tor-commits September 2017

tor-commits@lists.torproject.org

16 participants
2950 discussions

[tor/release-0.3.1] Merge branch 'maint-0.3.1' into release-0.3.1
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit ac21fb8c68d2931293ddd0d70a024ef17f065191 Merge: 6babd3d9b 586c327e0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 14:40:55 2017 -0400 Merge branch 'maint-0.3.1' into release-0.3.1 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.1] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit 23c5259a384b435c76b5cae40f68f07aec34d241 Merge: e78347fcc 42e12a353 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 14:40:36 2017 -0400 Merge branch 'maint-0.2.9' into maint-0.3.0 "ours" to avoid version bump.

1 0

[webwml/master] Alpha is now 0.3.2.1-alpha
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit 371e7077fdec72555337d2e1652dad80f3925dba Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 14:27:45 2017 -0400 Alpha is now 0.3.2.1-alpha --- Makefile | 2 +- include/versions.wmi | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index ed0e9d6f..308164ff 100644 --- a/Makefile +++ b/Makefile @@ -15,7 +15,7 @@ # website component, and set it to needs_review. export STABLETAG=tor-0.3.1.7 -export DEVTAG=tor-0.3.1.7 +export DEVTAG=tor-0.3.2.1-alpha WMLBASE=. diff --git a/include/versions.wmi b/include/versions.wmi index 4c49fd02..4ac48ce5 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,5 +1,5 @@ <define-tag version-stable whitespace=delete>0.3.1.7</define-tag> -<define-tag version-alpha whitespace=delete>0.3.1.7</define-tag> +<define-tag version-alpha whitespace=delete>0.3.2.1-alpha</define-tag> <define-tag version-win32-stable whitespace=delete>0.3.0.10</define-tag>

1 0

[tor/master] Add a cast so that 32-bit compilation goes without errors
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit 290274dbb5428bc5d99926ce5d7f824165be84e8 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 12:44:26 2017 -0400 Add a cast so that 32-bit compilation goes without errors --- src/or/scheduler_kist.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/or/scheduler_kist.c b/src/or/scheduler_kist.c index e4ae07107..4713ffdff 100644 --- a/src/or/scheduler_kist.c +++ b/src/or/scheduler_kist.c @@ -526,7 +526,7 @@ kist_scheduler_schedule(void) * negative and can NOT be smaller than sched_run_interval so values can * only go from 1000 usec (diff set to interval - 1) to 100000 usec (diff * set to 0) for the maximum allowed run interval (100ms). */ - next_run.tv_usec = (sched_run_interval - diff) * 1000; + next_run.tv_usec = (int) ((sched_run_interval - diff) * 1000); /* Readding an event reschedules it. It does not duplicate it. */ scheduler_ev_add(&next_run); } else {

1 0

[tor/master] changelog tweaks from asn
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit eba4743487acc7a0f7f67f0b22357b102b855b15 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 12:42:51 2017 -0400 changelog tweaks from asn --- ChangeLog | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index d978c933f..b8b72c514 100644 --- a/ChangeLog +++ b/ChangeLog @@ -51,7 +51,7 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 f) A cleaner and more modular codebase. You can identify a next-generation onion address by its length: - they are56 characters long, as in + they are 56 characters long, as in "4acth47i6kxnvkewtm6q7ib2s3ufpo5sqbsnzjpbi7utijcltosqemad.onion". In the future, we will release more options and features for v3 @@ -61,7 +61,7 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 guard algorithms, and statistics. For full details, see proposal 224. - Legacy ("v2") onion services will still work for the forseeable + Legacy ("v2") onion services will still work for the foreseeable future, and will remain the default until this new codebase gets tested and hardened. Service operators who want to experiment with the new system can use the 'HiddenServiceVersion 3' torrc

