tor-commits June 2016

tor-commits@lists.torproject.org

20 participants
1204 discussions

[tor/master] whoops; blank line
by nickm＠torproject.org 15 Jun '16

15 Jun '16

commit 05e2750ea710b26b737c25bb9c7b43c2ad7e8062 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Jun 14 20:21:59 2016 -0400 whoops; blank line --- src/test/test_tortls.c | 1 - 1 file changed, 1 deletion(-) diff --git a/src/test/test_tortls.c b/src/test/test_tortls.c index f8fd7af..3a048fb 100644 --- a/src/test/test_tortls.c +++ b/src/test/test_tortls.c @@ -12,7 +12,6 @@ #include "compat.h" - /* Some versions of OpenSSL declare SSL_get_selected_srtp_profile twice in * srtp.h. Suppress the GCC warning so we can build with -Wredundant-decl. */ DISABLE_GCC_WARNING(redundant-decls)

1 0

[tor/release-0.2.8] Resolve the remaining openssl "-Wredundant-decls" warnings.
by nickm＠torproject.org 15 Jun '16

15 Jun '16

commit d6b01211b94d0f346a408eef78e04a8d0ffbb51f Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Jun 14 20:14:53 2016 -0400 Resolve the remaining openssl "-Wredundant-decls" warnings. Another part of 19406 --- src/common/aes.c | 22 ++++++++++++++++++++++ src/common/crypto.c | 21 +++++++++++++++++++++ src/test/test_microdesc.c | 21 +++++++++++++++++++++ 3 files changed, 64 insertions(+) diff --git a/src/common/aes.c b/src/common/aes.c index c8a17c8..15970a7 100644 --- a/src/common/aes.c +++ b/src/common/aes.c @@ -23,6 +23,19 @@ #error "We require OpenSSL >= 1.0.0" #endif +#ifdef __GNUC__ +#define GCC_VERSION (__GNUC__ * 100 + __GNUC_MINOR__) +#endif + +#if __GNUC__ && GCC_VERSION >= 402 +#if GCC_VERSION >= 406 +#pragma GCC diagnostic push +#endif +/* Some versions of OpenSSL declare SSL_get_selected_srtp_profile twice in + * srtp.h. Suppress the GCC warning so we can build with -Wredundant-decl. */ +#pragma GCC diagnostic ignored "-Wredundant-decls" +#endif + #include <assert.h> #include <stdlib.h> #include <string.h> @@ -30,6 +43,15 @@ #include <openssl/evp.h> #include <openssl/engine.h> #include <openssl/modes.h> + +#if __GNUC__ && GCC_VERSION >= 402 +#if GCC_VERSION >= 406 +#pragma GCC diagnostic pop +#else +#pragma GCC diagnostic warning "-Wredundant-decls" +#endif +#endif + #include "compat.h" #include "aes.h" #include "util.h" diff --git a/src/common/crypto.c b/src/common/crypto.c index 614f9b5..8d990d3 100644 --- a/src/common/crypto.c +++ b/src/common/crypto.c @@ -29,6 +29,19 @@ #include "crypto_ed25519.h" #include "crypto_format.h" +#ifdef __GNUC__ +#define GCC_VERSION (__GNUC__ * 100 + __GNUC_MINOR__) +#endif + +#if __GNUC__ && GCC_VERSION >= 402 +#if GCC_VERSION >= 406 +#pragma GCC diagnostic push +#endif +/* Some versions of OpenSSL declare X509_STORE_CTX_set_verify_cb twice. + * Suppress the GCC warning so we can build with -Wredundant-decl. */ +#pragma GCC diagnostic ignored "-Wredundant-decls" +#endif + #include <openssl/err.h> #include <openssl/rsa.h> #include <openssl/pem.h> @@ -40,6 +53,14 @@ #include <openssl/conf.h> #include <openssl/hmac.h> +#if __GNUC__ && GCC_VERSION >= 402 +#if GCC_VERSION >= 406 +#pragma GCC diagnostic pop +#else +#pragma GCC diagnostic warning "-Wredundant-decls" +#endif +#endif + #ifdef HAVE_CTYPE_H #include <ctype.h> #endif diff --git a/src/test/test_microdesc.c b/src/test/test_microdesc.c index 581f58b..dbd1e5a 100644 --- a/src/test/test_microdesc.c +++ b/src/test/test_microdesc.c @@ -14,10 +14,31 @@ #include "test.h" +#ifdef __GNUC__ +#define GCC_VERSION (__GNUC__ * 100 + __GNUC_MINOR__) +#endif + +#if __GNUC__ && GCC_VERSION >= 402 +#if GCC_VERSION >= 406 +#pragma GCC diagnostic push +#endif +/* Some versions of OpenSSL declare X509_STORE_CTX_set_verify_cb twice. + * Suppress the GCC warning so we can build with -Wredundant-decl. */ +#pragma GCC diagnostic ignored "-Wredundant-decls" +#endif + #include <openssl/rsa.h> #include <openssl/bn.h> #include <openssl/pem.h> +#if __GNUC__ && GCC_VERSION >= 402 +#if GCC_VERSION >= 406 +#pragma GCC diagnostic pop +#else +#pragma GCC diagnostic warning "-Wredundant-decls" +#endif +#endif + #ifdef _WIN32 /* For mkdir() */ #include <direct.h>

