June 2017 - tor-commits - lists.torproject.org

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 19 Jun '17

19 Jun '17

commit 8e73cad2ac51ddd0d5e0a4eeaedb49537c5fc5e4 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Jun 19 17:45:29 2017 +0000 Update translations for liveusb-creator --- is/is.po | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/is/is.po b/is/is.po index 63bbd53..50dd58f 100644 --- a/is/is.po +++ b/is/is.po @@ -10,7 +10,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2017-06-10 07:50+0200\n" -"PO-Revision-Date: 2017-06-18 10:32+0000\n" +"PO-Revision-Date: 2017-06-19 17:31+0000\n" "Last-Translator: Sveinn í Felli <sv1(a)fellsnet.is>\n" "Language-Team: Icelandic (http://www.transifex.com/otf/torproject/language/is/)\n" "MIME-Version: 1.0\n" @@ -220,12 +220,12 @@ msgstr "Gat ekki fundið syslinux' gptmbr.bin" #: ../tails_installer/creator.py:1252 #, python-format msgid "Reading extracted MBR from %s" -msgstr "" +msgstr "Lesið afþjappaðan MBR-ræsigeira frá %s" #: ../tails_installer/creator.py:1256 #, python-format msgid "Could not read the extracted MBR from %(path)s" -msgstr "" +msgstr "Gat ekki lesið afþjappaðan MBR-ræsigeira frá %(path)s" #: ../tails_installer/creator.py:1269 ../tails_installer/creator.py:1270 #, python-format @@ -318,12 +318,12 @@ msgstr "Tails-uppsetningarforrit" #: ../tails_installer/gui.py:440 msgid "No device suitable to install Tails could be found" -msgstr "" +msgstr "Ekkert hentugt tæki fannst til uppsetningar á Tails" #: ../tails_installer/gui.py:442 #, python-format msgid "Please plug a USB flash drive or SD card of at least %0.1f GB." -msgstr "" +msgstr "Tengdu USB-minnislykil eða SD-minniskort með að minnsta kosti %0.1f GB gagnarýmd." #: ../tails_installer/gui.py:474 #, python-format @@ -341,7 +341,7 @@ msgid "" "The USB stick \"%(pretty_name)s\" is configured as non-removable by its " "manufacturer and Tails will fail to start on it. Please try installing on a " "different model." -msgstr "" +msgstr "USB-minnislykillinn \"%(pretty_name)s\" er ekki hannaður frá framleiðanda til að vera útskiptanlegur, Tails mun því ekki geta ræst upp af honum. Prófaðu að nota einhverja aðra tegund minnislykils." #: ../tails_installer/gui.py:498 #, python-format @@ -440,7 +440,7 @@ msgstr "%(filename)s valið" #: ../tails_installer/source.py:28 msgid "Unable to find LiveOS on ISO" -msgstr "" +msgstr "Get ekki fundið LiveOS-keyrslukerfi á ISO-diskmynd" #: ../tails_installer/source.py:34 #, python-format @@ -502,7 +502,7 @@ msgid "" "To run Tails Installer you need an ISO image which can be downloaded from " "the Tails website: <a " "href=\"https://tails.boum.org/download/\">https://tails.boum.org/download/</a>" -msgstr "" +msgstr "Til að keyra Tails-uppsetningarforritið þarftu ISO-diskmynd sem hægt er að sækja á vefsvæði Tails: <a href=\"https://tails.boum.org/download/\">https://tails.boum.org/download/</a>" #: ../data/tails-installer-launcher.ui.h:2 msgid "Install" @@ -514,7 +514,7 @@ msgstr "• Setja Tails upp á nýjan USB-minnislykil." #: ../data/tails-installer-launcher.ui.h:4 msgid "• The USB stick that you install on is formatted and all data is lost." -msgstr "" +msgstr "• USB-lykilinn sem þú setur upp á verður forsniðinn og öll gögn á honum munu tapast." #: ../data/tails-installer-launcher.ui.h:5 msgid "Upgrade" @@ -522,7 +522,7 @@ msgstr "Uppfæra" #: ../data/tails-installer-launcher.ui.h:6 msgid "• Upgrade a Tails USB stick to the version of an ISO image." -msgstr "" +msgstr "• Uppæra Tails USB-minnislykil í útgáfu af ISO-diskmynd." #: ../data/tails-installer-launcher.ui.h:7 msgid "" @@ -544,7 +544,7 @@ msgstr "Setja upp með því að klóna" msgid "" "• Install Tails on another USB stick by copying the Tails system that you " "are currently using." -msgstr "" +msgstr "• Setja Tails upp á USB-minnislykil með því að afrita Tails-kerfið sem þú ert að nota núna." #: ../data/tails-installer-launcher.ui.h:11 msgid "" @@ -560,7 +560,7 @@ msgstr "Uppfæra með því að klóna" msgid "" "• Upgrade another Tails USB stick to the same version of Tails that you are " "currently using." -msgstr "" +msgstr "• Uppæra annan Tails USB-minnislykil í sömu útgáfu af Tails og þá sem þú ert að nota núna." #: ../data/tails-installer-launcher.ui.h:14 msgid "Upgrade from ISO" @@ -568,7 +568,7 @@ msgstr "Uppfæra af ISO" #: ../data/tails-installer-launcher.ui.h:15 msgid "• Upgrade another Tails USB stick to the version of an ISO image." -msgstr "" +msgstr "• Uppæra annan Tails USB-minnislykil í útgáfu af ISO-diskmynd." #: ../data/tails-installer-launcher.ui.h:16 msgid ""

