September 2017 - tor-commits - lists.torproject.org

[chutney/master] Hide a log message removed by Tor 23078, fixed in 0.3.0.11 and 0.3.1.6-rc
by teor＠torproject.org 13 Sep '17

13 Sep '17

commit a99fca82b3b2327f2f5760170b63d6dadbe3c6b7 Author: teor <teor2345(a)gmail.com> Date: Wed Sep 13 12:31:29 2017 +1000 Hide a log message removed by Tor 23078, fixed in 0.3.0.11 and 0.3.1.6-rc --- tools/ignore.warnings | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tools/ignore.warnings b/tools/ignore.warnings index 5429533..463ce6c 100644 --- a/tools/ignore.warnings +++ b/tools/ignore.warnings @@ -24,6 +24,8 @@ Couldn't set up any working nameservers. Network not up yet Currently, sandboxing is only implemented on Linux # We ignore consensus failure warnings Error publishing .* consensus +# Tor 23078, fixed in 0.3.0.11 and 0.3.1.6-rc +Established prop224 intro point on circuit Every hidden service on this tor instance is NON-ANONYMOUS # We ignore consensus failure warnings Failed to choose an exit server

1 0

[torspec/master] Fix some prop280 typos reported by arma
by arma＠torproject.org 13 Sep '17

13 Sep '17

commit 51825e0d22fab0de2499cfd1e89c287a85683c08 Author: teor <teor2345(a)gmail.com> Date: Wed Sep 13 11:51:44 2017 +1000 Fix some prop280 typos reported by arma --- proposals/280-privcount-in-tor.txt | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/proposals/280-privcount-in-tor.txt b/proposals/280-privcount-in-tor.txt index f0e4bd3..716b48e 100644 --- a/proposals/280-privcount-in-tor.txt +++ b/proposals/280-privcount-in-tor.txt @@ -67,9 +67,9 @@ Status: Draft In order to prevent bogus data from corrupting the tally, the Tor relays and the Tally Reporters perform multiple "instances" of this - algorithm, randomly sampling in each relays. The relay sends multiple - Y values for each measurement, built with different sets of B_i. - These "instances" are numbered in order from 1 to R. + algorithm, randomly sampling the relays in each instance. Each relay + sends multiple Y values for each measurement, built with different + sets of B_i. These "instances" are numbered in order from 1 to R. So that the system will still produce results in the event of a single Tally Reporter failure, these instances are distributed across multiple @@ -108,9 +108,9 @@ Status: Draft noise.) We also need to work out how to handle instances with mixed - Tor versions, where some Data Collectors report different - counters to other Data Collectors. (The blinding works if we - substitute zeroes for missing counters on Tally Reporters. + Tor versions, where some Data Collectors report a different + set of counters than other Data Collectors. (The blinding works + if we substitute zeroes for missing counters on Tally Reporters. But we also need to add noise in this case.) -teor

1 0

[sandboxed-tor-browser/master] Bump the version to 0.0.14-dev.
by yawning＠torproject.org 13 Sep '17

13 Sep '17

commit 3d9ed652082bb401a85261dc7fbffb8552f6c830 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Wed Sep 13 02:01:21 2017 +0000 Bump the version to 0.0.14-dev. --- ChangeLog | 2 ++ data/version | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 9570ef7..ea7e000 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,5 @@ +Changes in version 0.0.14 - UNRELEASED: + Changes in version 0.0.13 - 2017-09-13: * Bug 13170: Disable the rest of the Firefox experiments botnet prefs. * Bug 23449: Allow `epool_pwait` in the tor seccomp rules. diff --git a/data/version b/data/version index 43b2961..c983ac1 100644 --- a/data/version +++ b/data/version @@ -1 +1 @@ -0.0.13 +0.0.14-dev

1 0

[sandboxed-tor-browser/master] Do the release ritual for sandboxed-tor-browser-0.0.13.
by yawning＠torproject.org 13 Sep '17

13 Sep '17

commit 43cdbb24b8b79995fb0292274c4a8daa5192b86d Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Wed Sep 13 01:59:00 2017 +0000 Do the release ritual for sandboxed-tor-browser-0.0.13. --- ChangeLog | 2 +- data/version | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index fedcb4c..9570ef7 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.0.13 - UNRELEASED: +Changes in version 0.0.13 - 2017-09-13: * Bug 13170: Disable the rest of the Firefox experiments botnet prefs. * Bug 23449: Allow `epool_pwait` in the tor seccomp rules. * Use lockPref for the IDN override done as part of #22984. diff --git a/data/version b/data/version index a4eb7ef..43b2961 100644 --- a/data/version +++ b/data/version @@ -1 +1 @@ -0.0.13-dev +0.0.13

