January 2017 - tor-commits - lists.torproject.org

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 26 Jan '17

26 Jan '17

commit dccb6eb6dda88fd5045a2829cc97972988185a50 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jan 26 10:15:21 2017 +0000 Update translations for https_everywhere --- ru/https-everywhere.dtd | 2 +- ru/https-everywhere.properties | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/ru/https-everywhere.dtd b/ru/https-everywhere.dtd index ab3e3c4..2115aae 100644 --- a/ru/https-everywhere.dtd +++ b/ru/https-everywhere.dtd @@ -10,7 +10,7 @@ <!ENTITY https-everywhere.about.many_contributors "Многим участникам, включая"> <!ENTITY https-everywhere.about.noscript "Кроме того, фрагменты HTTPS Everywhere основаны на коде, взятом из NoScript разработчика Giorgio Maone и других авторов. Мы благодарны им за отличную работу!"> <!ENTITY https-everywhere.about.contribute "Если вам нравится HTTPS Everywhere, подумайте о"> -<!ENTITY https-everywhere.about.donate_tor "Пожертвовании Tor"> +<!ENTITY https-everywhere.about.donate_tor "пожертвовании Tor"> <!ENTITY https-everywhere.about.tor_lang_code "en"> <!ENTITY https-everywhere.about.or "или"> <!ENTITY https-everywhere.about.donate_eff "Пожертвовании EFF"> diff --git a/ru/https-everywhere.properties b/ru/https-everywhere.properties index 8780077..d7cf8c1 100644 --- a/ru/https-everywhere.properties +++ b/ru/https-everywhere.properties @@ -1,7 +1,7 @@ -https-everywhere.menu.globalEnable = Активировать HTTPS Everywhere -https-everywhere.menu.globalDisable = Отключить HTTPS Everywhere -https-everywhere.menu.enableDisable = Запустить / Отключить правила -https-everywhere.menu.noRules = (Не заданно правило для этой страницы) +https-everywhere.menu.globalEnable = Включить HTTPS Everywhere +https-everywhere.menu.globalDisable = Выключить HTTPS Everywhere +https-everywhere.menu.enableDisable = Включить / Выключить правила +https-everywhere.menu.noRules = Нет правил для этой страницы https-everywhere.menu.unknownRules = (Правило для этой страницы, неопределенно) https-everywhere.toolbar.hint = HTTPS Everywhere активен сейчас. В адресном меню вы сможете включить или отключить плагин. https-everywhere.migration.notification0 = Критические обновления могут сбросить настройки правил HTTPS Everywhere к значениям по умолчанию.

1 0

[translation/https_everywhere_completed] Update translations for https_everywhere_completed
by translation＠torproject.org 26 Jan '17

26 Jan '17

commit e1c7f3dac41e14fc7ce9646684265b7912e43fb2 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jan 26 09:45:28 2017 +0000 Update translations for https_everywhere_completed --- ru/https-everywhere.dtd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ru/https-everywhere.dtd b/ru/https-everywhere.dtd index 2a08186..ab3e3c4 100644 --- a/ru/https-everywhere.dtd +++ b/ru/https-everywhere.dtd @@ -10,12 +10,12 @@ <!ENTITY https-everywhere.about.many_contributors "Многим участникам, включая"> <!ENTITY https-everywhere.about.noscript "Кроме того, фрагменты HTTPS Everywhere основаны на коде, взятом из NoScript разработчика Giorgio Maone и других авторов. Мы благодарны им за отличную работу!"> <!ENTITY https-everywhere.about.contribute "Если вам нравится HTTPS Everywhere, подумайте о"> -<!ENTITY https-everywhere.about.donate_tor "Пожертвование Tor"> +<!ENTITY https-everywhere.about.donate_tor "Пожертвовании Tor"> <!ENTITY https-everywhere.about.tor_lang_code "en"> <!ENTITY https-everywhere.about.or "или"> -<!ENTITY https-everywhere.about.donate_eff "Помощь проэкту EFF"> +<!ENTITY https-everywhere.about.donate_eff "Пожертвовании EFF"> -<!ENTITY https-everywhere.menu.donate_eff_imperative "Пожертвуйте EFF"> +<!ENTITY https-everywhere.menu.donate_eff_imperative "Поддержать EFF"> <!ENTITY https-everywhere.menu.about "О HTTPS Everywhere"> <!ENTITY https-everywhere.menu.observatory "Настройки SSL Observatory"> <!ENTITY https-everywhere.menu.globalEnable "Включить HTTPS Everywhere">