1 0

[tor/master] Bump master to 0.3.2.0-alpha-dev. For 0.3.1, use maint-0.3.1
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit a3139c97506a2941e620b35423dffc3e513426c3 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 11:57:44 2017 -0400 Bump master to 0.3.2.0-alpha-dev. For 0.3.1, use maint-0.3.1 --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index 0c673d0..aa43c15 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2017, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.3.1.3-alpha-dev]) +AC_INIT([tor],[0.3.2.0-alpha-dev]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index d3df391..9f3a86a 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.3.1.3-alpha-dev" +!define VERSION "0.3.2.0-alpha-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 696f6fe..9b16c64 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -218,7 +218,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.3.1.3-alpha-dev" +#define VERSION "0.3.2.0-alpha-dev"

1 0

[tor/master] Document more files in the datadirectory.
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 5641e27ffbd1016ed88e05f10319a2b041b5e167 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 09:57:57 2017 -0400 Document more files in the datadirectory. This improved list comes from the ls -R results that weasel and ln5 sent me. Thanks! --- changes/more-files | 5 +++-- doc/tor.1.txt | 31 ++++++++++++++++++++++++++----- 2 files changed, 29 insertions(+), 7 deletions(-) diff --git a/changes/more-files b/changes/more-files index f416201..861d6a3 100644 --- a/changes/more-files +++ b/changes/more-files @@ -1,3 +1,4 @@ o Documentation: - - Document the "sr-random" file and "diff-cache" directory in the Tor - data directory. \ No newline at end of file + - Document more of the files in the Tor data directory, including + cached-extrainfo, secret_onion_key{,_ntor}.old, hidserv-stats, + approved-routers, sr-random, and diff-cache. diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 9fd8a97..ff9fba7 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -2687,7 +2687,8 @@ FILES __DataDirectory__**/cached-status/**:: The most recently downloaded network status document for each authority. Each file holds one such document; the filenames are the hexadecimal - identity key fingerprints of the directory authorities. Mostly obsolete. + identity key fingerprints of the directory authorities. Obsolete; + no longer in use. __DataDirectory__**/cached-certs**:: This file holds downloaded directory key certificates that are used to @@ -2703,6 +2704,13 @@ __DataDirectory__**/cached-descriptors** and **cached-descriptors.new**:: a given router. The ".new" file is an append-only journal; when it gets too large, all entries are merged into a new cached-descriptors file. +__DataDirectory__**/cached-extrainfo** and **cached-extrainfo.new**:: + As "cached-descriptors", but holds optionally-downloaded "extra-info" + documents. Relays use these documents to send inessential information + about statistics, bandwidth history, and network health to the + authorities. They aren't fetched by default; see the DownloadExtraInfo + option for more info. + __DataDirectory__**/cached-microdescs** and **cached-microdescs.new**:: These files hold downloaded microdescriptors. Lines beginning with @-signs are annotations that contain more information about a given @@ -2809,13 +2817,17 @@ __DataDirectory__**/keys/ed25519_signing_cert**:: The certificate which authenticates "ed25519_signing_secret_key" as having been signed by the Ed25519 master