May 2017 - tor-commits - lists.torproject.org

[tor/release-0.3.0] Start on an 0.3.0.7 changelog
by nickm＠torproject.org 15 May '17

15 May '17

commit e4f29dc61ae4c2003bfc5c1a17434d99067231b2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 15 14:18:13 2017 -0400 Start on an 0.3.0.7 changelog --- ChangeLog | 23 +++++++++++++++++++++++ changes/bug21943 | 6 ------ changes/geoip-may2017 | 4 ---- changes/prop275-minimal | 9 --------- 4 files changed, 23 insertions(+), 19 deletions(-) diff --git a/ChangeLog b/ChangeLog index 39ef538..49f2cd0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,26 @@ +Changes in version 0.3.0.7 - 2017-05-1? + blurb blurb blurb + + o Minor features: + - Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2 + Country database. + + o Minor features (future-proofing): + - Tor no longer refuses to download microdescriptors or descriptors + if they are listed as "published in the future". This change will + eventually allow us to stop listing meaningful "published" dates + in microdescriptor consensuses, and thereby allow us to reduce the + resources required to download consensus diffs by over 50%. + Implements part of ticket 21642; implements part of proposal 275. + + o Minor bugfixes (Linux seccomp2 sandbox): + - The getpid() system call is now permitted under the Linux seccomp2 + sandbox, to avoid crashing with versions of OpenSSL (and other + libraries) that attempt to learn the process's PID by using the + syscall rather than the VDSO code. Fixes bug 21943; bugfix + on 0.2.5.1-alpha. + + Changes in version 0.3.0.6 - 2017-04-26 Tor 0.3.0.6 is the first stable release of the Tor 0.3.0 series. diff --git a/changes/bug21943 b/changes/bug21943 deleted file mode 100644 index dbe2c72..0000000 --- a/changes/bug21943 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (Linux seccomp2 sandbox): - - The getpid() system call is now permitted under the Linux seccomp2 - sandbox, to avoid crashing with versions of OpenSSL (and other - libraries) that attempt to learn the process's PID by using the - syscall rather than the VDSO code. Fixes bug 21943; bugfix on - 0.2.5.1-alpha. diff --git a/changes/geoip-may2017 b/changes/geoip-may2017 deleted file mode 100644 index 4e504d7..0000000 --- a/changes/geoip-may2017 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2 - Country database. - diff --git a/changes/prop275-minimal b/changes/prop275-minimal deleted file mode 100644 index 83d42f8..0000000 --- a/changes/prop275-minimal +++ /dev/null @@ -1,9 +0,0 @@ - o Minor features (future-proofing): - - - Tor no longer refuses to download microdescriptors or descriptors if - they are listed as "published in the future". This change will - eventually allow us to stop listing meaningful "published" dates - in microdescriptor consensuses, and thereby allow us to reduce the - resources required to download consensus diffs by over 50%. - Implements part of ticket 21642; implements part of proposal 275. -

1 0

[translation/tails-openpgp-applet_completed] Update translations for tails-openpgp-applet_completed
by translation＠torproject.org 15 May '17