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 26 Jan '17

26 Jan '17

commit 83120af6240d3f778d026e3d87bfcda0cb9f84e0 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jan 26 09:45:22 2017 +0000 Update translations for https_everywhere --- ru/https-everywhere.dtd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ru/https-everywhere.dtd b/ru/https-everywhere.dtd index 2a08186..ab3e3c4 100644 --- a/ru/https-everywhere.dtd +++ b/ru/https-everywhere.dtd @@ -10,12 +10,12 @@ <!ENTITY https-everywhere.about.many_contributors "Многим участникам, включая"> <!ENTITY https-everywhere.about.noscript "Кроме того, фрагменты HTTPS Everywhere основаны на коде, взятом из NoScript разработчика Giorgio Maone и других авторов. Мы благодарны им за отличную работу!"> <!ENTITY https-everywhere.about.contribute "Если вам нравится HTTPS Everywhere, подумайте о"> -<!ENTITY https-everywhere.about.donate_tor "Пожертвование Tor"> +<!ENTITY https-everywhere.about.donate_tor "Пожертвовании Tor"> <!ENTITY https-everywhere.about.tor_lang_code "en"> <!ENTITY https-everywhere.about.or "или"> -<!ENTITY https-everywhere.about.donate_eff "Помощь проэкту EFF"> +<!ENTITY https-everywhere.about.donate_eff "Пожертвовании EFF"> -<!ENTITY https-everywhere.menu.donate_eff_imperative "Пожертвуйте EFF"> +<!ENTITY https-everywhere.menu.donate_eff_imperative "Поддержать EFF"> <!ENTITY https-everywhere.menu.about "О HTTPS Everywhere"> <!ENTITY https-everywhere.menu.observatory "Настройки SSL Observatory"> <!ENTITY https-everywhere.menu.globalEnable "Включить HTTPS Everywhere">

1 0

[webwml/master] Replace Maintainger with Maintainer on pluggable transports page
by hiro＠torproject.org 25 Jan '17