1 0

[tor/master] Try to clarify that KIST helps relays.
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit 9342ee5eb262036922d07bce2ae913b61ed33349 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 12:25:13 2017 -0400 Try to clarify that KIST helps relays. --- ChangeLog | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/ChangeLog b/ChangeLog index fb1a3d801..d978c933f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -8,17 +8,17 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 Below are the changes since Tor 0.3.1.7. o Major feature (scheduler, channel): - - Clients and relays now use new schedulers to decide which circuits - should deliver cells first. The first type is called "KIST" - ("Kernel Informed Socket Transport"), and is only available on - Linux-like systems: it uses feedback from the kernel to prevent - the kernel's TCP buffers from growing too full. The second new - scheduler type is called "KISTLite": it behaves the same as KIST, - but runs on systems without kernel support for inspecting TCP - implementation details. The old scheduler is still available, - under the name "Vanilla". To change the default scheduler - preference order, use the new "Schedulers" option. (The default - preference order is "KIST,KISTLite,Vanilla".) + - Tor now uses new schedulers to decide which circuits should + deliver cells first, in order to improve congestion at relays. The + first type is called "KIST" ("Kernel Informed Socket Transport"), + and is only available on Linux-like systems: it uses feedback from + the kernel to prevent the kernel's TCP buffers from growing too + full. The second new scheduler type is called "KISTLite": it + behaves the same as KIST, but runs on systems without kernel + support for inspecting TCP implementation details. The old + scheduler is still available, under the name "Vanilla". To change + the default scheduler preference order, use the new "Schedulers" + option. (The default preference order is "KIST,KISTLite,Vanilla".) Matt Traudt implemented KIST, based on research by Rob Jansen, John Geddes, Christ Wacek, Micah Sherr, and Paul Syverson. For

1 0

[stem/master] Fix string template
by atagar＠torproject.org 18 Sep '17

18 Sep '17

commit d138f557a4513bb1e7a88deb4a148e2565c2dd94 Author: Edmund Wong <ewongbb(a)pw-wspx.org> Date: Mon Sep 18 10:00:53 2017 +0800 Fix string template --- test/integ/process.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/test/integ/process.py b/test/integ/process.py index 00929ce1..59299f81 100644 --- a/test/integ/process.py +++ b/test/integ/process.py @@ -330,7 +330,7 @@ class TestProcess(unittest.TestCase): """ if test.tor_version() < stem.version.Requirement.TORRC_VIA_STDIN: - skip('(requires )' % stem.version.Requirement.TORRC_VIA_STDIN) + skip('(requires %s)' % stem.version.Requirement.TORRC_VIA_STDIN) with tmp_directory() as data_directory: torrc = BASIC_RELAY_TORRC % data_directory @@ -479,7 +479,7 @@ class TestProcess(unittest.TestCase): """ if test.tor_version() < stem.version.Requirement.TORRC_VIA_STDIN: - skip('(requires )' % stem.version.Requirement.TORRC_VIA_STDIN) + skip('(requires %s)' % stem.version.Requirement.TORRC_VIA_STDIN) with tmp_directory() as data_directory: control_port = random_port() @@ -575,7 +575,7 @@ class TestProcess(unittest.TestCase): if not stem.util.system.is_available('sleep'): skip('(sleep unavailable)') elif test.tor_version() < stem.version.Requirement.TAKEOWNERSHIP: - skip('(requires )' % stem.version.Requirement.TAKEOWNERSHIP) + skip('(requires %s)' % stem.version.Requirement.TAKEOWNERSHIP) with tmp_directory() as data_directory: sleep_process = subprocess.Popen(['sleep', '60']) @@ -619,7 +619,7 @@ class TestProcess(unittest.TestCase): """ if test.tor_version() < stem.version.Requirement.TAKEOWNERSHIP: - skip('(requires )' % stem.version.Requirement.TAKEOWNERSHIP) + skip('(requires %s)' % stem.version.Requirement.TAKEOWNERSHIP) with tmp_directory() as data_directory: control_port = random_port()