15 May '17

commit 07c00133d7d201b0a2d528fc6c5336b12ecaeaab Author: Translation commit bot <translation(a)torproject.org> Date: Mon May 15 17:47:17 2017 +0000 Update translations for tails-openpgp-applet_completed --- pt_BR/openpgp-applet.pot | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pt_BR/openpgp-applet.pot b/pt_BR/openpgp-applet.pot index 82a4abe..24097b0 100644 --- a/pt_BR/openpgp-applet.pot +++ b/pt_BR/openpgp-applet.pot @@ -3,14 +3,14 @@ # This file is distributed under the same license as the PACKAGE package. # # Translators: -# Communia <ameaneantie(a)riseup.net>, 2015-2016 +# Communia <ameaneantie(a)riseup.net>, 2015-2017 # Danton Medrado, 2015 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: tails(a)boum.org\n" "POT-Creation-Date: 2015-08-10 15:55+0200\n" -"PO-Revision-Date: 2016-12-05 00:02+0000\n" +"PO-Revision-Date: 2017-05-15 17:35+0000\n" "Last-Translator: Communia <ameaneantie(a)riseup.net>\n" "Language-Team: Portuguese (Brazil) (http://www.transifex.com/otf/torproject/language/pt_BR/)\n" "MIME-Version: 1.0\n" @@ -113,7 +113,7 @@ msgstr "Ocultar contatos destinatários" msgid "" "Hide the user IDs of all recipients of an encrypted message. Otherwise " "anyone that sees the encrypted message can see who the recipients are." -msgstr "Ocultar as IDs de usuário de todos os endereços destinatários de uma mensagem criptografada. Caso contrário, qualquer pessoa que vir a mensagem criptografada, verá as identidades." +msgstr "Ocultar as IDs de usuário de todos os endereços destinatários de uma mensagem criptografada. Caso contrário, qualquer pessoa que vir a mensagem criptografada saberá quem são os destinatários." #: bin/openpgp-applet:556 msgid "Sign message as:"

1 0

[translation/tails-openpgp-applet] Update translations for tails-openpgp-applet
by translation＠torproject.org 15 May '17

15 May '17

commit fdc70fda19f6e393a5f1c74b3e69c6562093d2b3 Author: Translation commit bot <translation(a)torproject.org> Date: Mon May 15 17:47:11 2017 +0000 Update translations for tails-openpgp-applet --- pt_BR/openpgp-applet.pot | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pt_BR/openpgp-applet.pot b/pt_BR/openpgp-applet.pot index 82a4abe..24097b0 100644 --- a/pt_BR/openpgp-applet.pot +++ b/pt_BR/openpgp-applet.pot @@ -3,14 +3,14 @@ # This file is distributed under the same license as the PACKAGE package. # # Translators: -# Communia <ameaneantie(a)riseup.net>, 2015-2016 +# Communia <ameaneantie(a)riseup.net>, 2015-2017 # Danton Medrado, 2015 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: tails(a)boum.org\n" "POT-Creation-Date: 2015-08-10 15:55+0200\n" -"PO-Revision-Date: 2016-12-05 00:02+0000\n" +"PO-Revision-Date: 2017-05-15 17:35+0000\n" "Last-Translator: Communia <ameaneantie(a)riseup.net>\n" "Language-Team: Portuguese (Brazil) (http://www.transifex.com/otf/torproject/language/pt_BR/)\n" "MIME-Version: 1.0\n" @@ -113,7 +113,7 @@ msgstr "Ocultar contatos destinatários" msgid "" "Hide the user IDs of all recipients of an encrypted message. Otherwise " "anyone that sees the encrypted message can see who the recipients are." -msgstr "Ocultar as IDs de usuário de todos os endereços destinatários de uma mensagem criptografada. Caso contrário, qualquer pessoa que vir a mensagem criptografada, verá as identidades." +msgstr "Ocultar as IDs de usuário de todos os endereços destinatários de uma mensagem criptografada. Caso contrário, qualquer pessoa que vir a mensagem criptografada saberá quem são os destinatários." #: bin/openpgp-applet:556 msgid "Sign message as:"