key. -__DataDirectory__**/keys/secret_onion_key**:: +__DataDirectory__**/keys/secret_onion_key** and **secret_onion_key.old**:: A relay's RSA1024 short-term onion key. Used to decrypt old-style ("TAP") - circuit extension requests. + circuit extension requests. The ".old" file holds the previously + generated key, which the relay uses to handle any requests that were + made by clients that didn't have the new one. -__DataDirectory__**/keys/secret_onion_key_ntor**:: +__DataDirectory__**/keys/secret_onion_key_ntor** and **secret_onion_key_ntor.old**:: A relay's Curve25519 short-term onion key. Used to handle modern ("ntor") - circuit extension requests. + circuit extension requests. The ".old" file holds the previously + generated key, which the relay uses to handle any requests that were + made by clients that didn't have the new one. __DataDirectory__**/fingerprint**:: Only used by servers. Holds the fingerprint of the server's identity key. @@ -2870,11 +2882,20 @@ __DataDirectory__**/stats/conn-stats**:: Only used by servers. This file is used to collect approximate connection history (number of active connections over time). +__DataDirectory__**/stats/hidserv-stats**:: + Only used by servers. This file is used to collect approximate counts + of what fraction of the traffic is hidden service rendezvous traffic, and + approximately how many hidden services the relay has seen. + __DataDirectory__**/networkstatus-bridges**:: Only used by authoritative bridge directories. Contains information about bridges that have self-reported themselves to the bridge authority. +__DataDirectory__**/approved-routers**:: + Authorities only. This file is used to configure which relays are + known to be valid, invalid, and so forth. + __HiddenServiceDirectory__**/hostname**:: The <base32-encoded-fingerprint>.onion domain name for this hidden service. If the hidden service is restricted to authorized clients only, this file

1 0

[sandboxed-tor-browser/master] Do the release ritual for sandboxed-tor-browser-0.0.8.
by yawning＠torproject.org 19 Jun '17

19 Jun '17

commit 2ea0b9f35a944053555528b875d5b43ba87ebb2c Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Mon Jun 19 12:26:46 2017 +0000 Do the release ritual for sandboxed-tor-browser-0.0.8. --- ChangeLog | 2 +- data/version | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index cf47ca3..39aa2f9 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.0.8 - UNRELEASED: +Changes in version 0.0.8 - 2017-06-19: * Bug 20776: Remove the X11 `MIT-SHM` workaround from the stub. * Bug 22470: Resync the bridges. * Bug 22607: Make it clear that basically 0 active development is happening. diff --git a/data/version b/data/version index 02cc5f6..d169b2f 100644 --- a/data/version +++ b/data/version @@ -1 +1 @@ -0.0.8-dev +0.0.8

1 0

[sandboxed-tor-browser/master] Bump the version to 0.0.9-dev.
by yawning＠torproject.org 19 Jun '17

19 Jun '17

commit e30227cd3d34674f693e8a710d8cec8fc378bf68 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Mon Jun 19 12:29:31 2017 +0000 Bump the version to 0.0.9-dev. Though god knows if I'll do development again. --- ChangeLog | 2 ++ data/version | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 39aa2f9..3ba6979 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,5 @@ +Changes in version 0.0.9 - UNRELEASED: + Changes in version 0.0.8 - 2017-06-19: * Bug 20776: Remove the X11 `MIT-SHM` workaround from the stub. * Bug 22470: Resync the bridges. diff --git a/data/version b/data/version index d169b2f..24dcb2e 100644 --- a/data/version +++ b/data/version @@ -1 +1 @@ -0.0.8 +0.0.9-dev