25 Jan '17

commit 402a5d4ce66c6d1426bf555d06fefc456d539b80 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Fri Jan 20 19:57:51 2017 +0000 Replace Maintainger with Maintainer on pluggable transports page Signed-off-by: hiromipaw <hiro(a)torproject.org> --- docs/en/pluggable-transports.wml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/docs/en/pluggable-transports.wml b/docs/en/pluggable-transports.wml index f3ff07e..eda44e0 100644 --- a/docs/en/pluggable-transports.wml +++ b/docs/en/pluggable-transports.wml @@ -141,7 +141,7 @@ <li>Description: It transforms Tor traffic to arbitrary formats using their language descriptions. See the <a href="https://kpdyer.com/publications/ccs2013-fte.pdf">research paper</a>.</li> <li>Language: Python/C++</li> - <li>Maintainger: Kevin Dyer</li> + <li>Maintainer: Kevin Dyer</li> <li>Evaluation: <a href="https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/FteEv…">FTE Evaluation</a></li> </ul> </li> @@ -150,7 +150,7 @@ <ul> <li>Description: Is a pluggable transport that protects against follow-up probing attacks and is also capable of changing its network fingerprint (packet length distribution, inter-arrival times, etc.).</li> <li>Language: Python</li> - <li>Maintainger: Philipp Winter</li> + <li>Maintainer: Philipp Winter</li> <li>Evaluation: <a href="https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/Scram…"> ScrambleSuit Evaluation</a></li> </ul> </li> @@ -177,7 +177,7 @@ <ul> <li>Description:is an Obfsproxy fork that extends it to a) split Tor streams across multiple connections to avoid packet size signatures, and b) embed the traffic flows in traces that look like HTML, JavasCript, or PDF. See its <a href="https://gitweb.torproject.org/stegotorus.git">git repository</a>.</li> <li>Language: C++</li> - <li>Maintainger: Zack Weinberg</li> + <li>Maintainer: Zack Weinberg</li> <li>Evaluation: none</li> </ul> </li> @@ -186,7 +186,7 @@ <ul> <li>Description: It transforms Tor traffic flows so they look like Skype Video. See its <a href="http://crysp.uwaterloo.ca/software/SkypeMorph-0.5.1.tar.gz">source code</a> and <a href="http://cacr.uwaterloo.ca/techreports/2012/cacr2012-08.pdf">design paper</a>.</li> <li>Language:</li> - <li>Maintainger: Ian Goldberg.</li> + <li>Maintainer: Ian Goldberg.</li> <li>Evaluation: none</li> </ul> </li> @@ -195,7 +195,7 @@ <ul> <li>Description: It aims to provide a packet-based (rather than connection-based) DPI-resistant protocol. See its <a href="https://github.com/blanu/Dust">git repository</a>.</li> <li>Language: Python</li> - <li>Maintainger: Brandon Wiley.</li> + <li>Maintainer: Brandon Wiley.</li> <li>Evaluation: none</li> </ul> </li>

1 0

[webwml/staging] Replace Maintainger with Maintainer on pluggable transports page
by hiro＠torproject.org 25 Jan '17

25 Jan '17

commit 402a5d4ce66c6d1426bf555d06fefc456d539b80 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Fri Jan 20 19:57:51 2017 +0000 Replace Maintainger with Maintainer on pluggable transports page Signed-off-by: hiromipaw <hiro(a)torproject.org> --- docs/en/pluggable-transports.wml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/docs/en/pluggable-transports.wml b/docs/en/pluggable-transports.wml index f3ff07e..eda44e0 100644 --- a/docs/en/pluggable-transports.wml +++ b/docs/en/pluggable-transports.wml @@ -141,7 +141,7 @@ <li>Description: It transforms Tor traffic to arbitrary formats using their language descriptions. See the <a href="https://kpdyer.com/publications/ccs2013-fte.pdf">research paper</a>.</li> <li>Language: Python/C++</li> - <li>Maintainger: Kevin Dyer</li> + <li>Maintainer: Kevin Dyer</li> <li>Evaluation: <a href="https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/FteEv…">FTE Evaluation</a></li> </ul> </li> @@ -150,7 +150,7 @@ <ul> <li>Description: Is a pluggable transport that protects against follow-up probing attacks and is also capable of changing its network fingerprint (packet length distribution, inter-arrival times, etc.).</li> <li>Language: Python</li> - <li>Maintainger: Philipp Winter</li> + <li>Maintainer: Philipp Winter</li> <li>Evaluation: <a href="https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/Scram…"> ScrambleSuit Evaluation</a></li> </ul> </li> @@ -177,7 +177,7 @@ <ul> <li>Description:is an Obfsproxy fork that extends it to a) split Tor streams across multiple connections to avoid packet size signatures, and b) embed the traffic flows in traces that look like HTML, JavasCript, or PDF. See its <a href="https://gitweb.torproject.org/stegotorus.git">git repository</a>.</li> <li>Language: C++</li> - <li>Maintainger: Zack Weinberg</li> + <li>Maintainer: Zack Weinberg</li> <li>Evaluation: none</li> </ul> </li> @@ -186,7 +186,7 @@ <ul> <li>Description: It transforms Tor traffic flows so they look like Skype Video. See its <a href="http://crysp.uwaterloo.ca/software/SkypeMorph-0.5.1.tar.gz">source code</a> and <a href="http://cacr.uwaterloo.ca/techreports/2012/cacr2012-08.pdf">design paper</a>.</li> <li>Language:</li> - <li>Maintainger: Ian Goldberg.</li> + <li>Maintainer: Ian Goldberg.</li> <li>Evaluation: none</li> </ul> </li> @@ -195,7 +195,7 @@ <ul> <li>Description: It aims to provide a packet-based (rather than connection-based) DPI-resistant protocol. See its <a href="https://github.com/blanu/Dust">git repository</a>.</li> <li>Language: Python</li> - <li>Maintainger: Brandon Wiley.</li> + <li>Maintainer: Brandon Wiley.</li> <li>Evaluation: none</li> </ul> </li>