1 0

[chutney/master] Add another network with bridges and hidden services
by teor＠torproject.org 12 Sep '17

12 Sep '17

commit 25c1528e879d89a6c00f99a188b181438b5cb9ac Author: teor <teor2345(a)gmail.com> Date: Wed Sep 13 09:30:04 2017 +1000 Add another network with bridges and hidden services We can use this one to test tor 0.3.2 and later. Closes 22691. --- networks/bridges+ipv6+hs-v23 | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/networks/bridges+ipv6+hs-v23 b/networks/bridges+ipv6+hs-v23 new file mode 100644 index 0000000..c99dff5 --- /dev/null +++ b/networks/bridges+ipv6+hs-v23 @@ -0,0 +1,26 @@ +# By default, Authorities are not configured as exits +Authority = Node(tag="a", authority=1, relay=1, torrc="authority.tmpl") +ExitRelay = Node(tag="r", relay=1, exit=1, torrc="relay.tmpl") +Client = Node(tag="c", torrc="client.tmpl") + +BridgeAuthority = Node(tag="ba", authority=1, bridgeauthority=1, + relay=1, torrc="bridgeauthority.tmpl") +Bridge = Node(tag="br", bridge=1, relay=1, torrc="bridge.tmpl") +BridgeIPv6 = Node(tag="br", bridge=1, relay=1, ipv6_addr="[::1]", torrc="bridge-v6.tmpl") +BridgeClient = Node(tag="bc", torrc="bridgeclient.tmpl") +HSv2 = Node(tag="h", hs=1, torrc="hs.tmpl") +HSv3 = Node(tag="h", hs=1, torrc="hs-v3.tmpl") + +# We need 8 authorities/relays/exits to ensure at least 2 get the guard flag +# in 0.2.6 +# We need 5 authorities/relays/exits to ensure we can build HS connections +# We put the IPv6 bridge first to ensure that clients try IPv6 before IPv4 +# Unfortunately, this does not prevent clients falling back to IPv4 +# bridges+ipv6-min only has IPv6 bridges +NODES = Authority.getN(3) + BridgeAuthority.getN(1) + \ + ExitRelay.getN(4) + \ + BridgeIPv6.getN(1) + Bridge.getN(1) + \ + Client.getN(1) + BridgeClient.getN(1) + \ + HSv2.getN(1) + HSv3.getN(1) + +ConfigureNodes(NODES)

1 0

[chutney/master] Add a bridges+hs-v23 network
by teor＠torproject.org 12 Sep '17

12 Sep '17

commit fee8719ddda7a41e1e23427c80c9f6be3a86e15f Author: teor <teor2345(a)gmail.com> Date: Wed Sep 13 09:05:32 2017 +1000 Add a bridges+hs-v23 network This would be a great default network for chutney, but it requires tor 0.3.2 or later. Part of 22437. --- networks/bridges+hs-v23 | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/networks/bridges+hs-v23 b/networks/bridges+hs-v23 new file mode 100644 index 0000000..5a5a367 --- /dev/null +++ b/networks/bridges+hs-v23 @@ -0,0 +1,22 @@ +# By default, Authorities are not configured as exits +Authority = Node(tag="a", authority=1, relay=1, torrc="authority.tmpl") +ExitRelay = Node(tag="r", relay=1, exit=1, torrc="relay.tmpl") +Client = Node(tag="c", torrc="client.tmpl") + +BridgeAuthority = Node(tag="ba", authority=1, bridgeauthority=1, + relay=1, torrc="bridgeauthority.tmpl") +Bridge = Node(tag="br", bridge=1, relay=1, torrc="bridge.tmpl") +BridgeClient = Node(tag="bc", torrc="bridgeclient.tmpl") +HSv2 = Node(tag="h", hs=1, torrc="hs.tmpl") +HSv3 = Node(tag="h", hs=1, torrc="hs-.tmpl") + +# We need 8 authorities/relays/exits to ensure at least 2 get the guard flag +# in 0.2.6 +# We need 5 authorities/relays/exits to ensure we can build HS connections +NODES = Authority.getN(3) + BridgeAuthority.getN(1) + \ + ExitRelay.getN(4) + \ + Bridge.getN(1) + \ + Client.getN(1) + BridgeClient.getN(1) + \ + HS.getN(1) + +ConfigureNodes(NODES)