1 0

[stem/master] Tutorial section mislabeled
by atagar＠torproject.org 15 May '17

15 May '17

commit 797d70780548abc44f8021489d5a12352310c598 Author: Damian Johnson <atagar(a)torproject.org> Date: Mon May 15 10:30:25 2017 -0700 Tutorial section mislabeled On the top of the descriptor tutorials we listed "Can I create descriptors?" twice. Fixing it so the second says "Validating the descriptor's content" instead. --- docs/tutorials/mirror_mirror_on_the_wall.rst | 4 ++-- stem/descriptor/__init__.py | 2 ++ 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/tutorials/mirror_mirror_on_the_wall.rst b/docs/tutorials/mirror_mirror_on_the_wall.rst index d9ba6e0..5148c50 100644 --- a/docs/tutorials/mirror_mirror_on_the_wall.rst +++ b/docs/tutorials/mirror_mirror_on_the_wall.rst @@ -163,8 +163,6 @@ through Tor's control socket... .. literalinclude:: /_static/example/descriptor_from_tor_data_directory.py :language: python -.. _validating-the-descriptors-content: - .. _can-i-create-descriptors: Can I create descriptors? @@ -204,6 +202,8 @@ descriptor... Until it does try using `leekspin <https://pypi.python.org/pypi/leekspin>`_ instead. +.. _validating-the-descriptors-content: + Validating the descriptor's content ----------------------------------- diff --git a/stem/descriptor/__init__.py b/stem/descriptor/__init__.py index b9c31af..a73093c 100644 --- a/stem/descriptor/__init__.py +++ b/stem/descriptor/__init__.py @@ -681,9 +681,11 @@ class Descriptor(object): from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives.serialization import load_der_public_key from cryptography.utils import int_to_bytes, int_from_bytes + key = load_der_public_key(_bytes_for_block(signing_key), default_backend()) modulus = key.public_numbers().n public_exponent = key.public_numbers().e + sig_as_bytes = _bytes_for_block(signature) sig_as_long = int_from_bytes(sig_as_bytes, byteorder='big') # convert signature to an int blocksize = len(sig_as_bytes) # 256B for NetworkStatusDocuments, 128B for others

1 0

[tor/master] Merge branch 'bug22245_024'
by nickm＠torproject.org 15 May '17

15 May '17

commit 71a21256b0c06bcd0e32fd5d56edbed921aa70fa Merge: 85f75d6 a6514b8 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 15 11:46:55 2017 -0400 Merge branch 'bug22245_024' changes/bug22245 | 5 +++++ src/or/hibernate.c | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-)

1 0

[tor/master] Fix a logic error in hibernate.c
by nickm＠torproject.org 15 May '17

15 May '17

commit a6514b8a20b7a6fafb72bafad1e9c98a8e35cdee Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 15 11:43:18 2017 -0400 Fix a logic error in hibernate.c Closes bug 22245; bugfix on 0.0.9rc1, when bandwidth accounting was first introduced. Found by Andrey Karpov and reported at https://www.viva64.com/en/b/0507/ --- changes/bug22245 | 5 +++++ src/or/hibernate.c | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/changes/bug22245 b/changes/bug22245 new file mode 100644 index 0000000..6ae1859 --- /dev/null +++ b/changes/bug22245 @@ -0,0 +1,5 @@ + o Minor bugfixes (bandwidth accounting): + - Roll over monthly accounting at the configured hour and minute, + rather than always at 00:00. + Fixes bug 22245; bugfix on 0.0.9rc1. + Found by Andrey Karpov with PVS-Studio. diff --git a/src/or/hibernate.c b/src/or/hibernate.c index a412571..e5ed3d4 100644 --- a/src/or/hibernate.c +++ b/src/or/hibernate.c @@ -290,7 +290,7 @@ edge_of_accounting_period_containing(time_t now, int get_end) case UNIT_MONTH: { /* If this is before the Nth, we want the Nth of last month. */ if (tm.tm_mday < cfg_start_day || - (tm.tm_mday < cfg_start_day && before)) { + (tm.tm_mday == cfg_start_day && before)) { --tm.tm_mon; } /* Otherwise, the month is correct. */

1 0

[tor/master] Add hs_test_helpers.h to noinst_HEADERS
by nickm＠torproject.org 15 May '17

15 May '17

commit 85f75d617c4f0c409bd9daca9d4b07ded53e5ede Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 15 11:45:20 2017 -0400 Add hs_test_helpers.h to noinst_HEADERS --- src/test/include.am | 1 + 1 file changed, 1 insertion(+) diff --git a/src/test/include.am b/src/test/include.am index c166d3b..4d6215e 100644 --- a/src/test/include.am +++ b/src/test/include.am @@ -250,6 +250,7 @@ src_test_test_timers_LDFLAGS = $(src_test_test_LDFLAGS) noinst_HEADERS+= \ src/test/fakechans.h \ + src/test/hs_test_helpers.h \ src/test/log_test_helpers.h \ src/test/rend_test_helpers.h \ src/test/test.h \