1 0

[webwml/master] Update gpg verification instructions for Linux users
by hiro＠torproject.org 25 Jan '17

25 Jan '17

commit bb1c560607a5cde4af8939d0de1d044f2fcb0ce9 Author: hiromipaw <hiro(a)torproject.org> Date: Wed Jan 25 17:56:40 2017 +0100 Update gpg verification instructions for Linux users --- docs/en/verifying-signatures.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/en/verifying-signatures.wml b/docs/en/verifying-signatures.wml index 45eb9c9..d7f02fb 100644 --- a/docs/en/verifying-signatures.wml +++ b/docs/en/verifying-signatures.wml @@ -152,7 +152,7 @@ <pre>gpg --verify ~/Downloads/TorBrowser-<version-torbrowserbundleosx64>-osx64_en-US.dmg{.asc*,}</pre> For Linux users (change 32 to 64 if you have the 64-bit package): - <pre>gpg --verify ~/Desktop/tor-browser-linux32-<version-torbrowserbundlelinux32>_en-US.tar.xz{.asc*,}</pre> + <pre>gpg --verify tor-browser-linux32-<version-torbrowserbundlelinux32>_en-US.tar.xz.asc tor-browser-linux32-<version-torbrowserbundlelinux32>_en-US.tar.xz</pre> The output should say "Good signature":

1 0

[webwml/master] Fix layout for verify signature page
by hiro＠torproject.org 25 Jan '17

25 Jan '17

commit 749164d0dee90be98adada836f24b399978ccdd7 Author: hiromipaw <hiro(a)torproject.org> Date: Wed Jan 25 18:03:51 2017 +0100 Fix layout for verify signature page --- docs/en/verifying-signatures.wml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/docs/en/verifying-signatures.wml b/docs/en/verifying-signatures.wml index d7f02fb..1db3fd9 100644 --- a/docs/en/verifying-signatures.wml +++ b/docs/en/verifying-signatures.wml @@ -93,7 +93,9 @@ To verify the signature of the package you downloaded, you will need to download the ".asc" file as well. Assuming you downloaded the package and its signature to your Desktop, run: - <pre>"C:\Program Files\Gnu\GnuPg\gpg.exe" --verify C:\Users\Alice\Desktop\torbrowser-install-<version-torbrowserbundle>_en-US.exe.asc C:\Users\Alice\Desktop\torbrowser-install-<version-torbrowserbundle>_en-US.exe</pre> + <pre>"C:\Program Files\Gnu\GnuPg\gpg.exe" --verify + C:\Users\Alice\Desktop\torbrowser-install-<version-torbrowserbundle>_en-US.exe.asc + C:\Users\Alice\Desktop\torbrowser-install-<version-torbrowserbundle>_en-US.exe</pre> The output should say "Good signature": <pre> gpg: Signature made Tue 24 Jan 2015 09:29:09 AM CET using RSA key ID D40814E0 @@ -152,7 +154,8 @@ <pre>gpg --verify ~/Downloads/TorBrowser-<version-torbrowserbundleosx64>-osx64_en-US.dmg{.asc*,}</pre> For Linux users (change 32 to 64 if you have the 64-bit package): - <pre>gpg --verify tor-browser-linux32-<version-torbrowserbundlelinux32>_en-US.tar.xz.asc tor-browser-linux32-<version-torbrowserbundlelinux32>_en-US.tar.xz</pre> + <pre>gpg --verify tor-browser-linux32-<version-torbrowserbundlelinux32>_en-US.tar.xz.asc + tor-browser-linux32-<version-torbrowserbundlelinux32>_en-US.tar.xz</pre> The output should say "Good signature":