1 0

[tor/master] Combine some changelog sections.
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit 990e15689fde1c5ce6935389ba7bd4f652886388 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 11:27:24 2017 -0400 Combine some changelog sections. --- ChangeLog | 79 +++++++++++++++++++++++---------------------------------------- 1 file changed, 29 insertions(+), 50 deletions(-) diff --git a/ChangeLog b/ChangeLog index 73403a178..cad6c67c6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,9 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 - BLURB + Tor 0.3.2.1-alpha is the first release in the 0.3.2.x series. It + includes support for our next-generation ("v3") onion service + protocol, and adds a new circuit scheduler for more responsive + forwarding decisions from relays. There are also numerous other + small features and bugfixes here. Below are the changes since Tor 0.3.1.7. @@ -53,28 +57,25 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 o Major bugfixes (usability, control port): - Report trusted clock skew indications as bootstrap errors, so - controllers can more easily alert users. Fixes bug 23506; bugfix + controllers can more easily alert users when their clocks are + wrong. Fixes bug 23506; bugfix on 0.1.2.6-alpha. o Minor features (bug detection): - Log a warning message, with stack trace, for any attempt to call get_options() during option validation. Closes ticket 22281. - o Minor features (client directory bandwidth tuning): - - When downloading (micro)descriptors, don't split the list of - descriptors into multiple requests unless there are at least 32 - descriptors that we want. Previously, we split at 4, not 32, which - could lead to significant overhead in HTTP request size and - degradation in compression performance. Closes ticket 23220. - o Minor features (client): - You can now use Tor as a tunneled HTTP proxy: use the HTTPTunnelPort option to open a port that accepts HTTP CONNECT requests. Closes ticket 22407. - - o Minor features (client, entry guards): - Add an extra check to make sure that we always use the new guard selection code for picking our guards. Closes ticket 22779. + - When downloading (micro)descriptors, don't split the list of + descriptors into multiple requests unless there are at least 32 + descriptors that we want. Previously, we split at 4, not 32, which + could lead to significant overhead in HTTP request size and + degradation in compression performance. Closes ticket 23220. o Minor features (command line): - Add a new commandline option, --key-expiration, which prints when @@ -88,13 +89,9 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 - Provide better error message for GETINFO desc/(id|name) when microdescriptors are in use and router descriptors are not fetched. Closes ticket 5847. Patch by Kevin Butler. - - o Minor features (control): - Add GETINFO desc/download-enabled and md/download-enabled, to inform the controller whether try to download router descriptors and microdescriptors respectively. Closes ticket 22684. - - o Minor features (controller): - Added new GETINFO targets ip-to-country/{ipv4,ipv6}-available, so controllers can tell whether the geoip databases are loaded. Closes ticket 23237. @@ -158,26 +155,17 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 ticket 23054. o Minor features (testing): + - The default chutney network tests now include tests for the v3 + hidden service design. Make sure you have the latest version of + chutney if you want to run these. Closes ticket 22437. - Add a unit test to verify that we can parse a hardcoded v2 hidden service descriptor. Closes ticket 15554. - o Minor bugfix (relay address resolution): - - Avoid unnecessary calls to directory_fetches_from_authorities() on - relays. This avoids spurious address resolutions and descriptor - rebuilds. This is a mitigation for bug 21789. Fixes bug 23470; - bugfix on in 0.2.8.1-alpha. - o Minor bugfixes (certificate handling): - Fix a time handling bug in Tor certificates set to expire after the year 2106. Fixes bug 23055; bugfix on 0.3.0.1-alpha. Found by Coverity as CID 1415728. - o Minor bugfixes (circuit logging): - - torspec says hop counts are 1-based, so fix two log messages that - mistakenly logged 0-based hop counts. Fixes bug 18982; bugfix on - 0.2.6.2-alpha and 0.2.4.5-alpha. Patch by teor. Credit to Xiaofan - Li for reporting this issue. - o Minor bugfixes (client, usability): - Refrain from needlessly rejecting SOCKS5-with-hostnames and SOCKS4a requests that contain IP address strings, even when @@ -192,6 +180,10 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 Previously we used ntohs(), which happens to behave the same on all the platforms we support, but which isn't really correct. Fixes bug 23106; bugfix on 0.2.4.8-alpha. + - Make the controller's write_escaped_data() function robust to + extremely long inputs. Right now, it doesn't actually receive any + extremely long inputs, so this is for defense in depth. Fixes bug + 19281; bugfix on 0.1.1.1-alpha. Reported by Guido Vranken. o Minor bugfixes (compilation): - Fix unused variable warnings in donna's Curve25519 SSE2 code. @@ -204,27 +196,13 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 tor main loop callback that validates if we have an expired consensus. Fixes bug 23091; bugfix on 0.2.0.19-alpha. - o Minor bugfixes (correctness, controller): - - Make the controller's write_escaped_data() function robust to - extremely long inputs. Right now, it doesn't actually receive any - extremely long inputs, so this is for defense in depth. Fixes bug - 19281; bugfix on 0.1.1.1-alpha. Reported by Guido Vranken. - - o Minor bugfixes (crypto): - - Properly detect and refuse to blind bad ed25519 keys. The key - blinding code is currently unused, so this bug does not affect tor - clients or services on the network. Fixes bug 22746; bugfix - on 0.2.6.1-alpha. - - o Minor bugfixes (directories): + o Minor bugfixes (directory protocol): - Directory servers now include a "Date:" http header for response codes other than 200. Clients starting with a skewed clock and a recent consensus were getting "304 Not modified" responses from directory authorities, so without a Date header the client would never hear about a wrong clock. Fixes bug 23499; bugfix on 0.0.8rc1. - - o Minor bugfixes (directory downloads): - Make clients wait for 6 seconds before trying to download their consensus from an authority. Fixes bug 17750; bugfix on 0.2.8.1-alpha. @@ -267,6 +245,10 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 actual name of the user owning the directory. Previously, we'd log the name of the process owner twice. Fixes bug 23487; bugfix on 0.2.9.1-alpha. + - torspec says hop counts are 1-based, so fix two log messages that + mistakenly logged 0-based hop counts. Fixes bug 18982; bugfix on + 0.2.6.2-alpha and 0.2.4.5-alpha. Patch by teor. Credit to Xiaofan + Li for reporting this issue. o Minor bugfixes (portability): - Stop using the PATH_MAX variable. The variable is not defined in @@ -277,13 +259,15 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 - When uploading our descriptor for the first time after startup, report the reason for uploading as "Tor just started" rather than leaving it blank. Fixes bug 22885; bugfix on 0.2.3.4-alpha. + - Avoid unnecessary calls to directory_fetches_from_authorities() on + relays. This avoids spurious address resolutions and descriptor + rebuilds. This is a mitigation for bug 21789. Fixes bug 23470; + bugfix on in 0.2.8.1-alpha. - o Minor bugfixes (test): + o Minor bugfixes (tests): - Fix a broken unit test for the OutboundAddress option: the parsing function was never returning an error on failure. Fixes bug 23366; bugfix on 0.3.0.3-alpha. - - o Minor bugfixes (tests): - Fix a signed-integer overflow in the unit tests for dir/download_status_random_backoff, which was untriggered until we fixed bug 17750. Fixes bug 22924; bugfix on 0.2.9.1-alpha. @@ -346,11 +330,6 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 - The controller API no longer includes an AUTHDIR_NEWDESCS event: nobody was using it any longer. Closes ticket 22377. - o Testing: - - The default chutney network tests now include tests for the v3 - hidden service design. Make sure you have the latest version of - chutney if you want to run these. Closes ticket 22437. - Changes in version 0.2.8.15 - 2017-09-18 Tor 0.2.8.15 backports a collection of bugfixes from later