1 0

[chutney/master] Properly qualify class variables
by teor＠torproject.org 12 Sep '17

12 Sep '17

commit d86feecd02a0af114d72cdab27c88d681e0d1c83 Author: teor <teor2345(a)gmail.com> Date: Wed Sep 13 09:03:58 2017 +1000 Properly qualify class variables Unqualified class variables work in some pythons, but not in others. Fix on commit c889534 in 21903. --- lib/chutney/TorNet.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lib/chutney/TorNet.py b/lib/chutney/TorNet.py index 3ace8a7..5d44128 100644 --- a/lib/chutney/TorNet.py +++ b/lib/chutney/TorNet.py @@ -890,8 +890,8 @@ class TorEnviron(chutney.Templating.Environ): elif my['dns_conf'] is None: # if there is no DNS conf file set print("CHUTNEY_DNS_CONF not specified, using '%s'." - % (DEFAULT_DNS_RESOLV_CONF)) - dns_conf = DEFAULT_DNS_RESOLV_CONF + % (TorEnviron.DEFAULT_DNS_RESOLV_CONF)) + dns_conf = TorEnviron.DEFAULT_DNS_RESOLV_CONF else: dns_conf = my['dns_conf'] dns_conf = os.path.abspath(my['dns_conf']) @@ -901,8 +901,8 @@ class TorEnviron(chutney.Templating.Environ): if not os.path.exists(dns_conf): # Issue a warning so the user notices print("CHUTNEY_DNS_CONF '%s' does not exist, using '%s'." - % (dns_conf, OFFLINE_DNS_RESOLV_CONF)) - dns_conf = OFFLINE_DNS_RESOLV_CONF + % (dns_conf, TorEnviron.OFFLINE_DNS_RESOLV_CONF)) + dns_conf = TorEnviron.OFFLINE_DNS_RESOLV_CONF return "ServerDNSResolvConfFile %s" % (dns_conf)

1 0

[translation/tails-openpgp-applet] Update translations for tails-openpgp-applet
by translation＠torproject.org 12 Sep '17

