September 2017 - tor-commits - lists.torproject.org

[tor-messenger-build/esr52] Bump to tor-browser@7.0.5
by sukhbir＠torproject.org 06 Sep '17

06 Sep '17

commit c382d7d037a35bd246c783d2886ef8c4ce200cd2 Author: Arlo Breault <arlolra(a)gmail.com> Date: Wed Sep 6 10:18:41 2017 -0400 Bump to tor-browser(a)7.0.5 --- ChangeLog | 2 +- projects/tor-browser/config | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index d74ab16..dd51baa 100644 --- a/ChangeLog +++ b/ChangeLog @@ -2,7 +2,7 @@ Tor Messenger 0.5.0b1 -- * All Platforms * Use the tor-browser-52.3.0esr-7.0-1-build1 tag on tor-browser * Use the THUNDERBIRD_52_3_0_RELEASE tag on comm-esr52 - * Update tor-browser to 7.0.4 + * Update tor-browser to 7.0.5 * Update tor-launcher to 0.2.12.3 * Trac 22005: Move to ESR 52 * Trac 16606: Temporary XMPP accounts diff --git a/projects/tor-browser/config b/projects/tor-browser/config index 395c07f..0a5c8ad 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 7.0.4 +version: 7.0.5 filename: 'tor-browser-[% c("version") %]-[% c("var/osname") %].[% c("var/extension") %]' input_files:

1 0

[tor-messenger-build/esr52] Update start-tor-messenger for Selfrando (f63b9804)
by sukhbir＠torproject.org 06 Sep '17

06 Sep '17

commit b80c865726e6f83fb2e2829b63de979033a7af87 Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Mon Sep 4 12:11:45 2017 -0400 Update start-tor-messenger for Selfrando (f63b9804) --- projects/tor-messenger/start-tor-messenger | 1 + 1 file changed, 1 insertion(+) diff --git a/projects/tor-messenger/start-tor-messenger b/projects/tor-messenger/start-tor-messenger index dce5411..d9fd9ed 100755 --- a/projects/tor-messenger/start-tor-messenger +++ b/projects/tor-messenger/start-tor-messenger @@ -272,6 +272,7 @@ fi LD_LIBRARY_PATH="${HOME}/TorBrowser/Tor/:${HOME}/TorBrowser/Data/Browser/profile.default/extensions/ctypes-otr@tormessenger/chrome/content" export LD_LIBRARY_PATH +export SELFRANDO_write_layout_file= function setControlPortPasswd() { local ctrlPasswd=$1

1 0

[tor-messenger-build/esr52] Update changelog for f63b9804
by sukhbir＠torproject.org 06 Sep '17

06 Sep '17

commit 64cb6cdbc2c5b1469741f8065dbab316cb3d41aa Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Sun Sep 3 13:05:05 2017 -0400 Update changelog for f63b9804 --- ChangeLog | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ChangeLog b/ChangeLog index 0781e84..d74ab16 100644 --- a/ChangeLog +++ b/ChangeLog @@ -7,6 +7,8 @@ Tor Messenger 0.5.0b1 -- * Trac 22005: Move to ESR 52 * Trac 16606: Temporary XMPP accounts * Trac 13855: Use known onions for XMPP servers + * Linux + * Trac 22229: Compile Linux builds with Selfrando * Mac * Trac 20316: Update OS X toolchain * Trac 10942: Deterministic builds for Instantbird

1 0

[torspec/master] typo fix
by arma＠torproject.org 06 Sep '17

06 Sep '17

commit ee2ce95da34373ef7208120b4cbecd4eccd61677 Author: Roger Dingledine <arma(a)torproject.org> Date: Wed Sep 6 15:09:45 2017 -0400 typo fix --- proposals/224-rend-spec-ng.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/224-rend-spec-ng.txt b/proposals/224-rend-spec-ng.txt index ba057bd..9081976 100644 --- a/proposals/224-rend-spec-ng.txt +++ b/proposals/224-rend-spec-ng.txt @@ -1889,7 +1889,7 @@ Table of contents: older protocols at the rendezvous point. Relays older than 0.2.9.1 should not be used for rendezvous points by next - generation onion services because they enforce too-strict legth checks to + generation onion services because they enforce too-strict length checks to rendezvous cells. Hence the "HSRend" protocol from proposal#264 should be used to select relays for rendezvous points.

