November 2017 - tor-commits - lists.torproject.org

[tor/release-0.3.0] Merge branch 'maint-0.3.0' into release-0.3.0
by nickm＠torproject.org 30 Nov '17

30 Nov '17

commit b1c543cf4d3d14132ea3a5c87b5fd8b9f32de6f0 Merge: 98b28e789 766d0a2d9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 30 11:48:12 2017 -0500 Merge branch 'maint-0.3.0' into release-0.3.0 changes/bug21394 | 9 +++++++++ src/or/dns.c | 23 ++++++++++++++++++++--- 2 files changed, 29 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.1] Merge branch 'maint-0.3.1' into release-0.3.1
by nickm＠torproject.org 30 Nov '17

30 Nov '17

commit 14746dfba26aaac0a2b89a371e26b98e1211cb11 Merge: 7c548437c 500f04a74 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 30 11:48:12 2017 -0500 Merge branch 'maint-0.3.1' into release-0.3.1 changes/bug21394 | 9 +++++++++ src/or/dns.c | 23 ++++++++++++++++++++--- 2 files changed, 29 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.0] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 30 Nov '17

30 Nov '17

commit 766d0a2d98591ed840cce42710c5a59a2e7dc731 Merge: b1c4ab0be 072e194a1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 30 11:48:12 2017 -0500 Merge branch 'maint-0.2.9' into maint-0.3.0 changes/bug21394 | 9 +++++++++ src/or/dns.c | 23 ++++++++++++++++++++--- 2 files changed, 29 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.0] Fix DNS resolution on busy exit relays
by nickm＠torproject.org 30 Nov '17

30 Nov '17

commit 98275743081728b1538f70111c891ea573127e85 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Fri Nov 3 03:06:12 2017 +0100 Fix DNS resolution on busy exit relays Thanks to Dhalgren who analyzed this issue two years ago and found a solution! --- changes/bug21394 | 9 +++++++++ src/or/dns.c | 23 ++++++++++++++++++++--- 2 files changed, 29 insertions(+), 3 deletions(-) diff --git a/changes/bug21394 b/changes/bug21394 new file mode 100644 index 000000000..e5452e20b --- /dev/null +++ b/changes/bug21394 @@ -0,0 +1,9 @@ + o Major bugfixes (Exit nodes): + - Fix an issue causing high-bandwidth exit nodes to fail a majority + or all of their DNS requests, making them basically unsuitable for + regular usage in Tor circuits. The problem is related to + libevent's DNS handling, but we can work around it in Tor. Fixes + bugs 21394 and 18580; bugfix on 0.1.2.2-alpha which introduced + eventdns. Credit goes to Dhalgren for identifying and finding a + workaround to this bug and to gamambel, arthuredelstein and + arma in helping to track it down and analyze it. diff --git a/src/or/dns.c b/src/or/dns.c index 0ad4c0f50..c1e3c3256 100644 --- a/src/or/dns.c +++ b/src/or/dns.c @@ -1425,14 +1425,31 @@ configure_nameservers(int force) #define SET(k,v) evdns_base_set_option(the_evdns_base, (k), (v)) + // If we only have one nameserver, it does not make sense to back off + // from it for a timeout. Unfortunately, the value for max-timeouts is + // currently clamped by libevent to 255, but it does not hurt to set + // it higher in case libevent gets a patch for this. + // Reducing attempts in the case of just one name server too, because + // it is very likely to be a local one where a network connectivity + // issue should not cause an attempt to fail. if (evdns_base_count_nameservers(the_evdns_base) == 1) { - SET("max-timeouts:", "16"); - SET("timeout:", "10"); + SET("max-timeouts:", "1000000"); + SET("attempts:", "1"); } else { SET("max-timeouts:", "3"); - SET("timeout:", "5"); } + // Elongate the queue of maximum inflight dns requests, so if a bunch + // time out at the resolver (happens commonly with unbound) we won't + // stall every other DNS request. This potentially means some wasted + // CPU as there's a walk over a linear queue involved, but this is a + // much better tradeoff compared to just failing DNS requests because + // of a full queue. + SET("max-inflight:", "8192"); + + // Time out after 5 seconds if no reply. + SET("timeout:", "5"); + if (options->ServerDNSRandomizeCase) SET("randomize-case:", "1"); else

