + + o Removed features: + - Remove client-side support for connecting to Tor servers running + versions of Tor before 0.2.3.6-alpha. These servers didn't support + the v3 TLS handshake protocol, and are no longer allowed on the + Tor network. Implements the client side of ticket 11150. Based on + patches by Tom van der Woerdt. + o Major features (security, Linux): - When Tor is started as root on Linux and told to switch user ID, it can now retain the capabilitity to bind to low ports. By @@ -8,7 +19,7 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? some low ports have been configured. You can change this behavior with the new option KeepBindCapabilities. Closes ticket 8195. - o Major features (consensus downloads): + o Major features (directory system): - Schedule multiple in-progress consensus downloads during client bootstrap. Use the first one that starts downloading, close the rest. This reduces failures when authorities are slow or down. @@ -16,26 +27,18 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? to fallback churn. Implements ticket 4483 (reduce failures when authorities are down). Patch by "teor". Implements IPv4 portions of proposal 210 by "mikeperry" and "teor". - - o Major features (directory mirrors): - Include an opt-in trial list of default fallback directories in add_default_fallback_dir_servers(). Doing this should improve client reliability and initial bootstrap performance, and reduce load on the directory authorities. Closes ticket 15775. Patch by "teor". OnionOO script by "weasel", "teor", "gsathya", and "karsten". - - o Major features (directory system): - Previously only relays who explicitly opened a directory port (DirPort) accepted directory requests from clients. Now all relays, with and without a DirPort, who do not disable the DirCache option accept and serve directory requests sent (tunnelled) through their ORPort. Closes ticket 12538. - o Major key updates: - - Update the V3 identity key for dannenberg: it was changed on 18 - November 2015. Closes task 17906. Patch by "teor". - o Minor features (security, clock): - Warn when the system clock is set back in time (when the state file was last written in the future). Tor doesn't know that @@ -104,6 +107,9 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? we actually need. Previously, we were allocating as much space as the state for the largest algorithm would need. This change saves up to 672 bytes per circuit. Closes ticket 17796. + - Improve performance when hashing non-multiple of 8 sized buffers, + based on Andrew Moon's Public Domain SipHash-2-4 implementation. + Fixes bug 17544; bugfix on 0.2.5.3-alpha. o Minor features (directory downloads): - Wait for busy authorities and fallbacks to become non-busy when @@ -162,11 +168,6 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - The replay cache now uses SHA256 instead of SHA1. Implements feature 8961. Patch by "teor", issue reported by "rransom". - o Minor features (SipHash-2-4 performance): - - Improve performance when hashing non-multiple of 8 sized buffers, - based on Andrew Moon's Public Domain SipHash-2-4 implementation. - Fixes bug 17544; bugfix on 0.2.5.3-alpha. - o Minor features (unix file permissions): - Defer creation of Unix sockets until after setuid. This avoids needing CAP_CHOWN and CAP_FOWNER when using systemd's @@ -187,11 +188,6 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? logged. Fixes bug 18024; bugfix on 0.2.6.1-alpha. Patch from "unixninja92". - o Minor bugfixes (build): - - Mark all object files that include micro-revision.i as depending - on it, so as to make our build more reliable with parallel builds. - Fixes bug 17826; bugfix on 0.2.5.1-alpha. - o Minor bugfixes (code correctness): - When closing an entry connection, generate a warning if we should have sent an end cell for it but we haven't. Fixes bug 17876; @@ -199,8 +195,13 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - Assert that allocated memory held by the reputation code is freed according to its internal counters. Fixes bug 17753; bugfix on tor-0.1.1.1-alpha. + - Assert when the TLS contexts fail to initialize. Fixes bug 17683; + bugfix on 0.0.6. o Minor bugfixes (compilation): + - Mark all object files that include micro-revision.i as depending + on it, so as to make our build more reliable with parallel builds. + Fixes bug 17826; bugfix on 0.2.5.1-alpha. - Don't try to use the pthrad_condattr_setclock() function unless it actually exists. Fixes compilation on NetBSD-6.x. Fixes bug 17819; bugfix on 0.2.6.3-alpha. @@ -291,10 +292,6 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - Check the full results of SHA256 and SHA512 digests in the unit tests. Bugfix on 0.2.2.4-alpha. Patch by "teor". - o Minor bugfixes (TLS context): - - Assert when the TLS contexts fail to initialize. Fixes bug 17683; - bugfix on 0.0.6. - o Code simplification and refactoring: - Move logging of redundant policy entries in policies_parse_exit_policy_internal into its own function. Closes @@ -330,13 +327,6 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? whenever we mention a document that belongs in torspce. Fixes issue 17392. - o Removed features: - - Remove client-side support for connecting to Tor servers running - versions of Tor before 0.2.3.6-alpha. These servers didn't support - the v3 TLS handshake protocol, and are no longer allowed on the - Tor network. Implements the client side of ticket 11150. Based on - patches by Tom van der Woerdt. - o Testing: - Add unit tests that check for common RNG failure modes, such as returning all zeroes, identical values, or incrementing values

1 0

[tor/master] Combine a bunch of items/sections in the 0.2.8.1-alpha changelog
by nickm＠torproject.org 02 Feb '16