1 0

[tor/master] Resolve the remaining openssl "-Wredundant-decls" warnings.
by nickm＠torproject.org 15 Jun '16

15 Jun '16

1 0

[tor/master] Use ENABLE/DISABLE_GCC_WARNING in masater.
by nickm＠torproject.org 15 Jun '16

15 Jun '16

commit 227d3b3d6b0955fe4f0cf1d2081b2ce9649de248 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Jun 14 20:21:02 2016 -0400 Use ENABLE/DISABLE_GCC_WARNING in masater. --- src/common/aes.c | 21 ++------------------- src/common/crypto.c | 15 +++------------ src/test/test_microdesc.c | 23 ++--------------------- 3 files changed, 7 insertions(+), 52 deletions(-) diff --git a/src/common/aes.c b/src/common/aes.c index 15970a7..e9f78f4 100644 --- a/src/common/aes.c +++ b/src/common/aes.c @@ -23,18 +23,7 @@ #error "We require OpenSSL >= 1.0.0" #endif -#ifdef __GNUC__ -#define GCC_VERSION (__GNUC__ * 100 + __GNUC_MINOR__) -#endif - -#if __GNUC__ && GCC_VERSION >= 402 -#if GCC_VERSION >= 406 -#pragma GCC diagnostic push -#endif -/* Some versions of OpenSSL declare SSL_get_selected_srtp_profile twice in - * srtp.h. Suppress the GCC warning so we can build with -Wredundant-decl. */ -#pragma GCC diagnostic ignored "-Wredundant-decls" -#endif +DISABLE_GCC_WARNING(redundant-decls) #include <assert.h> #include <stdlib.h> @@ -44,13 +33,7 @@ #include <openssl/engine.h> #include <openssl/modes.h> -#if __GNUC__ && GCC_VERSION >= 402 -#if GCC_VERSION >= 406 -#pragma GCC diagnostic pop -#else -#pragma GCC diagnostic warning "-Wredundant-decls" -#endif -#endif +ENABLE_GCC_WARNING(redundant-decls) #include "compat.h" #include "aes.h" diff --git a/src/common/crypto.c b/src/common/crypto.c index d4c6444..f47f5d2 100644 --- a/src/common/crypto.c +++ b/src/common/crypto.c @@ -29,18 +29,7 @@ #include "crypto_ed25519.h" #include "crypto_format.h" -#ifdef __GNUC__ -#define GCC_VERSION (__GNUC__ * 100 + __GNUC_MINOR__) -#endif - -#if __GNUC__ && GCC_VERSION >= 402 -#if GCC_VERSION >= 406 -#pragma GCC diagnostic push -#endif -/* Some versions of OpenSSL declare X509_STORE_CTX_set_verify_cb twice. - * Suppress the GCC warning so we can build with -Wredundant-decl. */ -#pragma GCC diagnostic ignored "-Wredundant-decls" -#endif +DISABLE_GCC_WARNING(redundant-decls) #include <openssl/err.h> #include <openssl/rsa.h> @@ -53,6 +42,8 @@ #include <openssl/conf.h> #include <openssl/hmac.h> +ENABLE_GCC_WARNING(redundant-decls) + #if __GNUC__ && GCC_VERSION >= 402 #if GCC_VERSION >= 406 #pragma GCC diagnostic pop diff --git a/src/test/test_microdesc.c b/src/test/test_microdesc.c index 89ada96..be90f53 100644 --- a/src/test/test_microdesc.c +++ b/src/test/test_microdesc.c @@ -14,30 +14,11 @@ #include "test.h" -#ifdef __GNUC__ -#define GCC_VERSION (__GNUC__ * 100 + __GNUC_MINOR__) -#endif - -#if __GNUC__ && GCC_VERSION >= 402 -#if GCC_VERSION >= 406 -#pragma GCC diagnostic push -#endif -/* Some versions of OpenSSL declare X509_STORE_CTX_set_verify_cb twice. - * Suppress the GCC warning so we can build with -Wredundant-decl. */ -#pragma GCC diagnostic ignored "-Wredundant-decls" -#endif - +DISABLE_GCC_WARNING(redundant-decls) #include <openssl/rsa.h> #include <openssl/bn.h> #include <openssl/pem.h> - -#if __GNUC__ && GCC_VERSION >= 402 -#if GCC_VERSION >= 406 -#pragma GCC diagnostic pop -#else -#pragma GCC diagnostic warning "-Wredundant-decls" -#endif -#endif +ENABLE_GCC_WARNING(redundant-decls) #ifdef _WIN32 /* For mkdir() */