1 0

[tor/master] Revise the first two (big) changelog entries
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit 1efe822acccd1d3a4e4a1bbb554afae969b0fbed Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 11:39:22 2017 -0400 Revise the first two (big) changelog entries --- ChangeLog | 101 +++++++++++++++++++++++++++++++++++--------------------------- 1 file changed, 57 insertions(+), 44 deletions(-) diff --git a/ChangeLog b/ChangeLog index cad6c67c6..afbb1b501 100644 --- a/ChangeLog +++ b/ChangeLog @@ -2,64 +2,77 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 Tor 0.3.2.1-alpha is the first release in the 0.3.2.x series. It includes support for our next-generation ("v3") onion service protocol, and adds a new circuit scheduler for more responsive - forwarding decisions from relays. There are also numerous other - small features and bugfixes here. + forwarding decisions from relays. There are also numerous other small + features and bugfixes here. Below are the changes since Tor 0.3.1.7. o Major feature (scheduler, channel): - - Introducing the KIST scheduler which stands for Kernel Informed - Socket Transport. It is only available on Linux systems. This - comes from a researched and published paper you can find - here: http://www.robgjansen.com/publications/kist-sec2014.pdf - https://arxiv.org/abs/1709.01044 This is also a major refactoring - of the entire scheduler subsystem in order for it to be more - modular and thus much more easier to add more scheduler type - later. The current scheduler has been named "Vanilla" but we favor - KIST if available in this version. A new torrc option has been - added and named "Schedulers type1,type2,..." which allows a user - to select which scheduler type it wants tor to use. It is also - possible to change it at runtime. It is an ordered list by - priority. KIST might not be available on all platforms so there is - a fallback to "KISTLite" that uses the same mechanisms but without - the kernel support. The current default values are: Schedulers - KIST,KISTLite,Vanilla. Closes ticket 12541. + - Clients and relays now use new schedulers to decide which circuits + should deliver cells first. The first type is called "KIST" + ("Kernel Informed Socket Transport"), and is only available on + Linux-like systems: it uses feedback from the kernel to prevent + the kernel's TCP buffers from growing too full. The second new + scheduler type is called "KISTLite": it behaves the same as KIST, + but runs on systems without kernel support for inspecting TCP + implementation details. The old scheduler is still available, + under the name "Vanilla". To change the default scheduler + preference order, use the new "Schedulers" option. (The default + preference order is "KIST,KISTLite,Vanilla".) + + Matt Traudt implemented KIST, based on research by Rob Jansen, + John Geddes, Christ Wacek, Micah Sherr, and Paul Syverson. For + more information, see the design paper at + http://www.robgjansen.com/publications/kist-sec2014.pdf and the + followup implementation paper at https://arxiv.org/abs/1709.01044. + Closes ticket 12541. o Major features (next-generation onion services): - Tor now supports the next-generation onion services protocol for clients and services! As part of this release, the core of proposal 224 has been implemented and is available for experimentation and testing by our users. This newer version of - onion services (v3) features various improvements over the legacy - system: a) Better crypto (replaced SHA1/DH/RSA1024 with - SHA3/ed25519/curve25519) b) Improved directory protocol leaking - less to directory servers. c) Improved directory protocol with - smaller surface for targeted attacks. d) Better onion address - security against impersonation. e) More extensible - introduction/rendezvous protocol. f) A cleaner and more modular - codebase. Furthermore, as part of this update, onion addresses - increase in length and are now 56 characters long: - 4acth47i6kxnvkewtm6q7ib2s3ufpo5sqbsnzjpbi7utijcltosqemad.onion In - the future, we will be releasing more options and features but we - first need a testing period, so that the current codebase matures - and becomes more robust. Here are some of the features we have - planned: 1) Offline keys for onion services 2) Advanced client - authorization for onion services 3) Improved guard algorithm for - onion services 4) Next-gen onion service statistics Please see our - proposal for more details: - https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.t… - The default version for onion services remains v2 (the legacy - system) until this new codebase gets tested and hardened. Service - operators who want to experiment with the new system can use the - 'HiddenServiceVersion 3' torrc directive along with the regular - onion service configuration options. We will publish a blog post - about this new feature soon! Enjoy! + onion services ("v3") features many improvements over the legacy + system, including: + + a) Better crypto (replaced SHA1/DH/RSA1024 + with SHA3/ed25519/curve25519) + + b) Improved directory protocol, leaking much less information to + directory servers. + + c) Improved directory protocol, with smaller surface for + targeted attacks. + + d) Better onion address security against impersonation. + + e) More extensible introduction/rendezvous protocol. + + f) A cleaner and more modular codebase. + + You can identify a next-generation onion address by its length: + they are56 characters long, as in + "4acth47i6kxnvkewtm6q7ib2s3ufpo5sqbsnzjpbi7utijcltosqemad.onion". + + In the future, we will release more options and features for v3 + onion services, but we first need a testing period, so that the + current codebase matures and becomes more robust. Planned features + include: offline keys, advanced client authorization, improved + guard algorithms, and statistics. For full details, see + proposal 224. + + Legacy ("v2") onion services will still work for the forseeable + future, and will remain the default until this new codebase gets + tested and hardened. Service operators who want to experiment with + the new system can use the 'HiddenServiceVersion 3' torrc + directive along with the regular onion service configuration + options. We will publish a blog post about this new feature + soon! Enjoy! o Major bugfixes (usability, control port): - Report trusted clock skew indications as bootstrap errors, so controllers can more easily alert users when their clocks are - wrong. Fixes bug 23506; bugfix - on 0.1.2.6-alpha. + wrong. Fixes bug 23506; bugfix on 0.1.2.6-alpha. o Minor features (bug detection): - Log a warning message, with stack trace, for any attempt to call