02 Feb '16

commit b8171e9f85fdb3a37ae40c31c5ea3ff54c21264c Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Feb 1 23:54:38 2016 -0500 Combine a bunch of items/sections in the 0.2.8.1-alpha changelog --- ChangeLog | 206 ++++++++++++++++++++++++-------------------------------------- 1 file changed, 79 insertions(+), 127 deletions(-) diff --git a/ChangeLog b/ChangeLog index 12012aa..d0e2908 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,17 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? XXXX Blurb goes here XXXX + o Removed features: + - Remove client-side support for connecting to Tor servers running + versions of Tor before 0.2.3.6-alpha. These servers didn't support + the v3 TLS handshake protocol, and are no longer allowed on the + Tor network. Implements the client side of ticket 11150. Based on + patches by Tom van der Woerdt. + + o Major key updates: + - Update the V3 identity key for dannenberg: it was changed on 18 + November 2015. Closes task 17906. Patch by "teor". + o Major features (consensus downloads): - Schedule multiple in-progress consensus downloads during client bootstrap. Use the first one that starts downloading, close the @@ -10,27 +21,22 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? authorities are down). Patch by "teor". Implements IPv4 portions of proposal 210 by "mikeperry" and "teor". - o Major features (controller): - - New "GETINFO hs/service/desc/id/" command to retrieve a hidden - service descriptor from a service's local hidden service - descriptor cache. Closes ticket 14846. - o Major features (directory mirrors): - - Include an opt-in trial list of Default Fallback Directories in + - Include an opt-in trial list of default fallback directories in add_default_fallback_dir_servers(). Doing this should improve client reliability and initial bootstrap performance, and reduce load on the directory authorities. Closes ticket 15775. Patch by "teor". OnionOO script by "weasel", "teor", "gsathya", and "karsten". - o Major features (relay): + o Major features (security, Linux): - When Tor is started as root on Linux and told to switch user ID, it can now retain the capabilitity to bind to low ports. By default, Tor will do this only when it's switching user ID and some low ports have been configured. You can change this behavior with the new option KeepBindCapabilities. Closes ticket 8195. - o Minor features (security): + o Minor features (security, RNG): - Adjust Tor's use of OpenSSL's RNG APIs so that they absolutely, positively are not allowed to fail. Previously we depended on internals about OpenSSL behavior. Closes ticket 17686. @@ -39,6 +45,10 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? of using system entropy directly, hash it with the PRNG stream. This may help resist certain attacks based on broken OS entropy implementations. Closes part of ticket 17694. + - Use modern system calls to generate strong entropy on platforms + that provide them. Closes ticket 13696. + + o Minor features (security, memory erasure): - Set unused entires in a smartlist to NULL. This helped catch a (harmless) bug, and shouldn't affect performance too much. Implements ticket 17026. @@ -47,6 +57,10 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - Use explicit_bzero or memset_s when present. Previously, we'd use OpenSSL's OPENSSL_cleanse() function. Closes ticket 7419; patches from <logan(a)hackers.mu> and <selven(a)hackers.mu>. + - Make memwipe() do nothing when passed a NULL pointer or zero size. + Check size argument to memwipe() for underflow. Fixes bug 18089; + bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", patch + by "teor". o Minor features (security, clock): - Warn when the system clock is set back in time (when the state @@ -54,26 +68,25 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? consensuses have expired if the clock is in the past. Patch by "teor". Implements ticket 17188. - o Minor features (security, cryptography): - - Use modern system calls to generate strong entropy on platforms - that provide them. Closes ticket 13696. - - o Minor feature (crypto): + o Minor features (crypto): - Add SHA512 support to crypto.c. Closes ticket 17663; patch from George Tankersley. + - Add SHA3 and SHAKE support to crypto.c. Closes ticket 17783. + - When allocating a digest state object, allocate no more space than + we actually need. Previously, we were allocating as much space as + the state for the largest algorithm would need. This change saves + up to 672 bytes per circuit. Closes ticket 17796. - o Minor feature (directory downloads): + o Minor features (directory downloads): - Wait for busy authorities and fallbacks to become non-busy when bootstrapping. (A similar change was made in 6c443e987d for directory servers chosen from the consensus.) Closes ticket 17864; patch by "teor". - - o Minor feature (fallback directories): - Add UseDefaultFallbackDirs, which enables any hard-coded fallback directory mirrors. Default is 1, set it to 0 to disable fallbacks. Implements ticket 17576. Patch by "teor". - o Minor feature (IPv6): + o Minor features (IPv6): - Add a flag ipv6=address:orport to the DirAuthority and FallbackDir torrc options. Add hard-coded ipv6 addresses for directory authorities with ipv6 lines in their descriptors. Closes ticket @@ -82,73 +95,53 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - Limit IPv6 mask bits to 128. - Warn when comparing against an AF_UNSPEC address in a policy, it's almost always a bug. Closes ticket 17863; patch by "teor". + - Allow users to configure directory authorities and fallback + directory servers with IPv6 addresses and ORPorts. Resolves + ticket 6027. + - routerset_parse now accepts IPv6 literal addresses. Fixes bug + 17060; bugfix on 0.2.1.3-alpha. Patch by "teor". + - Make tor_ersatz_socketpair work on IPv6-only systems. Fixes bug + 17638; bugfix on 0.0.2pre8. Patch by "teor". - o Minor feature (logging): + o Minor features (logging): - When logging to syslog, allow a tag to be added to the syslog - identity ("Tor"), i.e. the string prepended to every log message. - The tag can be configured by setting SyslogIdentityTag and + identity (the string prepended to every log message). + The tag can be configured