July 2017 - tor-commits - lists.torproject.org

[tor/master] Use the proper syscall in sandbox error messages
by nickm＠torproject.org 05 Jul '17

05 Jul '17

commit c79e2863866ff4730fb3892d6cba3cf40e15077e Author: cypherpunks <cypherpunks(a)torproject.org> Date: Wed Jun 28 12:35:01 2017 +0000 Use the proper syscall in sandbox error messages Fixes #22750. --- changes/ticket22750 | 3 +++ src/common/sandbox.c | 6 +++--- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/changes/ticket22750 b/changes/ticket22750 new file mode 100644 index 0000000..6bc1fb2 --- /dev/null +++ b/changes/ticket22750 @@ -0,0 +1,3 @@ + o Minor bugfixes (logging, sandbox): + - Use the correct system call in sandbox error messages. Fixes bug + 22750; bugfix on 0.2.5.1-alpha. diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 52caa4f..fb57902 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -480,7 +480,7 @@ sb_chmod(scmp_filter_ctx ctx, sandbox_cfg_t *filter) rc = seccomp_rule_add_1(ctx, SCMP_ACT_ALLOW, SCMP_SYS(chmod), SCMP_CMP_STR(0, SCMP_CMP_EQ, param->value)); if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add open syscall, received " + log_err(LD_BUG,"(Sandbox) failed to add chmod syscall, received " "libseccomp error %d", rc); return rc; } @@ -505,7 +505,7 @@ sb_chown(scmp_filter_ctx ctx, sandbox_cfg_t *filter) rc = seccomp_rule_add_1(ctx, SCMP_ACT_ALLOW, SCMP_SYS(chown), SCMP_CMP_STR(0, SCMP_CMP_EQ, param->value)); if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add open syscall, received " + log_err(LD_BUG,"(Sandbox) failed to add chown syscall, received " "libseccomp error %d", rc); return rc; } @@ -1037,7 +1037,7 @@ sb_stat64(scmp_filter_ctx ctx, sandbox_cfg_t *filter) rc = seccomp_rule_add_1(ctx, SCMP_ACT_ALLOW, SCMP_SYS(stat64), SCMP_CMP_STR(0, SCMP_CMP_EQ, param->value)); if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add open syscall, received " + log_err(LD_BUG,"(Sandbox) failed to add stat64 syscall, received " "libseccomp error %d", rc); return rc; }

1 0

[tor/master] changes file for bug 22750
by nickm＠torproject.org 05 Jul '17

05 Jul '17

commit 093f57cb16bba25c333743e9a39e534771a51ea1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Jul 5 09:57:48 2017 -0400 changes file for bug 22750 --- changes/bug22750 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/changes/bug22750 b/changes/bug22750 new file mode 100644 index 0000000..426cae6 --- /dev/null +++ b/changes/bug22750 @@ -0,0 +1,5 @@ + o Minor bugfixes (linux seccomp2 sandbox, logging): + - Fix some messages on unexpected errors from the seccomp2 + library. Fixes bug 22750; bugfix on 0.2.5.1-alpha. Patch + from "cypherpunks". +

1 0

[tor/master] Merge remote-tracking branch 'dgoulet/ticket22726_032_02'
by nickm＠torproject.org 05 Jul '17

05 Jul '17

commit b6c8530fc3f5023920b5ca1c77e58785a46441e9 Merge: 2778032 82dee76 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Jul 5 09:36:31 2017 -0400 Merge remote-tracking branch 'dgoulet/ticket22726_032_02' src/or/hs_descriptor.c | 27 +++++++++------------------ src/or/hs_descriptor.h | 3 --- 2 files changed, 9 insertions(+), 21 deletions(-)

1 0

[tor/master] hs: Ignore unparseable v3 introduction point
by nickm＠torproject.org 05 Jul '17