1 0

[tor/master] revision pass on the rest of the changelog
by nickm＠torproject.org 18 Sep '17

18 Sep '17

commit fc4884bf79111521d5e17ad08b9d763f500aa4a7 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 18 11:52:27 2017 -0400 revision pass on the rest of the changelog --- ChangeLog | 109 ++++++++++++++++++++++++++++++-------------------------------- 1 file changed, 53 insertions(+), 56 deletions(-) diff --git a/ChangeLog b/ChangeLog index afbb1b501..fb1a3d801 100644 --- a/ChangeLog +++ b/ChangeLog @@ -75,20 +75,21 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 wrong. Fixes bug 23506; bugfix on 0.1.2.6-alpha. o Minor features (bug detection): - - Log a warning message, with stack trace, for any attempt to call - get_options() during option validation. Closes ticket 22281. + - Log a warning message with a stack trace for any attempt to call + get_options() during option validation. This pattern has caused + subtle bugs in the past. Closes ticket 22281. o Minor features (client): - - You can now use Tor as a tunneled HTTP proxy: use the + - You can now use Tor as a tunneled HTTP proxy: use the new HTTPTunnelPort option to open a port that accepts HTTP CONNECT requests. Closes ticket 22407. - - Add an extra check to make sure that we always use the new guard + - Add an extra check to make sure that we always use the newer guard selection code for picking our guards. Closes ticket 22779. - - When downloading (micro)descriptors, don't split the list of - descriptors into multiple requests unless there are at least 32 - descriptors that we want. Previously, we split at 4, not 32, which - could lead to significant overhead in HTTP request size and - degradation in compression performance. Closes ticket 23220. + - When downloading (micro)descriptors, don't split the list into + multiple requests unless we want at least 32 descriptors. + Previously, we split at 4, not 32, which led to significant + overhead in HTTP request size and degradation in compression + performance. Closes ticket 23220. o Minor features (command line): - Add a new commandline option, --key-expiration, which prints when @@ -96,17 +97,18 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 17639; patch by Isis Lovecruft. o Minor features (control port): - - If the control port is used as the HTTP proxy, responds with a - meaningful "This is the Tor control port" message, and log the - event. Closes ticket 1667. Patch from Ravi Chandra Padmala. - - Provide better error message for GETINFO desc/(id|name) when - microdescriptors are in use and router descriptors are not - fetched. Closes ticket 5847. Patch by Kevin Butler. - - Add GETINFO desc/download-enabled and md/download-enabled, to - inform the controller whether try to download router descriptors - and microdescriptors respectively. Closes ticket 22684. - - Added new GETINFO targets ip-to-country/{ipv4,ipv6}-available, so - controllers can tell whether the geoip databases are loaded. + - If an application tries to use the control port as an HTTP proxy, + respond with a meaningful "This is the Tor control port" message, + and log the event. Closes ticket 1667. Patch from Ravi + Chandra Padmala. + - Provide better error message for GETINFO desc/(id|name) when not + fetching router descriptors. Closes ticket 5847. Patch by + Kevin Butler. + - Add GETINFO "{desc,md}/download-enabled", to inform the controller + whether Tor will try to download router descriptors and + microdescriptors respectively. Closes ticket 22684. + - Added new GETINFO targets "ip-to-country/{ipv4,ipv6}-available", + so controllers can tell whether the geoip databases are loaded. Closes ticket 23237. - Adds a timestamp field to the CIRC_BW and STREAM_BW bandwidth events. Closes ticket 19254. Patch by "DonnchaC". @@ -115,41 +117,40 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 - Developers can now