with SyslogIdentityTag and defaults to none. Setting it to "foo" will cause logs to be tagged as "Tor-foo". Closes ticket 17194. - o Minor feature (refactoring): - - Move logging of redundant policy entries in - policies_parse_exit_policy_internal into its own function. Closes - ticket 17608; patch from "juce". - o Minor features (accounting): - Added two modes to AccountingRule in torrc for limiting just input or just output. Closes ticket 15989; patch from "unixninja92". - o Minor features (authorities): - - Update the V3 identity key for dannenberg: it was changed on 18 - November 2015. Closes task 17906. Patch by "teor". - o Minor features (build): - Since our build process now uses 'make distcheck', we no longer force "make dist" to depend on "make check". Closes ticket 17893; patch from "cypherpunks." - - o Minor features (compilation): - Repair some compilation issues with some recent (unreleased, alpha) vesions of OpenSSL 1.1. Closes ticket 17549. o Minor features (controller): - Adds FallbackDir entries to 'GETINFO config/defaults'. Closes tickets 16774 and 17817. Patch by George Tankersley. + - New "GETINFO hs/service/desc/id/" command to retrieve a hidden + service descriptor from a service's local hidden service + descriptor cache. Closes ticket 14846. + - Add controller getinfo exit-policy/reject-private/[default,relay] + for the reject rules added by ExitPolicyRejectPrivate. This makes + it easier for stem to display exit policies. - o Minor features (crypto): - - When allocating a digest state object, allocate no more space than - we actually need. Previously, we were allocating as much space as - the state for the largest algorithm would need. This change saves - up to 672 bytes per circuit. Closes ticket 17796. - - o Minor features (directory system): + o Major features (directory system): - Previously only relays who explicitly opened a directory port (DirPort) accepted directory requests from clients. Now all relays, with and without a DirPort, who do not disable the DirCache option accept and serve directory requests sent (tunnelled) through their ORPort. Closes ticket 12538. - o Minor features (exit policies, controllers): - - Add controller getinfo exit-policy/reject-private/[default,relay] - for the reject rules added by ExitPolicyRejectPrivate. This makes - it easier for stem to display exit policies. - - Add unit tests for getinfo exit-policy/*. Finishes implementation - for ticket 17183. Patch by "teor". - - o Minor features (fallback directories): - - Add a set of default fallback directories for the 0.2.8 alpha - releases. Closes ticket 17158. Patch by "teor". - o Minor features (geoip): - Update geoip and geoip6 to the January 5 2016 Maxmind GeoLite2 Country database. - o Minor features (IPv6 support): - - Allow users to configure directory authorities and fallback - directory servers with IPv6 addresses and ORPorts. Resolves - ticket 6027. - o Minor features (portability): - Use timingsafe_memcmp() where available. Closes ticket 17944; patch from <logan(a)hackers.mu>. @@ -165,20 +158,11 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? find out what IP addresses (both IPv4 and IPv6) our machine has. Resolves ticket 17951. - o Minor features (replaycache): + o Minor features (replay cache): - The replay cache now uses SHA256 instead of SHA1. Implements feature 8961. Patch by "teor", issue reported by "rransom". - o Minor features (testing): - - Log more information when the backtrace tests fail. Closes ticket - 17892. Patch from "cypherpunks." - - o Minor features (unit tests, random number generation): - - Add unit tests that check for common RNG failure modes, such as - returning all zeroes, identical values, or incrementing values - (OpenSSL's rand_predictable feature). Patch by "teor". - - o Minor features (unix permissions): + o Minor features (unix file permissions): - Defer creation of Unix sockets until after setuid. This avoids needing CAP_CHOWN and CAP_FOWNER when using systemd's CapabilityBoundingSet, or chown and fowner when using SELinux. @@ -193,57 +177,49 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? DataDirectory will be made readable by the default GID. Implements part of ticket 17562. Patch from Jamie Nguyen. - o Minor bugfixes (security): - - Make memwipe() do nothing when passed a NULL pointer or zero size. - Check size argument to memwipe() for underflow. Fixes bug 18089; - bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", patch - by "teor". - - o Minor bugfixes (security, exit policies): + o Minor features (security, exit policies): - ExitPolicyRejectPrivate rejects more private addresses by default. Specifically, it rejects the relay's outbound bind addresses (if configured), and the relay's configured port addresses (such as ORPort and DirPort). Fixes bug 17027; bugfix on 0.2.0.11-alpha. Patch by "teor". - o Minor bugfix (crypto): - - Check the return value of HMAC and assert on failure. Fixes bug + o Minor bugfixes (crypto): + - Check the return value of HMAC() and assert on failure. Fixes bug 17658; bugfix on 0.2.3.6-alpha. Patch by "teor". - o Minor bugfix (fallback directories): + o Minor bugfixes (fallback directories): - Mark fallbacks as "too busy" when they return a 503 response, rather than just marking authorities. Fixes bug 17572; bugfix on - 5c51b3f1f0d4 released in 0.2.4.7-alpha. Patch by "teor". - - o Minor bugfix (IPv6 compatibility, unit tests): - - Make tor_ersatz_socketpair work on IPv6-only systems. Fixes bug - 17638; bugfix on 0.0.2pre8. Patch by "teor". + 0.2.4.7-alpha. Patch by "teor". - o Minor bugfix (relays, hidden services): + o Minor bugfixes (relays, hidden services): - Refuse connection requests to private OR addresses unless ExtendAllowPrivateAddresses is set. Previously, tor would connect, then refuse to send any cells to a private address. Fixes bugs 17674 and 8976; bugfix on 0.2.3.21-rc. Patch by "teor". - o Minor bugfix (SipHash-2-4 performance): + o Minor features (SipHash-2-4 performance): - Improve performance when hashing non-multiple of 8 sized buffers, based on Andrew Moon's Public Domain SipHash-2-4 implementation. Fixes bug 17544; bugfix on 0.2.5.3-alpha. - o Minor bugfix (testing): + o Minor bugfixes (testing): - The