1 0

[tor/master] Fix assertion to actually have a chance of failing
by nickm＠torproject.org 15 May '17

15 May '17

commit 0e348720fc3a4db0e61fcb81673080ae71e80b4e Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 15 11:25:52 2017 -0400 Fix assertion to actually have a chance of failing This assertion can only fail if we mess up some of our other code, but let's try to get it right. Closes 22244. --- changes/bug22244 | 6 ++++++ src/or/dns.c | 5 +++-- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/changes/bug22244 b/changes/bug22244 new file mode 100644 index 0000000..ed5d36b --- /dev/null +++ b/changes/bug22244 @@ -0,0 +1,6 @@ + o Minor bugfixes (exit-side DNS): + - Fix an untriggerable assertion that checked the output of a + libevent DNS error, so that the assertion actually behaves as + expected. Fixes bug 22244; bugfix on 0.2.0.20-rc. Found by Andrey + Karpov using PVS-Studio. + diff --git a/src/or/dns.c b/src/or/dns.c index cd84a64..024a21a 100644 --- a/src/or/dns.c +++ b/src/or/dns.c @@ -160,8 +160,9 @@ evdns_log_cb(int warn, const char *msg) } if (!strcmpstart(msg, "Nameserver ") && (cp=strstr(msg, " has failed: "))) { char *ns = tor_strndup(msg+11, cp-(msg+11)); - const char *err = strchr(cp, ':')+2; - tor_assert(err); + const char *colon = strchr(cp, ':'); + tor_assert(colon); + const char *err = colon+2; /* Don't warn about a single failed nameserver; we'll warn with 'all * nameservers have failed' if we're completely out of nameservers; * otherwise, the situation is tolerable. */

1 0

[tor/master] Merge branch 'bug18100_029'
by nickm＠torproject.org 15 May '17

15 May '17

commit 1ec45bb54621208906ce260255086a8456a9646e Merge: d3a39cf 4473271 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 15 11:19:44 2017 -0400 Merge branch 'bug18100_029' changes/bug18100 | 5 +++++ src/or/connection_edge.c | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-)

1 0

[tor/master] Fix the TRPOXY typo in connection_edge.c
by nickm＠torproject.org 15 May '17

15 May '17

commit 4473271c66d69941d19592480174ebf32ff4bf5c Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 15 11:16:50 2017 -0400 Fix the TRPOXY typo in connection_edge.c Also add a get_options() call so it compiles. Fixes bug 18100; bugfix on 0.2.6.3-alpha. Patch from "d4fq0fQAgoJ". --- changes/bug18100 | 5 +++++ src/or/connection_edge.c | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/changes/bug18100 b/changes/bug18100 new file mode 100644 index 0000000..cd3ba2c --- /dev/null +++ b/changes/bug18100 @@ -0,0 +1,5 @@ + o Major bugfixes (linux TPROXY support): + - Fix a typo that had prevented TPROXY-based transparent proxying from + working under Linux. Fixes bug 18100; bugfix on 0.2.6.3-alpha. + Patch from "d4fq0fQAgoJ". + diff --git a/src/or/connection_edge.c b/src/or/connection_edge.c index 3550d0e..0fad697 100644 --- a/src/or/connection_edge.c +++ b/src/or/connection_edge.c @@ -1910,8 +1910,8 @@ destination_from_socket(entry_connection_t *conn, socks_request_t *req) socklen_t orig_dst_len = sizeof(orig_dst); tor_addr_t addr; -#ifdef TRANS_TRPOXY - if (options->TransProxyType_parsed == TPT_TPROXY) { +#ifdef TRANS_TPROXY + if (get_options()->TransProxyType_parsed == TPT_TPROXY) { if (getsockname(ENTRY_TO_CONN(conn)->s, (struct sockaddr*)&orig_dst, &orig_dst_len) < 0) { int e = tor_socket_errno(ENTRY_TO_CONN(conn)->s);

1 0