generate a call-graph for Tor using the "calltool" python program, which post-processes object dumps. It should work okay on many Linux and OSX platforms, and might work - elsewhere too. To run this, install calltool from + elsewhere too. To run it, install calltool from https://gitweb.torproject.org/user/nickm/calltool.git and run "make callgraph". Closes ticket 19307. o Minor features (ed25519): - Add validation function to checks for torsion components in - ed25119 public keys, used by prop224 client-side code. Closes + ed25519 public keys, used by prop224 client-side code. Closes ticket 22006. Math help by Ian Goldberg. o Minor features (exit relay, DNS): - Improve the clarity and safety of the log message from evdns when - receiving an apparent spoofed DNS reply. Closes ticket 3056. + receiving an apparently spoofed DNS reply. Closes ticket 3056. o Minor features (integration, hardening): - - Added a new NoExec option, to prevent Tor from running other + - Add a new NoExec option to prevent Tor from running other programs. When this option is set to 1, Tor will never try to run another program, regardless of the settings of PortForwardingHelper, ClientTransportPlugin, or ServerTransportPlugin. Once NoExec is set, it cannot be disabled without restarting Tor. Closes ticket 22976. - o Minor features (linux seccomp2 sandbox): - - If the sandbox filter fails to load, suggest to the user that - their kernel might not support seccomp2. Closes ticket 23090. - - o Minor features (logging, UI): + o Minor features (logging): - Improve the warning message for specifying a relay by nickname. The previous message implied that nickname registration was still part of the Tor network design, which it isn't. Closes ticket 20488. + - If the sandbox filter fails to load, suggest to the user that + their kernel might not support seccomp2. Closes ticket 23090. o Minor features (portability): - - Check at configure time whether uint8_t is unsigned char. Lots of - existing code already assumes this, and there could be strict - aliasing issues if they aren't the same type. Closes ticket 22410. + - Check at configure time whether uint8_t is the same type as + unsigned char. Lots of existing code already makes this + assumption, and there could be strict aliasing issues if the + assumption is violated. Closes ticket 22410. o Minor features (relay, configuration): - Reject attempts to use relative file paths when RunAsDaemon is @@ -193,30 +194,27 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 Previously we used ntohs(), which happens to behave the same on all the platforms we support, but which isn't really correct. Fixes bug 23106; bugfix on 0.2.4.8-alpha. - - Make the controller's write_escaped_data() function robust to - extremely long inputs. Right now, it doesn't actually receive any - extremely long inputs, so this is for defense in depth. Fixes bug - 19281; bugfix on 0.1.1.1-alpha. Reported by Guido Vranken. + - For defense-in-depth, make the controller's write_escaped_data() + function robust to extremely long inputs. Fixes bug 19281; bugfix + on 0.1.1.1-alpha. Reported by Guido Vranken. o Minor bugfixes (compilation): - - Fix unused variable warnings in donna's Curve25519 SSE2 code. + - Fix unused-variable warnings in donna's Curve25519 SSE2 code. Fixes bug 22895; bugfix on 0.2.7.2-alpha. o Minor bugfixes (consensus expiry): - - Tor would reconsider updating its directory information every 2 - minutes instead of only doing it for a consensus that is more than - 24 hours old (badly expired). This specific check is done in the - tor main loop callback that validates if we have an expired - consensus. Fixes bug 23091; bugfix on 0.2.0.19-alpha. + - Check for adequate directory information correctly. Previously, Tor + would reconsider whether it had sufficient directory information + every 2 minutes. Fixes bug 23091; bugfix