1 0

[tor/release-0.2.8] Merge branch 'maint-0.2.8' into release-0.2.8
by nickm＠torproject.org 15 Jun '16

15 Jun '16

commit 1cdb839108ef7487aaa516ab003d1afd7abfecc6 Merge: 299f892 d6b0121 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Jun 14 20:21:32 2016 -0400 Merge branch 'maint-0.2.8' into release-0.2.8 src/common/aes.c | 22 ++++++++++++++++++++++ src/common/crypto.c | 21 +++++++++++++++++++++ src/test/test_microdesc.c | 21 +++++++++++++++++++++ 3 files changed, 64 insertions(+)

1 0

[tor/maint-0.2.8] Resolve the remaining openssl "-Wredundant-decls" warnings.
by nickm＠torproject.org 15 Jun '16

15 Jun '16

1 0

[tor/master] Merge branch 'maint-0.2.8'
by nickm＠torproject.org 15 Jun '16

15 Jun '16

commit 8486dea8d7f2d363c4d0d3d093319caa5c728f4e Merge: e54f8e3 d6b0121 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Jun 14 20:16:46 2016 -0400 Merge branch 'maint-0.2.8' src/common/aes.c | 22 ++++++++++++++++++++++ src/common/crypto.c | 21 +++++++++++++++++++++ src/test/test_microdesc.c | 21 +++++++++++++++++++++ 3 files changed, 64 insertions(+)

1 0

[snowflake/master] pull copyLoop out of goroutine, better pop and reset
by serene＠torproject.org 15 Jun '16