05 Jul '17

commit 82dee76740062c00e98a7005f773672065abcf96 Author: David Goulet <dgoulet(a)torproject.org> Date: Wed May 10 09:40:26 2017 -0400 hs: Ignore unparseable v3 introduction point It is possible that at some point in time a client will encounter unknown or new fields for an introduction point in a descriptor so let them ignore it for forward compatibility. Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- src/or/hs_descriptor.c | 27 +++++++++------------------ src/or/hs_descriptor.h | 3 --- 2 files changed, 9 insertions(+), 21 deletions(-) diff --git a/src/or/hs_descriptor.c b/src/or/hs_descriptor.c index 2a000f5..b55f966 100644 --- a/src/or/hs_descriptor.c +++ b/src/or/hs_descriptor.c @@ -1747,18 +1747,13 @@ decode_introduction_point(const hs_descriptor_t *desc, const char *start) /* Given a descriptor string at <b>data</b>, decode all possible introduction * points that we can find. Add the introduction point object to desc_enc as we - * find them. Return 0 on success. - * - * On error, a negative value is returned. It is possible that some intro - * point object have been added to the desc_enc, they should be considered - * invalid. One single bad encoded introduction point will make this function - * return an error. */ -STATIC int + * find them. This function can't fail and it is possible that zero + * introduction points can be decoded. */ +static void decode_intro_points(const hs_descriptor_t *desc, hs_desc_encrypted_data_t *desc_enc, const char *data) { - int retval = -1; smartlist_t *chunked_desc = smartlist_new(); smartlist_t *intro_points = smartlist_new(); @@ -1799,22 +1794,19 @@ decode_intro_points(const hs_descriptor_t *desc, SMARTLIST_FOREACH_BEGIN(intro_points, const char *, intro_point) { hs_desc_intro_point_t *ip = decode_introduction_point(desc, intro_point); if (!ip) { - /* Malformed introduction point section. Stop right away, this - * descriptor shouldn't be used. */ - goto err; + /* Malformed introduction point section. We'll ignore this introduction + * point and continue parsing. New or unknown fields are possible for + * forward compatibility. */ + continue; } smartlist_add(desc_enc->intro_points, ip); } SMARTLIST_FOREACH_END(intro_point); done: - retval = 0; - - err: SMARTLIST_FOREACH(chunked_desc, char *, a, tor_free(a)); smartlist_free(chunked_desc); SMARTLIST_FOREACH(intro_points, char *, a, tor_free(a)); smartlist_free(intro_points); - return retval; } /* Return 1 iff the given base64 encoded signature in b64_sig from the encoded * descriptor in encoded_desc validates the descriptor content. */ @@ -2040,9 +2032,8 @@ desc_decode_encrypted_v3(const hs_descriptor_t *desc, /* Initialize the descriptor's introduction point list before we start * decoding. Having 0 intro point is valid. Then decode them all. */ desc_encrypted_out->intro_points = smartlist_new(); - if (decode_intro_points(desc, desc_encrypted_out, message) < 0) { - goto err; - } + decode_intro_points(desc, desc_encrypted_out, message); + /* Validation of maximum introduction points allowed. */ if (smartlist_len(desc_encrypted_out->intro_points) > MAX_INTRO_POINTS) { log_warn(LD_REND, "Service descriptor contains too many introduction " diff --git a/src/or/hs_descriptor.h b/src/or/hs_descriptor.h index b8b9479..58c4089 100644 --- a/src/or/hs_descriptor.h +++ b/src/or/hs_descriptor.h @@ -223,9 +223,6 @@ STATIC smartlist_t *decode_link_specifiers(const char *encoded); STATIC hs_desc_intro_point_t *decode_introduction_point( const hs_descriptor_t *desc, const char *text); -STATIC int decode_intro_points(const hs_descriptor_t *desc, - hs_desc_encrypted_data_t *desc_enc, - const char *data); STATIC int encrypted_data_length_is_valid(size_t len); STATIC int cert_is_valid(tor_cert_t *cert, uint8_t type, const char *log_obj_type);

1 0

[tor-browser-bundle/master] 2014 is already far, far away
by gk＠torproject.org 05 Jul '17

05 Jul '17

commit 3f466124baf2718906e330b45388c22b2f1a44a7 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Jul 5 10:12:05 2017 +0000 2014 is already far, far away --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index c73f9ac..45210dd 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,4 +1,4 @@ -Tor Browser 7.5a2 -- July 6 2014 +Tor Browser 7.5a2 -- July 6 2017 * All Platforms * Update Tor to 0.3.1.4-alpha * Update HTTPS-Everywhere to 5.2.19