12 Sep '17

commit 87bbf06a76b71513d2f7ccd5665b0fbbaae70b7e Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 12 21:18:00 2017 +0000 Update translations for tails-openpgp-applet --- uz/openpgp-applet.pot | 78 +++++++++++++++++++++++++-------------------------- 1 file changed, 39 insertions(+), 39 deletions(-) diff --git a/uz/openpgp-applet.pot b/uz/openpgp-applet.pot index 25dc0f1e5..31f615548 100644 --- a/uz/openpgp-applet.pot +++ b/uz/openpgp-applet.pot @@ -1,13 +1,13 @@ # SOME DESCRIPTIVE TITLE. # Copyright (C) YEAR Tails developers -# This file is distributed under the same license as the PACKAGE package. +# This file is distributed under the same license as the OpenPGP_Applet package. # # Translators: msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: tails(a)boum.org\n" -"POT-Creation-Date: 2015-08-10 15:55+0200\n" +"POT-Creation-Date: 2017-08-05 15:07-0400\n" "PO-Revision-Date: 2015-11-23 02:23+0000\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Language-Team: Uzbek (http://www.transifex.com/otf/torproject/language/uz/)\n" @@ -17,158 +17,158 @@ msgstr "" "Language: uz\n" "Plural-Forms: nplurals=1; plural=0;\n" -#: bin/openpgp-applet:163 +#: bin/openpgp-applet:160 msgid "You are about to exit OpenPGP Applet. Are you sure?" msgstr "" -#: bin/openpgp-applet:175 +#: bin/openpgp-applet:172 msgid "OpenPGP encryption applet" msgstr "" -#: bin/openpgp-applet:178 +#: bin/openpgp-applet:175 msgid "Exit" msgstr "Chiqish" -#: bin/openpgp-applet:180 +#: bin/openpgp-applet:177 msgid "About" msgstr "" -#: bin/openpgp-applet:235 +#: bin/openpgp-applet:232 msgid "Encrypt Clipboard with _Passphrase" msgstr "" -#: bin/openpgp-applet:238 +#: bin/openpgp-applet:235 msgid "Sign/Encrypt Clipboard with Public _Keys" msgstr "" -#: bin/openpgp-applet:243 +#: bin/openpgp-applet:240 msgid "_Decrypt/Verify Clipboard" msgstr "" -#: bin/openpgp-applet:247 +#: bin/openpgp-applet:244 msgid "_Manage Keys" msgstr "" -#: bin/openpgp-applet:251 +#: bin/openpgp-applet:248 msgid "_Open Text Editor" msgstr "" -#: bin/openpgp-applet:295 +#: bin/openpgp-applet:292 msgid "The clipboard does not contain valid input data." msgstr "" -#: bin/openpgp-applet:347 bin/openpgp-applet:349 bin/openpgp-applet:351 +#: bin/openpgp-applet:337 bin/openpgp-applet:339 bin/openpgp-applet:341 msgid "Unknown Trust" msgstr "" -#: bin/openpgp-applet:353 +#: bin/openpgp-applet:343 msgid "Marginal Trust" msgstr "" -#: bin/openpgp-applet:355 +#: bin/openpgp-applet:345 msgid "Full Trust" msgstr "" -#: bin/openpgp-applet:357 +#: bin/openpgp-applet:347 msgid "Ultimate Trust" msgstr "" -#: bin/openpgp-applet:410 +#: bin/openpgp-applet:400 msgid "Name" msgstr "Nomi" -#: bin/openpgp-applet:411 +#: bin/openpgp-applet:401 msgid "Key ID" msgstr "" -#: bin/openpgp-applet:412 +#: bin/openpgp-applet:402 msgid "Status" msgstr "" -#: bin/openpgp-applet:444 +#: bin/openpgp-applet:433 msgid "Fingerprint:" msgstr "" -#: bin/openpgp-applet:447 +#: bin/openpgp-applet:436 msgid "User ID:" msgid_plural "User IDs:" msgstr[0] "" -#: bin/openpgp-applet:476 +#: bin/openpgp-applet:465 msgid "None (Don't sign)" msgstr "" -#: bin/openpgp-applet:539 +#: bin/openpgp-applet:528 msgid "Select recipients:" msgstr "" -#: bin/openpgp-applet:547 +#: bin/openpgp-applet:536 msgid "Hide recipients" msgstr "" -#: bin/openpgp-applet:550 +#: bin/openpgp-applet:539 msgid "" "Hide the user IDs of all recipients of an encrypted message. Otherwise " "anyone that sees the encrypted message can see who the recipients are." msgstr "" -#: bin/openpgp-applet:556 +#: bin/openpgp-applet:545 msgid "Sign message as:" msgstr "" -#: bin/openpgp-applet:560 +#: bin/openpgp-applet:549 msgid "Choose keys" msgstr "" -#: bin/openpgp-applet:600 +#: bin/openpgp-applet:589 msgid "Do you trust these keys?" msgstr "" -#: bin/openpgp-applet:603 +#: bin/openpgp-applet:592 msgid "The following selected key is not fully trusted:" msgid_plural "The following selected keys are not fully trusted:" msgstr[0] "" -#: bin/openpgp-applet:621 +#: bin/openpgp-applet:610 msgid "Do you trust this key enough to use it anyway?" msgid_plural "Do you trust these keys enough to use them anyway?" msgstr[0] "" -#: bin/openpgp-applet:634 +#: bin/openpgp-applet:623 msgid "No keys selected" msgstr "" -#: bin/openpgp-applet:636 +#: bin/openpgp-applet:625 msgid "" "You must select a private key to sign the message, or some public keys to " "encrypt the message, or both." msgstr "" -#: bin/openpgp-applet:664 +#: bin/openpgp-applet:653 msgid "No keys available" msgstr "" -#: bin/openpgp-applet:666 +#: bin/openpgp-applet:655 msgid "" "You need a private key to sign messages or a public key to encrypt messages." msgstr "" -#: bin/openpgp-applet:794 +#: bin/openpgp-applet:783 msgid "GnuPG error" msgstr "" -#: bin/openpgp-applet:815 +#: bin/openpgp-applet:804 msgid "Therefore the operation cannot be performed." msgstr "" -#: bin/openpgp-applet:865 +#: bin/openpgp-applet:854 msgid "GnuPG results" msgstr "" -#: bin/openpgp-applet:871 +#: bin/openpgp-applet:860 msgid "Output of GnuPG:" msgstr "" -#: bin/openpgp-applet:896 +#: bin/openpgp-applet:885 msgid "Other messages provided by GnuPG:" msgstr ""