test for log_heartbeat was incorrectly failing in timezones with non-integer offsets. Instead of comparing the end of the time string against a constant, compare it to the output of format_local_iso_time when given the correct input. Fixes bug 18039; bugfix on 0.2.5.4-alpha. - - o Minor bugfix (unit tests): - Make unit tests pass on IPv6-only systems, and systems without localhost addresses (like some FreeBSD jails). Fixes bug 17632; bugfix on 0.2.7.3-rc. Patch by "teor". + - Fix a memory leak in the ntor test. Fixes bug 17778; bugfix + on 0.2.4.8-alpha. + - Check the full results of SHA256 and SHA512 digests in the unit + tests. Bugfix on 0.2.2.4-alpha. Patch by "teor". o Minor bugfixes (accounting): - - The max bandwidth when using AccountRule sum is now correctly + - The max bandwidth when using 'AccountRule sum' is now correctly logged. Fixes bug 18024; bugfix on 0.2.6.1-alpha. Patch from "unixninja92". @@ -252,12 +228,10 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? on it, so as to make our build more reliable with parallel builds. Fixes bug 17826; bugfix on 0.2.5.1-alpha. - o Minor bugfixes (client, correctness): + o Minor bugfixes (code correctness): - When closing an entry connection, generate a warning if we should have sent an end cell for it but we haven't. Fixes bug 17876; bugfix on 0.2.3.2-alpha. - - o Minor bugfixes (code correctness): - Assert that allocated memory held by the reputation code is freed according to its internal counters. Fixes bug 17753; bugfix on tor-0.1.1.1-alpha. @@ -277,6 +251,8 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? build system. Fixes bug 17818; bugfix on tor-0.2.7.3-rc. - Replace usage of 'INLINE' with 'inline'. Fixes bug 17804; bugfix on tor-0.0.2pre8. + - Remove config.log only from make distclean, not from make clean. + Fixes bug 17924; bugfix on 0.2.4.1-alpha. o Minor bugfixes (IPv6): - Update the limits in max_dl_per_request for IPv6 address length. @@ -295,10 +271,6 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - Remove needless quotes from a log message about unparseable addresses. Fixes bug 17843; bugfix on 0.2.3.3-alpha. - o Minor bugfixes (makefile): - - Remove config.log only from make distclean, not from make clean. - Fixes bug 17924; bugfix on 0.2.4.1-alpha. - o Minor bugfixes (portability): - Remove an #endif from configure.ac so that we correctly detect the presence of in6_addr.s6_addr32. Fixes bug 17923; bugfix @@ -311,10 +283,6 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? longer than the ORPort reachability test. Fixes bug 18050; bugfix on 0.1.0.1-rc. Reported by "starlight", patch by "teor". - o Minor bugfixes (routersets, IPv6): - - routerset_parse now accepts IPv6 literal addresses. Fixes bug - 17060; bugfix on 0.2.1.3-alpha. Patch by "teor". - o Minor bugfixes (safe logging): - When logging a malformed hostname received through socks4, scrub it if SafeLogging says we should. Fixes bug 17419; bugfix @@ -330,19 +298,14 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? cases with maximal values. Fixes part of bug 13192; bugfix on 0.2.6.2-alpha. - o Minor bugfixes (tests): - - Fix a memory leak in the ntor test. Fixes bug 17778; bugfix - on 0.2.4.8-alpha. - o Minor bugfixes (TLS context): - Assert when the TLS contexts fail to initialize. Fixes bug 17683; bugfix on 0.0.6. - o Minor bugfixes (unit tests): - - Check the full results of SHA256 and SHA512 digests in the unit - tests. Bugfix on 0.2.2.4-alpha. Patch by "teor". - o Code simplification and refactoring: + - Move logging of redundant policy entries in + policies_parse_exit_policy_internal into its own function. Closes + ticket 17608; patch from "juce". - Extract the more complicated parts of circuit_mark_for_close into a new function run periodically before connections are freed. This change removes more than half of the functions currently in the @@ -360,7 +323,9 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? launches it, instead mark the connection for teardown. This change simplifies Tor's callback and prevents the directory- request launching code from invoking itself recursively. Closes - ticket 17589. + ticket 17589 + - Remove code for OpenSSL dynamic locks; OpenSSL doesn't use them. + Closes ticket 17926. o Documentation: - Add a description of the correct use of the '--keygen' command- @@ -372,32 +337,19 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? whenever we mention a document that belongs in torspce. Fixes issue 17392. - o Removed features: - - Remove client-side support for connecting to Tor servers running - versions of Tor before 0.2.3.6-alpha. These servers didn't support - the v3 TLS handshake protocol, and are no longer allowed on the - Tor network. Implements the client side of ticket 11150. Based on - patches by Tom van der Woerdt. - - Remove code for OpenSSL dynamic locks; OpenSSL doesn't use them. - Closes ticket 17926. - o Testing: + - Add unit tests that check for common RNG failure modes, such as + returning all zeroes, identical values, or incrementing values + (OpenSSL's rand_predictable feature). Patch by "teor". + - Log more information when the backtrace tests fail. Closes ticket + 17892. Patch from "cypherpunks." - Always test both ed25519 backends, so that we can be sure that our batch-open replacement code works. Part of ticket 16794. - Cover dns_resolve_impl() in dns.c with unit tests. Implements a portion of ticket 16831. - - More unit tests for compat_libevent.c. Closes ticket 17075. Patch - from Ola Bini. - - More unit tests for procmon.c. Closes ticket 17078. Patch from - Ola Bini. - - More unit tests for tortls.c. Closes ticket 17082. Patch from - Ola Bini. - - More unit tests for util_format.c. Closes ticket 17084. Patch from - Ola Bini. - - New tests for directory.c functions. Closes ticket 17003. Patch - from Ola Bini. - - New tests for options_validate. Closes ticket 17076. Patch from - Ola Bini. + - More unit tests for compat_libevent.c, procmon.c, tortls.c, + util_format.c, directory.c, and options_validate.c. Closes tickets 17075, + 17082, 17084, 17003, and 17076 respectively. Patches from Ola Bini. - Unit tests for directory_handle_command_get. Closes ticket 17004. Patch from Reinaldo de Souza Jr.