1 0

[sandboxed-tor-browser/master] Unbreak systems that don't have a ~/.Xauthority.
by yawning＠torproject.org 19 Jun '17

19 Jun '17

commit 07e4f45f9cf02085e9e2faccb7428927cb27b905 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Mon Jun 19 12:18:05 2017 +0000 Unbreak systems that don't have a ~/.Xauthority. Fallout from #22648, broke on my Fedora VM that uses XWayland, works now. --- src/cmd/sandboxed-tor-browser/internal/sandbox/x11/x11.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/cmd/sandboxed-tor-browser/internal/sandbox/x11/x11.go b/src/cmd/sandboxed-tor-browser/internal/sandbox/x11/x11.go index 60e1781..908bedd 100644 --- a/src/cmd/sandboxed-tor-browser/internal/sandbox/x11/x11.go +++ b/src/cmd/sandboxed-tor-browser/internal/sandbox/x11/x11.go @@ -237,7 +237,8 @@ func New(display, hostname, pSock string) (*SandboxedX11, error) { var err error if x.Xauthority, err = craftAuthority(hostname, displayNum); err != nil { - return nil, fmt.Errorf("sandbox: Xauthority: %v", err) + // Some systems don't have an Xauthority file, like my Fedora VM. + Debugf("sandbox: Xauthority: %v", err) } return x, nil

1 0

[sandboxed-tor-browser/master] Bug 22607: Make it clear that basically 0 active development is happening.
by yawning＠torproject.org 19 Jun '17

19 Jun '17

commit 4fa55007da81894e60f3ea9890c72ba9d7a37c30 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Mon Jun 19 12:11:44 2017 +0000 Bug 22607: Make it clear that basically 0 active development is happening. No functional changes. --- ChangeLog | 1 + README.md | 2 ++ 2 files changed, 3 insertions(+) diff --git a/ChangeLog b/ChangeLog index 8a9f897..cf47ca3 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,7 @@ Changes in version 0.0.8 - UNRELEASED: * Bug 20776: Remove the X11 `MIT-SHM` workaround from the stub. * Bug 22470: Resync the bridges. + * Bug 22607: Make it clear that basically 0 active development is happening. * Bug 22648: Prevent the "easy" to fix X11 related sandbox escapes. * Bug 22650: Make it clear that Pulse Audio is potentially dangerous to enable. diff --git a/README.md b/README.md index 9f173cc..dc4fc18 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,8 @@ # sandboxed-tor-browser ### Yawning Angel (yawning at schwanenlied dot me) +##### WARNING: Active development is on indefinite hiatus. + > I would build a great sandbox. And nobody builds sandboxes better than me, > believe me. I will build a great, great sandbox on our application border. > And I will have Tor Browser pay for that sandbox.

1 0

[sandboxed-tor-browser/master] Bug 22470: Resync the bridges.
by yawning＠torproject.org 19 Jun '17