1 0

[translation/mat-gui] Update translations for mat-gui
by translation＠torproject.org 12 Sep '17

12 Sep '17

commit f803a1bdca26b0d012376ef9bb286b5485b56318 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 12 21:16:08 2017 +0000 Update translations for mat-gui --- uz.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/uz.po b/uz.po index 5d20cafa8..55eb11392 100644 --- a/uz.po +++ b/uz.po @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2016-02-10 23:06+0100\n" -"PO-Revision-Date: 2017-09-12 19:53+0000\n" +"PO-Revision-Date: 2017-09-12 20:48+0000\n" "Last-Translator: carolyn <carolyn(a)anhalt.org>\n" "Language-Team: Uzbek (http://www.transifex.com/otf/torproject/language/uz/)\n" "MIME-Version: 1.0\n"

1 0

[tor/maint-0.2.9] Avoid sscanf() warnings from openbsd in the unit tests
by nickm＠torproject.org 12 Sep '17

12 Sep '17

commit d9e2db1efd531b5fb0d47a9c03d19f871145a76d Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Sep 12 15:57:25 2017 -0400 Avoid sscanf() warnings from openbsd in the unit tests OpenBSD doesn't like tricks where you use a too-wide sscanf argument for a too-narrow array, even when you know the input string statically. The fix here is just to use bigger buffers. Fixes 15582; bugfix on a3dafd3f58bb312 in 0.2.6.2-alpha. --- changes/bug15582 | 4 ++++ src/test/test_util.c | 21 ++++++++++++++++----- 2 files changed, 20 insertions(+), 5 deletions(-) diff --git a/changes/bug15582 b/changes/bug15582 new file mode 100644 index 000000000..5ea6431cf --- /dev/null +++ b/changes/bug15582 @@ -0,0 +1,4 @@ + o Minor bugfixes (compilation): + - Avoid compiler warnings in the unit tests for running tor_sscanf() + with wide string outputs. Fixes bug 15582; bugfix on 0.2.6.2-alpha. + diff --git a/src/test/test_util.c b/src/test/test_util.c index fcda56456..0b707caee 100644 --- a/src/test/test_util.c +++ b/src/test/test_util.c @@ -2500,7 +2500,7 @@ test_util_sscanf(void *arg) { unsigned u1, u2, u3; unsigned long ulng; - char s1[20], s2[10], s3[10], ch; + char s1[20], s2[10], s3[10], ch, *huge = NULL; int r; long lng1,lng2; int int1, int2; @@ -2512,7 +2512,13 @@ test_util_sscanf(void *arg) tt_int_op(-1,OP_EQ, tor_sscanf("wrong", "%5c", s1)); /* %c cannot have a number. */ tt_int_op(-1,OP_EQ, tor_sscanf("hello", "%s", s1)); /* %s needs a number. */ - tt_int_op(-1,OP_EQ, tor_sscanf("prettylongstring", "%999999s", s1)); + /* this will fail because we don't allow widths longer than 9999 */ + { + huge = tor_malloc(1000000); + r = tor_sscanf("prettylongstring", "%99999s", huge); + tor_free(huge); + tt_int_op(-1,OP_EQ, r); + } #if 0 /* GCC thinks these two are illegal. */ test_eq(-1, tor_sscanf("prettylongstring", "%0s", s1)); @@ -2618,8 +2624,13 @@ test_util_sscanf(void *arg) tt_int_op(2,OP_EQ, tor_sscanf("76trombones", "%6u%9s", &u1, s1)); /* %u%s */ tt_int_op(76,OP_EQ, u1); tt_str_op(s1,OP_EQ, "trombones"); - tt_int_op(1,OP_EQ, tor_sscanf("prettylongstring", "%999s", s1)); - tt_str_op(s1,OP_EQ, "prettylongstring"); + { + huge = tor_malloc(1000); + r = tor_sscanf("prettylongstring", "%999s", huge); + tt_int_op(1,OP_EQ, r); + tt_str_op(huge,OP_EQ, "prettylongstring"); + tor_free(huge); + } /* %s doesn't eat spaces */ tt_int_op(2,OP_EQ, tor_sscanf("hello world", "%9s %9s", s1, s2)); tt_str_op(s1,OP_EQ, "hello"); @@ -2843,7 +2854,7 @@ test_util_sscanf(void *arg) test_feq(d4, 3.2); done: - ; + tor_free(huge); } #define tt_char_op(a,op,b) tt_assert_op_type(a,op,b,char,"%c")

1 0