1 0

[tor/master] Re-run formatChangelog.py
by nickm＠torproject.org 02 Feb '16

02 Feb '16

commit 937afe746f017c0b386e02fb139f4c47092cd1d0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Feb 1 23:55:16 2016 -0500 Re-run formatChangelog.py --- ChangeLog | 223 +++++++++++++++++++++++++++++++------------------------------- 1 file changed, 112 insertions(+), 111 deletions(-) diff --git a/ChangeLog b/ChangeLog index d0e2908..5010e87 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,16 +1,12 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? XXXX Blurb goes here XXXX - o Removed features: - - Remove client-side support for connecting to Tor servers running - versions of Tor before 0.2.3.6-alpha. These servers didn't support - the v3 TLS handshake protocol, and are no longer allowed on the - Tor network. Implements the client side of ticket 11150. Based on - patches by Tom van der Woerdt. - - o Major key updates: - - Update the V3 identity key for dannenberg: it was changed on 18 - November 2015. Closes task 17906. Patch by "teor". + o Major features (security, Linux): + - When Tor is started as root on Linux and told to switch user ID, + it can now retain the capabilitity to bind to low ports. By + default, Tor will do this only when it's switching user ID and + some low ports have been configured. You can change this behavior + with the new option KeepBindCapabilities. Closes ticket 8195. o Major features (consensus downloads): - Schedule multiple in-progress consensus downloads during client @@ -29,24 +25,29 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? "teor". OnionOO script by "weasel", "teor", "gsathya", and "karsten". - o Major features (security, Linux): - - When Tor is started as root on Linux and told to switch user ID, - it can now retain the capabilitity to bind to low ports. By - default, Tor will do this only when it's switching user ID and - some low ports have been configured. You can change this behavior - with the new option KeepBindCapabilities. Closes ticket 8195. + o Major features (directory system): + - Previously only relays who explicitly opened a directory port + (DirPort) accepted directory requests from clients. Now all + relays, with and without a DirPort, who do not disable the + DirCache option accept and serve directory requests sent + (tunnelled) through their ORPort. Closes ticket 12538. - o Minor features (security, RNG): - - Adjust Tor's use of OpenSSL's RNG APIs so that they absolutely, - positively are not allowed to fail. Previously we depended on - internals about OpenSSL behavior. Closes ticket 17686. - - Never use the system entropy output directly for anything besides - seeding the PRNG. When we want to generate important keys, instead - of using system entropy directly, hash it with the PRNG stream. - This may help resist certain attacks based on broken OS entropy - implementations. Closes part of ticket 17694. - - Use modern system calls to generate strong entropy on platforms - that provide them. Closes ticket 13696. + o Major key updates: + - Update the V3 identity key for dannenberg: it was changed on 18 + November 2015. Closes task 17906. Patch by "teor". + + o Minor features (security, clock): + - Warn when the system clock is set back in time (when the state + file was last written in the future). Tor doesn't know that + consensuses have expired if the clock is in the past. Patch by + "teor". Implements ticket 17188. + + o Minor features (security, exit policies): + - ExitPolicyRejectPrivate rejects more private addresses by default. + Specifically, it rejects the relay's outbound bind addresses (if + configured), and the relay's configured port addresses (such as + ORPort and DirPort). Fixes bug 17027; bugfix on 0.2.0.11-alpha. + Patch by "teor". o Minor features (security, memory erasure): - Set unused entires in a smartlist to NULL. This helped catch @@ -62,11 +63,38 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", patch by "teor". - o Minor features (security, clock): - - Warn when the system clock is set back in time (when the state - file was last written in the future). Tor doesn't know that - consensuses have expired if the clock is in the past. Patch by - "teor". Implements ticket 17188. + o Minor features (security, RNG): + - Adjust Tor's use of OpenSSL's RNG APIs so that they absolutely, + positively are not allowed to fail. Previously we depended on + internals about OpenSSL behavior. Closes ticket 17686. + - Never use the system entropy output directly for anything besides + seeding the PRNG. When we want to generate important keys, instead + of using system entropy directly, hash it with the PRNG stream. + This may help resist certain attacks based on broken OS entropy + implementations. Closes part of ticket 17694. + - Use modern system calls to generate strong entropy on platforms + that provide them. Closes ticket 13696. + + o Minor features (accounting): + - Added two modes to AccountingRule in torrc for limiting