19 Jun '17

commit 47da716196432ff5233ce5473946b842255b1a6b Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Mon Jun 19 11:51:41 2017 +0000 Bug 22470: Resync the bridges. Exactly what it says on the tin. --- ChangeLog | 1 + data/bridges.json | 8 +++++++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index edae37e..8a9f897 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,6 @@ Changes in version 0.0.8 - UNRELEASED: * Bug 20776: Remove the X11 `MIT-SHM` workaround from the stub. + * Bug 22470: Resync the bridges. * Bug 22648: Prevent the "easy" to fix X11 related sandbox escapes. * Bug 22650: Make it clear that Pulse Audio is potentially dangerous to enable. diff --git a/data/bridges.json b/data/bridges.json index e909209..358476f 100644 --- a/data/bridges.json +++ b/data/bridges.json @@ -27,6 +27,12 @@ "obfs4 154.35.22.13:16815 FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D cert=fKnzxr+m+jWXXQGCaXe4f2gGoPXMzbL+bTBbXMYXuK0tMotd+nXyS33y2mONZWU29l81CA iat-mode=0", "obfs4 192.95.36.142:443 CDF2E852BF539B82BD10E27E9115A31734E378C2 cert=qUVQ0srL1JI/vO6V6m/24anYXiJD3QP2HgzUKQtQ7GRqqUvs7P+tG43RtAqdhLOALP7DJQ iat-mode=1", - "obfs4 85.17.30.79:443 FC259A04A328A07FED1413E9FC6526530D9FD87A cert=RutxZlu8BtyP+y0NX7bAVD41+J/qXNhHUrKjFkRSdiBAhIHIQLhKQ2HxESAKZprn/lR3KA iat-mode=0" + "obfs4 85.17.30.79:443 FC259A04A328A07FED1413E9FC6526530D9FD87A cert=RutxZlu8BtyP+y0NX7bAVD41+J/qXNhHUrKjFkRSdiBAhIHIQLhKQ2HxESAKZprn/lR3KA iat-mode=0", + "obfs4 38.229.1.78:80 C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 cert=Hmyfd2ev46gGY7NoVxA9ngrPF2zCZtzskRTzoWXbxNkzeVnGFPWmrTtILRyqCTjHR+s9dg iat-mode=1", + + "obfs4 38.229.33.83:80 0BAC39417268B96B9F514E7F63FA6FBA1A788955 cert=VwEFpk9F/UN9JED7XpG1XOjm/O8ZCXK80oPecgWnNDZDv5pdkhq1OpbAH0wNqOT6H6BmRQ iat-mode=1", + "obfs4 [2001:470:b381:bfff:216:3eff:fe23:d6c3]:443 CDF2E852BF539B82BD10E27E9115A31734E378C2 cert=qUVQ0srL1JI/vO6V6m/24anYXiJD3QP2HgzUKQtQ7GRqqUvs7P+tG43RtAqdhLOALP7DJQ iat-mode=1", + "obfs4 37.218.240.34:40035 88CD36D45A35271963EF82E511C8827A24730913 cert=eGXYfWODcgqIdPJ+rRupg4GGvVGfh25FWaIXZkit206OSngsp7GAIiGIXOJJROMxEqFKJg iat-mode=1", + "obfs4 37.218.245.14:38224 D9A82D2F9C2F65A18407B1D2B764F130847F8B5D cert=bjRaMrr1BRiAW8IE9U5z27fQaYgOhX1UCmOpg2pFpoMvo6ZgQMzLsaTzzQNTlm7hNcb+Sg iat-mode=0" ] }

1 0

[sandboxed-tor-browser/master] Bug 20776: Remove the X11 `MIT-SHM` workaround from the stub.
by yawning＠torproject.org 19 Jun '17