1 0

[stem/master] Note that site '[source]' links have finally been fixed
by atagar＠torproject.org 04 Jul '17

04 Jul '17

commit eb7f81fb891ee1908191a820448ca0ab33ae418e Author: Damian Johnson <atagar(a)torproject.org> Date: Tue Jul 4 14:27:44 2017 -0700 Note that site '[source]' links have finally been fixed Shame on me for leaving this broken so long. Finally fixed source code served by the site. --- docs/change_log.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/change_log.rst b/docs/change_log.rst index c4a4af3..9de1ca1 100644 --- a/docs/change_log.rst +++ b/docs/change_log.rst @@ -81,6 +81,10 @@ The following are only available within Stem's `git repository * Added a `'--run [command or path]' argument <tutorials/down_the_rabbit_hole.html#running-individual-commands>`_ to invoke specific commands (:trac:`21541`) * Allowing interpreter to continue after tor shutsdown (:trac:`22374`) + * **Website** + + * Source code served by '[source]' links perpetually stale (:trac:`19521`) + .. _version_1.5: Version 1.5 (November 20th, 2016)

1 0

[stem/master] Add blockstack-tor to examples
by atagar＠torproject.org 04 Jul '17

04 Jul '17

commit 9c66060f1704c41e6f5ed4c0dd4990f109ac60a0 Author: Damian Johnson <atagar(a)torproject.org> Date: Mon Jul 3 20:42:18 2017 -0700 Add blockstack-tor to examples --- docs/tutorials/double_double_toil_and_trouble.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/tutorials/double_double_toil_and_trouble.rst b/docs/tutorials/double_double_toil_and_trouble.rst index 68b412f..7822c0b 100644 --- a/docs/tutorials/double_double_toil_and_trouble.rst +++ b/docs/tutorials/double_double_toil_and_trouble.rst @@ -82,6 +82,7 @@ Applications `trnnr <https://github.com/NullHypothesis/trnnr>`_ Python implementation of tor's nearest neighbour ranking. `TorTP <https://github.com/vinc3nt/stem-tortp>`_ Configures iptables to torify all traffic. `BWScanner <https://github.com/TheTorProject/bwscanner>`_ Measurements for the tor bandwidth authorities. Interesting example of txtorcon and stem being used together. +`blockstack-tor <https://github.com/blockstack/blockstack-tor>`_ Tor integration for `Blockstack <https://github.com/blockstack/blockstack>`_ =========================================================================================================== ========== Scripts

1 0

[stem/master] Add Puccinia to controller table
by atagar＠torproject.org 04 Jul '17

04 Jul '17

commit 669d343c17ae9e961abd01ae38df26fc3ea38f8c Author: Damian Johnson <atagar(a)torproject.org> Date: Tue Jul 4 13:29:00 2017 -0700 Add Puccinia to controller table On irc while working on safecookie auth amphetamine said this would be a good time to include it in the table. --- docs/faq.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/faq.rst b/docs/faq.rst index 70bb5d1..2a0af08 100644 --- a/docs/faq.rst +++ b/docs/faq.rst @@ -275,6 +275,7 @@ Library Language `Txtorcon <https://txtorcon.readthedocs.org/>`_ Python (Twisted) February 2012 - Present `TorCtl <https://gitweb.torproject.org/pytorctl.git>`_ Python July 2008 - November 2011 `TorUtils <https://github.com/dapphp/TorUtils>`_ PHP October 2015 - Present +`Puccinia <https://gitlab.com/amphetamine/puccinia/>`_ Rust October 2015 - Present `PHP TorCtl <https://github.com/dunglas/php-torcontrol/>`_ PHP February 2013 `JTorCtl <https://gitweb.torproject.org/jtorctl.git>`_ Java June 2005 - May 2009 `Orc <https://github.com/sycamoreone/orc>`_ Go January 2015