just input + or just output. Closes ticket 15989; patch from "unixninja92". + + o Minor features (build): + - Since our build process now uses 'make distcheck', we no longer + force "make dist" to depend on "make check". Closes ticket 17893; + patch from "cypherpunks." + - Repair some compilation issues with some recent (unreleased, + alpha) vesions of OpenSSL 1.1. Closes ticket 17549. + + o Minor features (controller): + - Adds FallbackDir entries to 'GETINFO config/defaults'. Closes + tickets 16774 and 17817. Patch by George Tankersley. + - New "GETINFO hs/service/desc/id/" command to retrieve a hidden + service descriptor from a service's local hidden service + descriptor cache. Closes ticket 14846. + - Add controller getinfo exit-policy/reject-private/[default,relay] + for the reject rules added by ExitPolicyRejectPrivate. This makes + it easier for stem to display exit policies. o Minor features (crypto): - Add SHA512 support to crypto.c. Closes ticket 17663; patch from @@ -86,6 +114,10 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? directory mirrors. Default is 1, set it to 0 to disable fallbacks. Implements ticket 17576. Patch by "teor". + o Minor features (geoip): + - Update geoip and geoip6 to the January 5 2016 Maxmind GeoLite2 + Country database. + o Minor features (IPv6): - Add a flag ipv6=address:orport to the DirAuthority and FallbackDir torrc options. Add hard-coded ipv6 addresses for directory @@ -105,42 +137,10 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? o Minor features (logging): - When logging to syslog, allow a tag to be added to the syslog - identity (the string prepended to every log message). - The tag can be configured with SyslogIdentityTag and - defaults to none. Setting it to "foo" will cause logs to be tagged - as "Tor-foo". Closes ticket 17194. - - o Minor features (accounting): - - Added two modes to AccountingRule in torrc for limiting just input - or just output. Closes ticket 15989; patch from "unixninja92". - - o Minor features (build): - - Since our build process now uses 'make distcheck', we no longer - force "make dist" to depend on "make check". Closes ticket 17893; - patch from "cypherpunks." - - Repair some compilation issues with some recent (unreleased, - alpha) vesions of OpenSSL 1.1. Closes ticket 17549. - - o Minor features (controller): - - Adds FallbackDir entries to 'GETINFO config/defaults'. Closes - tickets 16774 and 17817. Patch by George Tankersley. - - New "GETINFO hs/service/desc/id/" command to retrieve a hidden - service descriptor from a service's local hidden service - descriptor cache. Closes ticket 14846. - - Add controller getinfo exit-policy/reject-private/[default,relay] - for the reject rules added by ExitPolicyRejectPrivate. This makes - it easier for stem to display exit policies. - - o Major features (directory system): - - Previously only relays who explicitly opened a directory port - (DirPort) accepted directory requests from clients. Now all - relays, with and without a DirPort, who do not disable the - DirCache option accept and serve directory requests sent - (tunnelled) through their ORPort. Closes ticket 12538. - - o Minor features (geoip): - - Update geoip and geoip6 to the January 5 2016 Maxmind GeoLite2 - Country database. + identity (the string prepended to every log message). The tag can + be configured with SyslogIdentityTag and defaults to none. Setting + it to "foo" will cause logs to be tagged as "Tor-foo". Closes + ticket 17194. o Minor features (portability): - Use timingsafe_memcmp() where available. Closes ticket 17944; @@ -162,6 +162,11 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - The replay cache now uses SHA256 instead of SHA1. Implements feature 8961. Patch by "teor", issue reported by "rransom". + o Minor features (SipHash-2-4 performance): + - Improve performance when hashing non-multiple of 8 sized buffers, + based on Andrew Moon's Public Domain SipHash-2-4 implementation. + Fixes bug 17544; bugfix on 0.2.5.3-alpha. + o Minor features (unix file permissions): - Defer creation of Unix sockets until after setuid. This avoids needing CAP_CHOWN and CAP_FOWNER when using systemd's @@ -177,47 +182,6 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? DataDirectory will be made readable by the default GID. Implements part of ticket 17562. Patch from Jamie Nguyen. - o Minor features (security, exit policies): - - ExitPolicyRejectPrivate rejects more private addresses by default. - Specifically, it rejects the relay's outbound bind addresses (if - configured), and the relay's configured port addresses (such as - ORPort and DirPort). Fixes bug 17027; bugfix on 0.2.0.11-alpha. - Patch by "teor". - - o Minor bugfixes (crypto): - - Check the return value of HMAC() and assert on failure. Fixes bug - 17658; bugfix on 0.2.3.6-alpha. Patch by "teor". - - o Minor bugfixes (fallback directories): - - Mark fallbacks as "too busy" when they return a 503 response, - rather than just marking