19 Jun '17

commit 6903227f8f0a1c06fe19aa26268195e47cc3b3b1 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Mon Jun 19 11:30:52 2017 +0000 Bug 20776: Remove the X11 `MIT-SHM` workaround from the stub. ESR52 has the workarounds for the libcairo brain damage, and thanks to level. --- ChangeLog | 1 + src/tbb_stub/tbb_stub.c | 34 ---------------------------------- 2 files changed, 1 insertion(+), 34 deletions(-) diff --git a/ChangeLog b/ChangeLog index aea7c74..edae37e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,5 @@ Changes in version 0.0.8 - UNRELEASED: + * Bug 20776: Remove the X11 `MIT-SHM` workaround from the stub. * Bug 22648: Prevent the "easy" to fix X11 related sandbox escapes. * Bug 22650: Make it clear that Pulse Audio is potentially dangerous to enable. diff --git a/src/tbb_stub/tbb_stub.c b/src/tbb_stub/tbb_stub.c index 63f2d42..e7ca733 100644 --- a/src/tbb_stub/tbb_stub.c +++ b/src/tbb_stub/tbb_stub.c @@ -47,13 +47,11 @@ #include <stdbool.h> #include <stdio.h> #include <stdlib.h> -#include <X11/Xlib.h> static pthread_once_t stub_init_once = PTHREAD_ONCE_INIT; static int (*real_connect)(int, const struct sockaddr *, socklen_t) = NULL; static int (*real_socket)(int, int, int) = NULL; static void *(*real_dlopen)(const char *, int) = NULL; -static Bool (*real_XQueryExtension)(Display*, _Xconst char*, int*, int*, int*) = NULL; static struct sockaddr_un socks_addr; static struct sockaddr_un control_addr; @@ -159,24 +157,6 @@ dlopen(const char *filename, int flags) return ret; } -Bool -XQueryExtension(Display *display, _Xconst char *name, int *major, int *event, int *error) { - pthread_once(&stub_init_once, stub_init); - - if (!strcmp(name, "MIT-SHM")) { - *major = 0; - return False; - } - - return real_XQueryExtension(display, name, major, event, error); -} - -Bool -XShmQueryExtension(Display* display) { - (void)display; - return False; -} - /* There are rumors that PI futexes have scary race conditions, that enable * an exploit that is being sold by the forces of darkness. On systems where * we can filter futex kernel args, we reject such calls. @@ -255,7 +235,6 @@ stub_init(void) char *socks_path = secure_getenv("TOR_STUB_SOCKS_SOCKET"); char *control_path = secure_getenv("TOR_STUB_CONTROL_SOCKET"); size_t dest_len = sizeof(socks_addr.sun_path); - void *handle = NULL; /* If `TOR_STUB_SOCKS_SOCKET` isn't set, bail. */ if (socks_path == NULL) { @@ -302,19 +281,6 @@ stub_init(void) goto out; } - /* Firefox does not degrade gracefully when "MIT-SHM" fails. - * - * See: https://bugzilla.mozilla.org/show_bug.cgi?id=1271100#c20 - */ - if ((handle = real_dlopen("libXext.so.6", RTLD_LAZY)) == NULL) { - fprintf(stderr, "ERROR: Failed to dlopen() libXext.so: %s\n", dlerror()); - goto out; - } - if ((real_XQueryExtension = dlsym(handle, "XQueryExtension")) == NULL) { - fprintf(stderr, "ERROR: Failed to find `XQueryExtension()` symbol: %s\n", dlerror()); - goto out; - } - return; out:

1 0

[sandboxed-tor-browser/master] Bug 22650: Make it clear that Pulse Audio is potentially dangerous to enable.
by yawning＠torproject.org 19 Jun '17

19 Jun '17

commit 9f016c247ab26362c3ba05ee8bb70fd306bfdd42 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Mon Jun 19 11:10:42 2017 +0000 Bug 22650: Make it clear that Pulse Audio is potentially dangerous to enable. Per "Jann Horn of Google Project Zero", PulseAudio is a potential vector for sandbox escapes. While this is not part of the threat model in current releases, it should be documented as such in the UI. --- ChangeLog | 2 ++ data/ui/gtkui.ui | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 892230e..aea7c74 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,7 @@ Changes in version 0.0.8 - UNRELEASED: * Bug 22648: Prevent the "easy" to fix X11 related sandbox escapes. + * Bug 22650: Make it clear that Pulse Audio is potentially dangerous + to enable. Changes in version 0.0.7 - 2017-05-22: * Bug 21977: Fetch install/update metadata files from a different location. diff --git a/data/ui/gtkui.ui b/data/ui/gtkui.ui index fc88a6f..1d8c4d5 100644 --- a/data/ui/gtkui.ui +++ b/data/ui/gtkui.ui @@ -528,7 +528,7 @@ <property name="visible">True</property> <property name="can_focus">False</property> <property name="halign">start</property> - <property name="label" translatable="yes">Pulse Audio</property> + <property name="label" translatable="yes">Pulse Audio (UNSAFE)</property> </object> <packing> <property name="expand">True</property>

1 0