1 0

[tor/master] Fail if file is too large to mmap.
by nickm＠torproject.org 25 Jan '17

25 Jan '17

commit 373d9aff7af41c07bb51093df4ceb51a13404a44 Author: junglefowl <junglefowl(a)riseup.net> Date: Mon Jan 23 19:08:54 2017 +0000 Fail if file is too large to mmap. If tor_mmap_file is called with a file which is larger than SIZE_MAX, only a small part of the file will be memory-mapped due to integer truncation. This can only realistically happen on 32 bit architectures with large file support. --- changes/bug21134 | 5 +++++ src/common/compat.c | 6 ++++++ 2 files changed, 11 insertions(+) diff --git a/changes/bug21134 b/changes/bug21134 new file mode 100644 index 0000000..b851718 --- /dev/null +++ b/changes/bug21134 @@ -0,0 +1,5 @@ + o Minor bugfixes (portability): + - Do not silently truncate content of files if they are larger + than SIZE_MAX bytes. This issue could occur on 32 bit systems + with large file support and files which are larger than 4 GB. + Fixes bug 21134; bugfix on 0.3.0.1-alpha. diff --git a/src/common/compat.c b/src/common/compat.c index ebf05f5..16b2229 100644 --- a/src/common/compat.c +++ b/src/common/compat.c @@ -258,6 +258,12 @@ tor_mmap_file(const char *filename) page_size = getpagesize(); size += (size%page_size) ? page_size-(size%page_size) : 0; + if (st.st_size > SSIZE_T_CEILING || size < st.st_size) { + log_warn(LD_FS, "File \"%s\" is too large. Ignoring.",filename); + errno = EFBIG; + close(fd); + return NULL; + } if (!size) { /* Zero-length file. If we call mmap on it, it will succeed but * return NULL, and bad things will happen. So just fail. */

1 0

[tor/master] Fix a signed/unsigned comparison warning
by nickm＠torproject.org 25 Jan '17

25 Jan '17

commit ad382049ed9b3408992a7a7ee4dfe2ecdb1d5897 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Jan 25 13:23:08 2017 -0500 Fix a signed/unsigned comparison warning --- src/common/compat.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/common/compat.c b/src/common/compat.c index 16b2229..0dbede6 100644 --- a/src/common/compat.c +++ b/src/common/compat.c @@ -258,7 +258,7 @@ tor_mmap_file(const char *filename) page_size = getpagesize(); size += (size%page_size) ? page_size-(size%page_size) : 0; - if (st.st_size > SSIZE_T_CEILING || size < st.st_size) { + if (st.st_size > SSIZE_T_CEILING || (off_t)size < st.st_size) { log_warn(LD_FS, "File \"%s\" is too large. Ignoring.",filename); errno = EFBIG; close(fd);

1 0

[tor/master] changes file for 21280
by nickm＠torproject.org 25 Jan '17

25 Jan '17

commit 1130fd87edb38570dbad9c1a04adfe0947490b2d Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Jan 25 13:15:37 2017 -0500 changes file for 21280 --- changes/bug21280 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/changes/bug21280 b/changes/bug21280 new file mode 100644 index 0000000..e9f0bc1 --- /dev/null +++ b/changes/bug21280 @@ -0,0 +1,5 @@ + o Minor bugfixes (tor-resolve): + - The tor-resolve command line tool now rejects hostnames over 255 + characters in length. Previously, it would silently truncate + them, which could lead to bugs. Fixes bug 21280; bugfix on 0.0.9pre5. + Patch by "junglefowl".

1 0