authorities. Fixes bug 17572; bugfix on - 0.2.4.7-alpha. Patch by "teor". - - o Minor bugfixes (relays, hidden services): - - Refuse connection requests to private OR addresses unless - ExtendAllowPrivateAddresses is set. Previously, tor would connect, - then refuse to send any cells to a private address. Fixes bugs - 17674 and 8976; bugfix on 0.2.3.21-rc. Patch by "teor". - - o Minor features (SipHash-2-4 performance): - - Improve performance when hashing non-multiple of 8 sized buffers, - based on Andrew Moon's Public Domain SipHash-2-4 implementation. - Fixes bug 17544; bugfix on 0.2.5.3-alpha. - - o Minor bugfixes (testing): - - The test for log_heartbeat was incorrectly failing in timezones - with non-integer offsets. Instead of comparing the end of the time - string against a constant, compare it to the output of - format_local_iso_time when given the correct input. Fixes bug - 18039; bugfix on 0.2.5.4-alpha. - - Make unit tests pass on IPv6-only systems, and systems without - localhost addresses (like some FreeBSD jails). Fixes bug 17632; - bugfix on 0.2.7.3-rc. Patch by "teor". - - Fix a memory leak in the ntor test. Fixes bug 17778; bugfix - on 0.2.4.8-alpha. - - Check the full results of SHA256 and SHA512 digests in the unit - tests. Bugfix on 0.2.2.4-alpha. Patch by "teor". - o Minor bugfixes (accounting): - The max bandwidth when using 'AccountRule sum' is now correctly logged. Fixes bug 18024; bugfix on 0.2.6.1-alpha. Patch @@ -254,6 +218,15 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - Remove config.log only from make distclean, not from make clean. Fixes bug 17924; bugfix on 0.2.4.1-alpha. + o Minor bugfixes (crypto): + - Check the return value of HMAC() and assert on failure. Fixes bug + 17658; bugfix on 0.2.3.6-alpha. Patch by "teor". + + o Minor bugfixes (fallback directories): + - Mark fallbacks as "too busy" when they return a 503 response, + rather than just marking authorities. Fixes bug 17572; bugfix on + 0.2.4.7-alpha. Patch by "teor". + o Minor bugfixes (IPv6): - Update the limits in max_dl_per_request for IPv6 address length. Fixes bug 17573; bugfix on 0.2.1.5-alpha. @@ -283,6 +256,12 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? longer than the ORPort reachability test. Fixes bug 18050; bugfix on 0.1.0.1-rc. Reported by "starlight", patch by "teor". + o Minor bugfixes (relays, hidden services): + - Refuse connection requests to private OR addresses unless + ExtendAllowPrivateAddresses is set. Previously, tor would connect, + then refuse to send any cells to a private address. Fixes bugs + 17674 and 8976; bugfix on 0.2.3.21-rc. Patch by "teor". + o Minor bugfixes (safe logging): - When logging a malformed hostname received through socks4, scrub it if SafeLogging says we should. Fixes bug 17419; bugfix @@ -298,6 +277,20 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? cases with maximal values. Fixes part of bug 13192; bugfix on 0.2.6.2-alpha. + o Minor bugfixes (testing): + - The test for log_heartbeat was incorrectly failing in timezones + with non-integer offsets. Instead of comparing the end of the time + string against a constant, compare it to the output of + format_local_iso_time when given the correct input. Fixes bug + 18039; bugfix on 0.2.5.4-alpha. + - Make unit tests pass on IPv6-only systems, and systems without + localhost addresses (like some FreeBSD jails). Fixes bug 17632; + bugfix on 0.2.7.3-rc. Patch by "teor". + - Fix a memory leak in the ntor test. Fixes bug 17778; bugfix + on 0.2.4.8-alpha. + - Check the full results of SHA256 and SHA512 digests in the unit + tests. Bugfix on 0.2.2.4-alpha. Patch by "teor". + o Minor bugfixes (TLS context): - Assert when the TLS contexts fail to initialize. Fixes bug 17683; bugfix on 0.0.6. @@ -337,6 +330,13 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? whenever we mention a document that belongs in torspce. Fixes issue 17392. + o Removed features: + - Remove client-side support for connecting to Tor servers running + versions of Tor before 0.2.3.6-alpha. These servers didn't support + the v3 TLS handshake protocol, and are no longer allowed on the + Tor network. Implements the client side of ticket 11150. Based on + patches by Tom van der Woerdt. + o Testing: - Add unit tests that check for common RNG failure modes, such as returning all zeroes, identical values, or incrementing values @@ -348,8 +348,9 @@ Changes in version 0.2.8.1-alpha - 2016-02-0? - Cover dns_resolve_impl() in dns.c with unit tests. Implements a portion of ticket 16831. - More unit tests for compat_libevent.c, procmon.c, tortls.c, - util_format.c, directory.c, and options_validate.c. Closes tickets 17075, - 17082, 17084, 17003, and 17076 respectively. Patches from Ola Bini. + util_format.c, directory.c, and options_validate.c. Closes tickets + 17075, 17082, 17084, 17003, and 17076 respectively. Patches from + Ola Bini. - Unit tests for directory_handle_command_get. Closes ticket 17004. Patch from Reinaldo de Souza Jr.