on 0.2.0.19-alpha. o Minor bugfixes (directory protocol): - Directory servers now include a "Date:" http header for response codes other than 200. Clients starting with a skewed clock and a recent consensus were getting "304 Not modified" responses from - directory authorities, so without a Date header the client would - never hear about a wrong clock. Fixes bug 23499; bugfix + directory authorities, so without the Date header, the client + would never hear about a wrong clock. Fixes bug 23499; bugfix on 0.0.8rc1. - - Make clients wait for 6 seconds before trying to download their + - Make clients wait for 6 seconds before trying to download a consensus from an authority. Fixes bug 17750; bugfix on 0.2.8.1-alpha. @@ -228,7 +226,7 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 o Minor bugfixes (format strictness): - Restrict several data formats to decimal. Previously, the BuildTimeHistogram entries in the state file, the "bw=" entries in - the bandwidth authority file, and process IDs passed to the + the bandwidth authority file, and the process IDs passed to the __OwningControllerProcess option could all be specified in hex or octal as well as in decimal. This was not an intentional feature. Fixes bug 22802; bugfixes on 0.2.2.1-alpha, 0.2.2.2-alpha, @@ -258,22 +256,21 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 actual name of the user owning the directory. Previously, we'd log the name of the process owner twice. Fixes bug 23487; bugfix on 0.2.9.1-alpha. - - torspec says hop counts are 1-based, so fix two log messages that - mistakenly logged 0-based hop counts. Fixes bug 18982; bugfix on - 0.2.6.2-alpha and 0.2.4.5-alpha. Patch by teor. Credit to Xiaofan - Li for reporting this issue. + - The tor specification says hop counts are 1-based, so fix two log + messages that mistakenly logged 0-based hop counts. Fixes bug + 18982; bugfix on 0.2.6.2-alpha and 0.2.4.5-alpha. Patch by teor. + Credit to Xiaofan Li for reporting this issue. o Minor bugfixes (portability): - - Stop using the PATH_MAX variable. The variable is not defined in - GNU Hurd which prevents Tor from being built. Fixes bug 23098; - bugfix on 0.3.1.1-alpha. + - Stop using the PATH_MAX variable, which is not defined on GNU + Hurd. Fixes bug 23098; bugfix on 0.3.1.1-alpha. o Minor bugfixes (relay): - When uploading our descriptor for the first time after startup, report the reason for uploading as "Tor just started" rather than leaving it blank. Fixes bug 22885; bugfix on 0.2.3.4-alpha. - Avoid unnecessary calls to directory_fetches_from_authorities() on - relays. This avoids spurious address resolutions and descriptor + relays, to prevent spurious address resolutions and descriptor rebuilds. This is a mitigation for bug 21789. Fixes bug 23470; bugfix on in 0.2.8.1-alpha. @@ -295,7 +292,7 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 function from the general code to handle channel state transitions. This change simplifies our callgraph, reducing the size of the largest strongly connected component by roughly a - factor of two. Closes ticket 22608 + factor of two. Closes ticket 22608. - Remove dead code for largely unused statistics on the number of times we've attempted various public key operations. Fixes bug 19871; bugfix on 0.1.2.4-alpha. Fix by Isis Lovecruft. @@ -306,7 +303,7 @@ Changes in version 0.3.2.1-alpha - 2017-09-18 routers. Authorities no longer vote for these flags. Closes ticket 22215. - Rename the obsolete malleable hybrid_encrypt functions used in TAP - and old hidden services to indicate that they aren't suitable for + and old hidden services, to indicate that they aren't suitable for new protocols or formats. Closes ticket 23026. - Replace our STRUCT_OFFSET() macro with offsetof(). Closes ticket 22521. Patch from Neel Chauhan.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits September 2017