1 0

[torspec/master] add nsf acks
by arma＠torproject.org 06 Sep '17

06 Sep '17

commit 87a53bc0899410a50a9caecbe882695463c9a696 Author: Roger Dingledine <arma(a)torproject.org> Date: Wed Sep 6 15:06:10 2017 -0400 add nsf acks --- guard-spec.txt | 5 +++++ padding-spec.txt | 4 ++++ 2 files changed, 9 insertions(+) diff --git a/guard-spec.txt b/guard-spec.txt index 69fff0a..e21eaf4 100644 --- a/guard-spec.txt +++ b/guard-spec.txt @@ -644,6 +644,11 @@ A. Appendices +A.0. Acknowledgements + + This research was supported in part by NSF grants CNS-1111539, + CNS-1314637, CNS-1526306, CNS-1619454, and CNS-1640548. + A.1. Parameters with suggested values. [Section:PARAM_VALS] (All suggested values chosen arbitrarily) diff --git a/padding-spec.txt b/padding-spec.txt index 3f9b194..b85f0fd 100644 --- a/padding-spec.txt +++ b/padding-spec.txt @@ -274,6 +274,10 @@ the anonymity and load-balancing implications of their choices. open. - Default: 3600 +A. Acknowledgments + + This research was supported in part by NSF grants CNS-1111539, + CNS-1314637, CNS-1526306, CNS-1619454, and CNS-1640548. 1. https://en.wikipedia.org/wiki/NetFlow 2. http://infodoc.alcatel-lucent.com/html/0_add-h-f/93-0073-10-01/7750_SR_OS_R…

1 0

[tor/master] Better error on failure to load seccomp2 sandbox
by nickm＠torproject.org 06 Sep '17

06 Sep '17

commit ab18e5e5fcff7fbdbf0905e6dd2585b7e4a10108 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 6 14:23:47 2017 -0400 Better error on failure to load seccomp2 sandbox There are two reasons this is likeliest to happen -- no kernel support, and some bug in Tor. We'll ask people to check the former before they report. Closes 23090. --- changes/feature23090 | 3 +++ src/common/sandbox.c | 4 +++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/changes/feature23090 b/changes/feature23090 new file mode 100644 index 000000000..44cdac5ca --- /dev/null +++ b/changes/feature23090 @@ -0,0 +1,3 @@ + o Minor features (linux seccomp2 sandbox): + - If the sandbox filter fails to load, suggest to the user that their + kernel might not support seccomp2. Closes ticket 23090. diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 18beaabe1..a85b1406f 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -1638,7 +1638,9 @@ install_syscall_filter(sandbox_cfg_t* cfg) // loading the seccomp2 filter if ((rc = seccomp_load(ctx))) { - log_err(LD_BUG, "(Sandbox) failed to load: %d (%s)!", rc, + log_err(LD_BUG, "(Sandbox) failed to load: %d (%s)! " + "Are you sure that your kernel has seccomp2 support? The " + "sandbox won't work without it.", rc, strerror(-rc)); goto end; }

1 0

[tor/master] hs: Set rendezvous circuit timestamp_dirty all the time
by nickm＠torproject.org 06 Sep '17