1 0

[tor/release-0.3.1] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 30 Nov '17

30 Nov '17

commit 766d0a2d98591ed840cce42710c5a59a2e7dc731 Merge: b1c4ab0be 072e194a1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 30 11:48:12 2017 -0500 Merge branch 'maint-0.2.9' into maint-0.3.0 changes/bug21394 | 9 +++++++++ src/or/dns.c | 23 ++++++++++++++++++++--- 2 files changed, 29 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.1] Merge branch 'bug21394_029' into maint-0.2.9
by nickm＠torproject.org 30 Nov '17

30 Nov '17

commit 072e194a15e9aa0e75c6723763a69476f4f31b93 Merge: 30b322925 982757430 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 30 11:48:06 2017 -0500 Merge branch 'bug21394_029' into maint-0.2.9 changes/bug21394 | 9 +++++++++ src/or/dns.c | 23 ++++++++++++++++++++--- 2 files changed, 29 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.1] Merge branch 'maint-0.3.0' into maint-0.3.1
by nickm＠torproject.org 30 Nov '17

30 Nov '17

commit 500f04a74e22686f7659adecea02569b3459c71b Merge: 703ab95e9 766d0a2d9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 30 11:48:12 2017 -0500 Merge branch 'maint-0.3.0' into maint-0.3.1 changes/bug21394 | 9 +++++++++ src/or/dns.c | 23 ++++++++++++++++++++--- 2 files changed, 29 insertions(+), 3 deletions(-)

1 0

[tor/master] Avoid use-after-free error in 20020 fix
by nickm＠torproject.org 30 Nov '17

30 Nov '17

commit a1b0a0b9cd313535f954d8033ea6672ddd5ccc2a Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 30 11:44:15 2017 -0500 Avoid use-after-free error in 20020 fix CID 1424328; found by coverity; bugfix on 93dbce4ddd98ca9a4ff2f; bug not in any released Tor. --- src/or/routerlist.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/src/or/routerlist.c b/src/or/routerlist.c index 24c0a4e07..ef1538279 100644 --- a/src/or/routerlist.c +++ b/src/or/routerlist.c @@ -5197,6 +5197,10 @@ update_consensus_router_descriptor_downloads(time_t now, int is_vote, log_warn(LD_BUG, "Failed to re-parse a router."); continue; } + /* need to compute this now, since add_to_routerlist may free. */ + char time_cert_expires[ISO_TIME_LEN+1]; + format_iso_time(time_cert_expires, ri->cert_expiration_time); + r = router_add_to_routerlist(ri, &msg, 1, 0); if (WRA_WAS_OUTDATED(r)) { log_warn(LD_DIR, "Couldn't add re-parsed router: %s. This isn't " @@ -5205,12 +5209,10 @@ update_consensus_router_descriptor_downloads(time_t now, int is_vote, msg?msg:"???"); if (r == ROUTER_CERTS_EXPIRED) { char time_cons[ISO_TIME_LEN+1]; - char time_cert[ISO_TIME_LEN+1]; format_iso_time(time_cons, consensus->valid_after); - format_iso_time(time_cert, ri->cert_expiration_time); log_warn(LD_DIR, " (I'm looking at a consensus from %s; This " "router's certificates began expiring at %s.)", - time_cons, time_cert); + time_cons, time_cert_expires); } } } SMARTLIST_FOREACH_END(sd);

1 0

[translation/tails-greeter-2] Update translations for tails-greeter-2
by translation＠torproject.org 30 Nov '17

