February 2017 - tor-commits - lists.torproject.org

[tor/master] Merge remote-tracking branch 'dgoulet/bug21116_030_01'
by nickm＠torproject.org 13 Feb '17

13 Feb '17

commit dca8ae5cfa8b081230d033158c980d50840b072a Merge: b421b3f e129393 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Feb 13 15:56:01 2017 -0500 Merge remote-tracking branch 'dgoulet/bug21116_030_01' changes/bug21116 | 3 +++ src/test/test_util.c | 3 ++- 2 files changed, 5 insertions(+), 1 deletion(-)

1 0

[tor/master] test: Add missing socket errno in test_util.c
by nickm＠torproject.org 13 Feb '17

13 Feb '17

commit e129393e40ae291b825d41946580d8a4cf63a61d Author: David Goulet <dgoulet(a)torproject.org> Date: Wed Feb 8 08:56:39 2017 -0500 test: Add missing socket errno in test_util.c According to 21116, it seems to be needed for Wheezy Raspbian build. Also, manpage of socket(2) does confirm that this errno value should be catched as well in case of no support from the OS of IPv4 or/and IPv6. Fixes #21116 Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- changes/bug21116 | 3 +++ src/test/test_util.c | 3 ++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/changes/bug21116 b/changes/bug21116 new file mode 100644 index 0000000..2304ab0 --- /dev/null +++ b/changes/bug21116 @@ -0,0 +1,3 @@ + o Minor bugfixes (test): + - Fix Raspbian build missing socket errno in test util. Fixes bug 21116.; + bugfix on tor-0.2.8.2. Patch by "hein". diff --git a/src/test/test_util.c b/src/test/test_util.c index fafb84f..c317e72 100644 --- a/src/test/test_util.c +++ b/src/test/test_util.c @@ -5091,7 +5091,8 @@ test_util_socket(void *arg) fd1 = tor_open_socket_with_extensions(domain, SOCK_STREAM, 0, 0, 0); int err = tor_socket_errno(fd1); - if (fd1 < 0 && err == SOCK_ERRNO(EPROTONOSUPPORT)) { + if (fd1 < 0 && (err == SOCK_ERRNO(EPROTONOSUPPORT) || + err == SOCK_ERRNO(EAFNOSUPPORT))) { /* Assume we're on an IPv4-only or IPv6-only system, and give up now. */ goto done; }

1 0

[tor/master] Merge branch 'maint-0.2.6' into maint-0.2.7
by arma＠torproject.org 13 Feb '17

13 Feb '17

commit 5c4235888af142b72aa6b88737bcf1020797e35c Merge: 75fe218 e778a41 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Feb 13 15:28:50 2017 -0500 Merge branch 'maint-0.2.6' into maint-0.2.7 changes/bug20384 | 10 ++++++++++ 1 file changed, 10 insertions(+)

1 0

[tor/master] be sure to remember the changes file for #20384
by arma＠torproject.org 13 Feb '17

13 Feb '17

commit 635c5a8a92c8066412645b291817eadcc82d8f8f Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Feb 13 15:22:36 2017 -0500 be sure to remember the changes file for #20384 --- changes/bug20384 | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/changes/bug20384 b/changes/bug20384 new file mode 100644 index 0000000..591015a --- /dev/null +++ b/changes/bug20384 @@ -0,0 +1,10 @@ + o Major features (security fixes): + - Prevent a class of security bugs caused by treating the contents + of a buffer chunk as if they were a NUL-terminated string. At + least one such bug seems to be present in all currently used + versions of Tor, and would allow an attacker to remotely crash + most Tor instances, especially those compiled with extra compiler + hardening. With this defense in place, such bugs can't crash Tor, + though we should still fix them as they occur. Closes ticket + 20384 (TROVE-2016-10-001). +

1 0

[tor/master] Merge branch 'maint-0.2.4' into maint-0.2.5
by arma＠torproject.org 13 Feb '17

13 Feb '17

commit 144ec3d58cd7358e6563023737a5f91844db93b0 Merge: 124062e 635c5a8 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Feb 13 15:23:50 2017 -0500 Merge branch 'maint-0.2.4' into maint-0.2.5 changes/bug20384 | 10 ++++++++++ 1 file changed, 10 insertions(+)

1 0

[tor/master] Merge branch 'maint-0.2.5' into maint-0.2.6
by arma＠torproject.org 13 Feb '17

13 Feb '17

commit e778a411b9e75ad2c1b46a6624d586a6f4a0c554 Merge: 43c18b1 144ec3d Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Feb 13 15:27:57 2017 -0500 Merge branch 'maint-0.2.5' into maint-0.2.6 changes/bug20384 | 10 ++++++++++ 1 file changed, 10 insertions(+)

1 0

[tor/master] Merge branch 'maint-0.2.8' into maint-0.2.9
by arma＠torproject.org 13 Feb '17

13 Feb '17

commit 4a2afd5b33f02ed3e5eb591dd29537fa4f69399f Merge: a86f95d 9ff7618 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Feb 13 15:41:20 2017 -0500 Merge branch 'maint-0.2.8' into maint-0.2.9

1 0

[tor/master] Merge branch 'maint-0.2.7' into maint-0.2.8
by arma＠torproject.org 13 Feb '17

13 Feb '17

commit 9ff76185d284f1982b5f49b2c652f7a05e71ba2b Merge: 9b90d51 5c42358 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Feb 13 15:39:13 2017 -0500 Merge branch 'maint-0.2.7' into maint-0.2.8

1 0

[tor/master] Merge branch 'maint-0.2.9'
by arma＠torproject.org 13 Feb '17

13 Feb '17

commit b421b3f621986318e28d4cc44c28aae7fa909b86 Merge: d9827e4 4a2afd5 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Feb 13 15:41:56 2017 -0500 Merge branch 'maint-0.2.9'

1 0

[tor/maint-0.2.9] be sure to remember the changes file for #20384
by arma＠torproject.org 13 Feb '17

13 Feb '17

commit 635c5a8a92c8066412645b291817eadcc82d8f8f Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Feb 13 15:22:36 2017 -0500 be sure to remember the changes file for #20384 --- changes/bug20384 | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/changes/bug20384 b/changes/bug20384 new file mode 100644 index 0000000..591015a --- /dev/null +++ b/changes/bug20384 @@ -0,0 +1,10 @@ + o Major features (security fixes): + - Prevent a class of security bugs caused by treating the contents + of a buffer chunk as if they were a NUL-terminated string. At + least one such bug seems to be present in all currently used + versions of Tor, and would allow an attacker to remotely crash + most Tor instances, especially those compiled with extra compiler + hardening. With this defense in place, such bugs can't crash Tor, + though we should still fix them as they occur. Closes ticket + 20384 (TROVE-2016-10-001). +

1 0