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 04 Jul '17

04 Jul '17

commit 1d2f9d97da37c2590e6dcd5001c5a1a215fd29dc Author: Translation commit bot <translation(a)torproject.org> Date: Tue Jul 4 11:48:34 2017 +0000 Update translations for tor-browser-manual --- cs/cs.po | 48 +++++++++++++++++++++++++++++++++++------------- el/el.po | 3 +++ 2 files changed, 38 insertions(+), 13 deletions(-) diff --git a/cs/cs.po b/cs/cs.po index 059ae86..2d0dbba 100644 --- a/cs/cs.po +++ b/cs/cs.po @@ -203,6 +203,8 @@ msgid "" "external ref='media/tor-launcher-custom-bridges_en-US.png' " "md5='93365c2aa3fb4d627497e83f28a39b7e'" msgstr "" +"external ref='media/tor-launcher-custom-bridges_en-US.png' " +"md5='93365c2aa3fb4d627497e83f28a39b7e'" #: bridges.page:65 msgid "" @@ -491,6 +493,8 @@ msgid "" "external ref='media/first-time/connect.png' " "md5='9d07068f751a3bfd274365a4ba8d90ca'" msgstr "" +"external ref='media/first-time/connect.png' " +"md5='9d07068f751a3bfd274365a4ba8d90ca'" #: first-time.page:23 msgid "" @@ -718,6 +722,8 @@ msgid "" "external ref='media/managing-identities/circuit_full.png' " "md5='bd46d22de952fee42643be46d3f95928'" msgstr "" +"external ref='media/managing-identities/circuit_full.png' " +"md5='bd46d22de952fee42643be46d3f95928'" #: managing-identities.page:48 msgid "" @@ -727,7 +733,7 @@ msgstr "" #: managing-identities.page:55 msgid "Logging in over Tor" -msgstr "" +msgstr "Přihlášení přes Tor" #: managing-identities.page:56 msgid "" @@ -751,6 +757,8 @@ msgid "" "When you log in to a website over Tor, there are several points you should " "bear in mind:" msgstr "" +"Pokud se přihlásíte na web přes Tor, je několik bodů, které byste měli mít " +"na paměti:" #: managing-identities.page:79 msgid "" @@ -782,6 +790,8 @@ msgid "" "external ref='media/managing-identities/new_identity.png' " "md5='15b01e35fa83185d94b57bf0ccf09d76'" msgstr "" +"external ref='media/managing-identities/new_identity.png' " +"md5='15b01e35fa83185d94b57bf0ccf09d76'" #: managing-identities.page:105 msgid "" @@ -884,7 +894,7 @@ msgstr "" #: onionsites.page:58 troubleshooting.page:10 msgid "Troubleshooting" -msgstr "" +msgstr "Odstraňování problémů" #: onionsites.page:59 msgid "" @@ -917,7 +927,7 @@ msgstr "" #: plugins.page:13 msgid "Flash Player" -msgstr "" +msgstr "Flash Player" #: plugins.page:14 msgid "" @@ -938,7 +948,7 @@ msgstr "" #: plugins.page:31 msgid "JavaScript" -msgstr "" +msgstr "JavaScript" #: plugins.page:32 msgid "" @@ -965,6 +975,8 @@ msgid "" "external ref='media/plugins/noscript_menu.png' " "md5='df9e684b76a3c2e2bdcb879a19c20471'" msgstr "" +"external ref='media/plugins/noscript_menu.png' " +"md5='df9e684b76a3c2e2bdcb879a19c20471'" #: plugins.page:47 msgid "" @@ -978,7 +990,7 @@ msgstr "" #: plugins.page:58 msgid "Browser Add-ons" -msgstr "" +msgstr "undefined" #: plugins.page:59 msgid "" @@ -1001,7 +1013,7 @@ msgstr "" #: secure-connections.page:12 msgid "Secure Connections" -msgstr "" +msgstr "Zabezpečené připojení" #: secure-connections.page:14 msgid "" @@ -1023,6 +1035,8 @@ msgid "" "external ref='media/secure-connections/https.png' " "md5='364bcbde7a649b0cea9ae178007c1a50'" msgstr "" +"external ref='media/secure-connections/https.png' " +"md5='364bcbde7a649b0cea9ae178007c1a50'" #: secure-connections.page:26 msgid "" @@ -1056,33 +1070,35 @@ msgstr "" #: secure-connections.page:62 msgid "Potentially visible data" -msgstr "" +msgstr "Potenciálně viditelné údaje" #: secure-connections.page:70 msgid "The site being visited." -msgstr "" +msgstr "Navštívené stránky." #: secure-connections.page:81 msgid "Username and password used for authentication." -msgstr "" +msgstr "Uživatelské jméno a heslo použité pro ověření." #: secure-connections.page:92 msgid "Data being transmitted." -msgstr "" +msgstr "Přenášená data." #: secure-connections.page:103 msgid "" "Network location of the computer used to visit the website (the public IP " "address)." msgstr "" +"Síťové umístění počítače používaného k návštěvě webových stránek (veřejná " +"adresa IP)." #: secure-connections.page:115 msgid "Whether or not Tor is being used." -msgstr "" +msgstr "Zda je nebo není používán Tor." #: security-slider.page:6 msgid "Configuring Tor Browser for security and usability" -msgstr "" +msgstr "Konfigurace prohlížeče Tor pro zabezpečení a použitelnost" #: security-slider.page:10 msgid "Security Slider" @@ -1111,6 +1127,8 @@ msgid "" "external ref='media/security-slider/slider.png' " "md5='3c469cd3ed9f60ebb6bbbc63daa90082'" msgstr "" +"external ref='media/security-slider/slider.png' " +"md5='3c469cd3ed9f60ebb6bbbc63daa90082'" #: security-slider.page:25 msgid "" @@ -1132,6 +1150,8 @@ msgid "" "external ref='media/security-slider/slider_window.png' " "md5='c733bdccd1731ed1a772777b25bae7a1'" msgstr "" +"external ref='media/security-slider/slider_window.png' " +"md5='c733bdccd1731ed1a772777b25bae7a1'" #: security-slider.page:36 msgid "" @@ -1242,13 +1262,15 @@ msgstr "" #: transports.page:69 msgid "FTE" -msgstr "" +msgstr "FTE" #: transports.page:74 msgid "" "FTE (format-transforming encryption) disguises Tor traffic as ordinary web " "(HTTP) traffic." msgstr "" +"Funkce FTE (format-transforming encryption) maskuje provoz Tor jako běžný " +"provoz na webu (HTTP)." #: transports.page:82 msgid "meek" diff --git a/el/el.po b/el/el.po index 31e36d5..8a15ad3 100644 --- a/el/el.po +++ b/el/el.po @@ -154,6 +154,9 @@ msgid "" "href=\"https://bridges.torproject.org/\">https://bridges.torproject.org/</link>" " and follow the instructions, or" msgstr "" +"Πήγαινε <link " +"href=\"https://bridges.torproject.org/\">https://bridges.torproject.org/</link>" +" και ακολούθησε τις οδηγίες, ή" #: bridges.page:42 msgid ""