15 Jun '16

commit 2bf0e5457e88f54344f895f4754cf98c05c1d7b0 Author: Serene Han <keroserene+git(a)gmail.com> Date: Tue Jun 14 17:07:21 2016 -0700 pull copyLoop out of goroutine, better pop and reset --- client/client_test.go | 38 +++++++++++++++++++++++++++++--------- client/interfaces.go | 7 +++---- client/peers.go | 30 +++++++++++++++++++----------- client/snowflake.go | 21 ++++++++++++--------- client/webrtc.go | 9 +++++++-- 5 files changed, 70 insertions(+), 35 deletions(-) diff --git a/client/client_test.go b/client/client_test.go index 41d4870..b5236a0 100644 --- a/client/client_test.go +++ b/client/client_test.go @@ -65,9 +65,9 @@ func (f FakeSocksConn) Grant(addr *net.TCPAddr) error { return nil } type FakePeers struct{ toRelease *webRTCConn } -func (f FakePeers) Collect() error { return nil } -func (f FakePeers) Pop() Snowflake { return nil } -func (f FakePeers) Melted() <-chan struct{} { return nil } +func (f FakePeers) Collect() (Snowflake, error) { return &webRTCConn{}, nil } +func (f FakePeers) Pop() Snowflake { return nil } +func (f FakePeers) Melted() <-chan struct{} { return nil } func TestSnowflakeClient(t *testing.T) { @@ -81,16 +81,16 @@ func TestSnowflakeClient(t *testing.T) { Convey("Collecting a Snowflake requires a Tongue.", func() { p := NewPeers(1) - err := p.Collect() + _, err := p.Collect() So(err, ShouldNotBeNil) So(p.Count(), ShouldEqual, 0) // Set the dialer so that collection is possible. p.Tongue = FakeDialer{} - err = p.Collect() + _, err = p.Collect() So(err, ShouldBeNil) So(p.Count(), ShouldEqual, 1) // S - err = p.Collect() + _, err = p.Collect() }) Convey("Collection continues until capacity.", func() { @@ -100,13 +100,13 @@ func TestSnowflakeClient(t *testing.T) { // Fill up to capacity. for i := 0; i < c; i++ { fmt.Println("Adding snowflake ", i) - err := p.Collect() + _, err := p.Collect() So(err, ShouldBeNil) So(p.Count(), ShouldEqual, i+1) } // But adding another gives an error. So(p.Count(), ShouldEqual, c) - err := p.Collect() + _, err := p.Collect() So(err, ShouldNotBeNil) So(p.Count(), ShouldEqual, c) @@ -116,7 +116,7 @@ func TestSnowflakeClient(t *testing.T) { So(s, ShouldNotBeNil) So(p.Count(), ShouldEqual, c-1) - err = p.Collect() + _, err = p.Collect() So(err, ShouldBeNil) So(p.Count(), ShouldEqual, c) }) @@ -149,6 +149,26 @@ func TestSnowflakeClient(t *testing.T) { So(p.Count(), ShouldEqual, 0) }) + Convey("Pop skips over closed peers.", func() { + p := NewPeers(4) + p.Tongue = FakeDialer{} + wc1, _ := p.Collect() + wc2, _ := p.Collect() + wc3, _ := p.Collect() + So(wc1, ShouldNotBeNil) + So(wc2, ShouldNotBeNil) + So(wc3, ShouldNotBeNil) + wc1.Close() + r := p.Pop() + So(p.Count(), ShouldEqual, 2) + So(r, ShouldEqual, wc2) + wc4, _ := p.Collect() + wc2.Close() + wc3.Close() + r = p.Pop() + So(r, ShouldEqual, wc4) + }) + }) Convey("Snowflake", t, func() { diff --git a/client/interfaces.go b/client/interfaces.go index 502eefb..f18987a 100644 --- a/client/interfaces.go +++ b/client/interfaces.go @@ -17,10 +17,9 @@ type Resetter interface { // Interface for a single remote WebRTC peer. // In the Client context, "Snowflake" refers to the remote browser proxy. type Snowflake interface { - io.ReadWriter + io.ReadWriteCloser Resetter Connector - Close() error } // Interface for catching Snowflakes. (aka the remote dialer) @@ -34,7 +33,7 @@ type SnowflakeCollector interface { // Add a Snowflake to the collection. // Implementation should decide how to connect and maintain the webRTCConn. - Collect() error + Collect() (Snowflake, error) // Remove and return the most available Snowflake from the collection. Pop() Snowflake @@ -52,6 +51,6 @@ type SocksConnector interface { // Interface for the Snowflake's transport. (Typically just webrtc.DataChannel) type SnowflakeDataChannel interface { + io.Closer Send([]byte) - Close() error } diff --git a/client/peers.go b/client/peers.go index 74b804f..098dd81 100644 --- a/client/peers.go +++ b/client/peers.go @@ -40,34 +40,43 @@ func NewPeers(max int) *Peers { } // As part of |SnowflakeCollector| interface. -func (p *Peers) Collect() error { +func (p *Peers) Collect() (Snowflake, error) { cnt := p.Count() s := fmt.Sprintf("Currently at [%d/%d]", cnt, p.capacity) if cnt >= p.capacity { s := fmt.Sprintf("At capacity [%d/%d]", cnt, p.capacity) - return errors.New(s) + return nil, errors.New(s) } log.Println("WebRTC: Collecting a new Snowflake.", s) // Engage the Snowflake Catching interface, which must be available. if nil == p.Tongue { - return errors.New("Missing Tongue to catch Snowflakes with.") + return nil, errors.New("Missing Tongue to catch Snowflakes with.") } + // BUG: some broker conflict here. connection, err := p.Tongue.Catch() - if nil == connection || nil != err { - return err + if nil != err { + return nil, err } // Track new valid Snowflake in internal collection and pass along. p.activePeers.PushBack(connection) p.snowflakeChan <- connection - return nil + return connection, nil } // As part of |SnowflakeCollector| interface. func (p *Peers) Pop() Snowflake { - // Blocks until an available snowflake appears. - snowflake, ok := <-p.snowflakeChan - if !ok { - return nil + // Blocks until an available, valid snowflake appears. + var snowflake Snowflake + var ok bool + for nil == snowflake { + snowflake, ok = <-p.snowflakeChan + conn := snowflake.(*webRTCConn) + if !ok { + return nil + } + if conn.closed { + snowflake = nil + } } // Set to use the same rate-limited traffic logger to keep consistency. snowflake.(*webRTCConn).BytesLogger = p.BytesLogger @@ -105,7 +114,6 @@ func (p *Peers) End() { p.melt <- struct{}{} cnt := p.Count() for e := p.activePeers.Front(); e != nil; { - log.Println(e, e.Value) next := e.Next() conn := e.Value.(*webRTCConn) conn.Close() diff --git a/client/snowflake.go b/client/snowflake.go index d122494..f172611 100644 --- a/client/snowflake.go +++ b/client/snowflake.go @@ -31,7 +31,7 @@ var handlerChan = make(chan int) func ConnectLoop(snowflakes SnowflakeCollector) { for { // Check if ending is necessary. - err := snowflakes.Collect() + _, err := snowflakes.Collect() if nil != err { log.Println("WebRTC:", err, " Retrying in", ReconnectTimeout, "seconds...") @@ -51,6 +51,7 @@ func socksAcceptLoop(ln *pt.SocksListener, snowflakes SnowflakeCollector) error defer ln.Close() log.Println("Started SOCKS listener.") for { + log.Println("SOCKS listening...") conn, err := ln.AcceptSocks() log.Println("SOCKS accepted: ", conn.Req) if err != nil { @@ -81,20 +82,22 @@ func handler(socks SocksConnector, snowflakes SnowflakeCollector) error { return errors.New("handler: Received invalid Snowflake") } defer socks.Close() - log.Println("---- Snowflake assigned ----") + log.Println("---- Handler: snowflake assigned ----") err := socks.Grant(&net.TCPAddr{IP: net.IPv4zero, Port: 0}) if err != nil { return err } - // Begin exchanging data. - // BUG(serene): There's a leak here when multiplexed. - go copyLoop(socks, snowflake) + go func() { + // When WebRTC resets, close the SOCKS connection, which ends + // the copyLoop below and induces new handler. + snowflake.WaitForReset() + socks.Close() + }() - // When WebRTC resets, close the SOCKS connection, which induces new handler. - // TODO: Double check this / fix it. - snowflake.WaitForReset() - log.Println("---- Closed ---") + // Begin exchanging data. + copyLoop(socks, snowflake) + log.Println("---- Handler: closed ---") return nil } diff --git a/client/webrtc.go b/client/webrtc.go index 6cd5da6..4c7a3c8 100644 --- a/client/webrtc.go +++ b/client/webrtc.go @@ -31,7 +31,7 @@ type webRTCConn struct { BytesLogger } -// Read bytes from remote WebRTC. +// Read bytes from local SOCKS. // As part of |io.ReadWriter| func (c *webRTCConn) Read(b []byte) (int, error) { return c.recvPipe.Read(b) @@ -62,11 +62,11 @@ func (c *webRTCConn) Close() error { // As part of |Resetter| func (c *webRTCConn) Reset() { + c.Close() go func() { c.reset <- struct{}{} log.Println("WebRTC resetting...") }() - c.Close() } // As part of |Resetter| @@ -282,6 +282,11 @@ func (c *webRTCConn) cleanup() { if nil != c.errorChannel { close(c.errorChannel) } + // Close this side of the SOCKS pipe. + if nil != c.writePipe { + c.writePipe.Close() + c.writePipe = nil + } if nil != c.transport { log.Printf("WebRTC: closing DataChannel") dataChannel := c.transport