1 0

[stem/master] Proc unit testing failure under python3
by atagar＠torproject.org 02 Feb '16

02 Feb '16

commit 9e0369d68547ec8f128a7472be0ddc8bbe0d3e93 Author: Damian Johnson <atagar(a)torproject.org> Date: Tue Feb 2 07:59:52 2016 -0800 Proc unit testing failure under python3 Simple bytes/unicode error in our tests. This caused a couple proc tests to fail under python3... ====================================================================== ERROR: test_connections_ipv6 ---------------------------------------------------------------------- Traceback (most recent call last): File "/home/atagar/Desktop/stem/stem/util/proc.py", line 370, in connections with open(proc_file_path, 'rb') as proc_file: File "/usr/local/lib/python3.2/dist-packages/mock/mock.py", line 1062, in __call__ return _mock_self._mock_call(*args, **kwargs) File "/usr/local/lib/python3.2/dist-packages/mock/mock.py", line 1128, in _mock_call ret_val = effect(*args, **kwargs) File "/home/atagar/Desktop/stem/test/unit/util/proc.py", line 262, in <lambda> '/proc/net/tcp': io.BytesIO(''), TypeError: 'str' does not support the buffer interface --- test/unit/util/proc.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/test/unit/util/proc.py b/test/unit/util/proc.py index a828981..e8858f1 100644 --- a/test/unit/util/proc.py +++ b/test/unit/util/proc.py @@ -259,9 +259,9 @@ class TestProc(unittest.TestCase): }[param] open_mock.side_effect = lambda param, mode: { - '/proc/net/tcp': io.BytesIO(''), + '/proc/net/tcp': io.BytesIO(b''), '/proc/net/tcp6': io.BytesIO(TCP6_CONTENT), - '/proc/net/udp': io.BytesIO(''), + '/proc/net/udp': io.BytesIO(b''), }[param] expected_results = [ @@ -287,9 +287,9 @@ class TestProc(unittest.TestCase): }[param] open_mock.side_effect = lambda param, mode: { - '/proc/net/tcp': io.BytesIO(''), + '/proc/net/tcp': io.BytesIO(b''), '/proc/net/tcp6': io.BytesIO(TCP6_CONTENT), - '/proc/net/udp': io.BytesIO(''), + '/proc/net/udp': io.BytesIO(b''), }[param] expected_results = [

1 0

[stem/master] Python3 regression in socket's recv_message()
by atagar＠torproject.org 02 Feb '16

02 Feb '16

commit 05bd17003bf86362b03cb487f4277f312b428fc2 Author: Damian Johnson <atagar(a)torproject.org> Date: Tue Feb 2 07:52:20 2016 -0800 Python3 regression in socket's recv_message() Oops, shame on me for not testing with python3. Recent log truncation change introduced a regression... ====================================================================== ERROR: test_hs_desc_content_event ---------------------------------------------------------------------- Traceback (most recent call last): File "/home/atagar/Desktop/stem/test/unit/response/events.py", line 877, in test_hs_desc_content_event event = _get_event(HS_DESC_CONTENT_EVENT) File "/home/atagar/Desktop/stem/test/unit/response/events.py", line 458, in _get_event controller_event = mocking.get_message(content) File "/home/atagar/Desktop/stem/test/mocking.py", line 259, in get_message return stem.response.ControlMessage.from_str(content) File "/home/atagar/Desktop/stem/stem/response/__init__.py", line 160, in from_str msg = stem.socket.recv_message(StringIO(content)) File "/home/atagar/Desktop/stem/stem/socket.py", line 601, in recv_message print([b'... %i more lines...' % (len(log_message_lines) - TRUNCATE_LOGS)]) TypeError: unsupported operand type(s) for %: 'bytes' and 'int' ---------------------------------------------------------------------- Thanks to toralf for pointing this out. Trouble is that under python3 bytes doesn't support % formatting at all... >>> b'hi %i' % 5 Traceback (most recent call last): File "<stdin>", line 1, in <module> TypeError: unsupported operand type(s) for %: 'bytes' and 'int' This is pretty pesky, and something they plan to change... http://legacy.python.org/dev/peps/pep-0461/ --- stem/socket.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/stem/socket.py b/stem/socket.py index de57c7d..4537ea6 100644 --- a/stem/socket.py +++ b/stem/socket.py @@ -592,15 +592,15 @@ def recv_message(control_file): parsed_content.append((status_code, divider, content)) raw_content_str = b''.join(raw_content) - log_message = raw_content_str.replace(b'\r\n', b'\n').rstrip() + log_message = stem.util.str_tools._to_unicode(raw_content_str.replace(b'\r\n', b'\n').rstrip()) if TRUNCATE_LOGS: - log_message_lines = log_message.split(b'\n') + log_message_lines = log_message.split('\n') if len(log_message_lines) > TRUNCATE_LOGS: - log_message = b'\n'.join(log_message_lines[:TRUNCATE_LOGS] + [b'... %i more lines...' % (len(log_message_lines) - TRUNCATE_LOGS)]) + log_message = '\n'.join(log_message_lines[:TRUNCATE_LOGS] + ['... %i more lines...' % (len(log_message_lines) - TRUNCATE_LOGS)]) - log.trace('Received from tor:\n' + stem.util.str_tools._to_unicode(log_message)) + log.trace('Received from tor:\n' + log_message) return stem.response.ControlMessage(parsed_content, raw_content_str) elif divider == '+':

1 0