1 0

[translation/exoneratorproperties] Update translations for exoneratorproperties
by translation＠torproject.org 04 Jul '17

04 Jul '17

commit 64a594376ebb67d9966c1e9a8a286aad22cde68c Author: Translation commit bot <translation(a)torproject.org> Date: Tue Jul 4 11:48:27 2017 +0000 Update translations for exoneratorproperties --- cs/exonerator.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cs/exonerator.properties b/cs/exonerator.properties index 2273a2f..9a6919a 100644 --- a/cs/exonerator.properties +++ b/cs/exonerator.properties @@ -49,6 +49,6 @@ footer.aboutexonerator.heading=O ExoneraToru footer.aboutexonerator.body=The ExoneraTor service maintains a database of IP addresses that have been part of the Tor network.  It answers the question whether there was a Tor relay running on a given IP address on a given date.  ExoneraTor may store more than one IP address per relay if relays use a different IP address for exiting to the Internet than for registering in the Tor network, and it stores whether a relay permitted transit of Tor traffic to the open Internet at that time. footer.trademark.text="Tor" a "Onion Logo" jsou %s The Tor Project, Inc. footer.trademark.link=registrované ochranné značky -footer.language.name=English -footer.language.text=This page is also available in the following languages: +footer.language.name=Angličtina +footer.language.text=Tato stránka je také dostupná v následujících jazycích:

1 0