1 0

[user-manual/master] Change screenshot
by colin＠torproject.org 14 Jun '16

14 Jun '16

commit b1d108661cee416f43553c4e6c87e0a33cb51842 Author: Colin Childs <colin(a)torproject.org> Date: Tue Jun 14 18:45:07 2016 -0500 Change screenshot --- C/media/onionsites/onion_url.png | Bin 218403 -> 48822 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/C/media/onionsites/onion_url.png b/C/media/onionsites/onion_url.png index d944c0b..c7c68b6 100644 Binary files a/C/media/onionsites/onion_url.png and b/C/media/onionsites/onion_url.png differ

1 0

[user-manual/master] Change "also known as hidden services" to "formerly known as hidden services"
by colin＠torproject.org 14 Jun '16

14 Jun '16

commit 27ef4eb5cf11ca2df2a1cf2744c2458c2da89600 Author: Colin Childs <colin(a)torproject.org> Date: Tue Jun 14 18:36:18 2016 -0500 Change "also known as hidden services" to "formerly known as hidden services" --- C/onionsites.page | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/C/onionsites.page b/C/onionsites.page index c0829d5..6cfa20e 100644 --- a/C/onionsites.page +++ b/C/onionsites.page @@ -9,7 +9,7 @@ <title>Onion Services</title> <p> -Onion services (also known as “hidden services”) are services (like websites) +Onion services (formerly known as “hidden services”) are services (like websites) that are only accessible through the Tor network. </p>

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits June 2016