30 Nov '17

commit 939029b868b9020a744eb8d97c9a0dd1dfefa6f2 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Nov 30 16:20:27 2017 +0000 Update translations for tails-greeter-2 --- es_MX/es_MX.po | 33 ++++++++++++++++++--------------- 1 file changed, 18 insertions(+), 15 deletions(-) diff --git a/es_MX/es_MX.po b/es_MX/es_MX.po index f9ff9daa4..d974029da 100644 --- a/es_MX/es_MX.po +++ b/es_MX/es_MX.po @@ -220,14 +220,17 @@ msgid "" "The default settings are safe in most situations. To add a custom setting, " "press the \"+\" button below." msgstr "" +"La configuración predeterminada son seguras en la mayoría de las " +"situaciones. Para añadir una configuración personal, haga clic en el button " +"\"+\" abajo." #: ../data/greeter.ui.h:45 msgid "_Administration Password" -msgstr "" +msgstr "_Clave de Administrador" #: ../data/greeter.ui.h:46 msgid "Off (default)" -msgstr "" +msgstr "Apagado (predeterminado)" #: ../data/greeter.ui.h:47 msgid "_MAC Address Spoofing" @@ -235,35 +238,35 @@ msgstr "" #: ../data/greeter.ui.h:48 msgid "On (default)" -msgstr "" +msgstr "Encendido (predeterminado)" #: ../data/greeter.ui.h:49 msgid "_Network Connection" -msgstr "" +msgstr "_Conexión de Red" #: ../data/greeter.ui.h:50 ../tailsgreeter/gui.py:385 msgid "Direct (default)" -msgstr "" +msgstr "Directo (predeterminado)" #: ../data/greeter.ui.h:51 msgid "_Windows Camouflage" -msgstr "" +msgstr "_Camuflaje Windows" #: ../tailsgreeter/gui.py:391 msgid "Bridge & Proxy" -msgstr "" +msgstr "Puente & Proxy" #: ../tailsgreeter/gui.py:397 msgid "Offline" -msgstr "" +msgstr "Fuera de Linea" #: ../tailsgreeter/gui.py:481 msgid "Failed to relock persistent storage." -msgstr "" +msgstr "Falla en cerrar de nuevo el almacenamiento persistente." #: ../tailsgreeter/gui.py:499 msgid "Unlocking…" -msgstr "" +msgstr "Desbloqueando..." #: ../tailsgreeter/gui.py:594 msgid "Additional Settings" @@ -275,25 +278,25 @@ msgstr "Cancelar" #: ../tailsgreeter/gui.py:608 msgid "Add" -msgstr "" +msgstr "Agregar" #: ../tailsgreeter/gui.py:616 msgid "Back" -msgstr "" +msgstr "Atrás" #: ../tailsgreeter/gui.py:730 msgid "Shutdown" -msgstr "" +msgstr "Apagar" #: ../tailsgreeter/gui.py:735 msgid "_Start Tails" -msgstr "" +msgstr "_Iniciar Tails" #. Translators: please do not translate this string (it is read from #. Gtk translation) #: ../tailsgreeter/language.py:133 msgid "default:LTR" -msgstr "" +msgstr "predeterminado:LTR" #: ../tailsgreeter/persistence.py:89 #, python-brace-format

1 0

[translation/mat-gui] Update translations for mat-gui
by translation＠torproject.org 30 Nov '17

30 Nov '17

commit c2116e0d1de6e42a59bda7c0d5a74e6f170fe514 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Nov 30 16:16:32 2017 +0000 Update translations for mat-gui --- es_MX.po | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/es_MX.po b/es_MX.po index e9b444b44..86371956a 100644 --- a/es_MX.po +++ b/es_MX.po @@ -5,13 +5,14 @@ # Translators: # Javier Flores Topete <javierflorestopete789(a)gmail.com>, 2015 # Sanxcher Motala <motala.sanxcher(a)yandex.com>, 2017 +# Shiba Inu, 2017 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2016-02-10 23:06+0100\n" -"PO-Revision-Date: 2017-09-20 00:56+0000\n" -"Last-Translator: Sanxcher Motala <motala.sanxcher(a)yandex.com>\n" +"PO-Revision-Date: 2017-11-30 16:13+0000\n" +"Last-Translator: Shiba Inu\n" "Language-Team: Spanish (Mexico) (http://www.transifex.com/otf/torproject/language/es_MX/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -142,19 +143,19 @@ msgstr "_File" #: data/mat.glade:95 msgid "_Edit" -msgstr "" +msgstr "_Editar" #: data/mat.glade:141 msgid "_Help" -msgstr "" +msgstr "Ayuda" #: data/mat.glade:187 msgid "Add" -msgstr "" +msgstr "Agregar" #: data/mat.glade:256 msgid "State" -msgstr "" +msgstr "Estado" #: data/mat.glade:294 data/mat.glade:467 msgid "Metadata" @@ -166,7 +167,7 @@ msgstr "Nombre" #: data/mat.glade:368 msgid "Content" -msgstr "" +msgstr "Contenido" #: data/mat.glade:398 msgid "Supported formats"

1 0