06 Sep '17

commit a52a32c855b2ed59cb915ad687d80f1294c6f0a3 Author: David Goulet <dgoulet(a)torproject.org> Date: Thu Aug 31 11:40:22 2017 -0400 hs: Set rendezvous circuit timestamp_dirty all the time We used to check if it was set to 0 which is what unused circuit have but when the rendezvous circuit was cannibalized, the timestamp_dirty is not 0 but we still need to reset it so we can actually use it without having the chance of expiring the next second (or very soon). Fixes #23123 Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- src/or/hs_service.c | 7 ++++--- src/or/rendservice.c | 7 ++++--- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/src/or/hs_service.c b/src/or/hs_service.c index 5ff118222..d004bae23 100644 --- a/src/or/hs_service.c +++ b/src/or/hs_service.c @@ -2590,9 +2590,10 @@ service_rendezvous_circ_has_opened(origin_circuit_t *circ) tor_assert(circ->hs_ident); tor_assert(TO_CIRCUIT(circ)->purpose == CIRCUIT_PURPOSE_S_CONNECT_REND); - /* Declare the circuit dirty to avoid reuse, and for path-bias */ - if (!TO_CIRCUIT(circ)->timestamp_dirty) - TO_CIRCUIT(circ)->timestamp_dirty = time(NULL); + /* Declare the circuit dirty to avoid reuse, and for path-bias. We set the + * timestamp regardless of its content because that circuit could have been + * cannibalized so in any cases, we are about to use that circuit more. */ + TO_CIRCUIT(circ)->timestamp_dirty = time(NULL); pathbias_count_use_attempt(circ); /* Get the corresponding service and intro point. */ diff --git a/src/or/rendservice.c b/src/or/rendservice.c index c17d77f97..9edb7cc4b 100644 --- a/src/or/rendservice.c +++ b/src/or/rendservice.c @@ -3332,9 +3332,10 @@ rend_service_rendezvous_has_opened(origin_circuit_t *circuit) NULL); rend_cookie = circuit->rend_data->rend_cookie; - /* Declare the circuit dirty to avoid reuse, and for path-bias */ - if (!circuit->base_.timestamp_dirty) - circuit->base_.timestamp_dirty = time(NULL); + /* Declare the circuit dirty to avoid reuse, and for path-bias. We set the + * timestamp regardless of its content because that circuit could have been + * cannibalized so in any cases, we are about to use that circuit more. */ + circuit->base_.timestamp_dirty = time(NULL); /* This may be redundant */ pathbias_count_use_attempt(circuit);

1 0

[tor/master] Merge remote-tracking branch 'dgoulet/bug23123_032_01'
by nickm＠torproject.org 06 Sep '17

06 Sep '17

commit 9261f612ad7ea66580bc5f95d9c9b609e125da3a Merge: b268dca41 a52a32c85 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 6 14:17:43 2017 -0400 Merge remote-tracking branch 'dgoulet/bug23123_032_01' src/or/hs_service.c | 7 ++++--- src/or/rendservice.c | 7 ++++--- 2 files changed, 8 insertions(+), 6 deletions(-)

1 0

[torspec/master] prop224: We only use upgraded relays for rendezvous points.
by nickm＠torproject.org 06 Sep '17

06 Sep '17

commit 49f9be98a520320a52f69712b1c5e48cade47570 Author: George Kadianakis <desnacked(a)riseup.net> Date: Wed Sep 6 19:54:29 2017 +0300 prop224: We only use upgraded relays for rendezvous points. --- proposals/224-rend-spec-ng.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/proposals/224-rend-spec-ng.txt b/proposals/224-rend-spec-ng.txt index 8ee5cdd..ba057bd 100644 --- a/proposals/224-rend-spec-ng.txt +++ b/proposals/224-rend-spec-ng.txt @@ -1888,6 +1888,11 @@ Table of contents: this length with random bytes, to make them difficult to distinguish from older protocols at the rendezvous point. + Relays older than 0.2.9.1 should not be used for rendezvous points by next + generation onion services because they enforce too-strict legth checks to + rendezvous cells. Hence the "HSRend" protocol from proposal#264 should be + used to select relays for rendezvous points. + 5. Encrypting data between client and host A successfully completed handshake, as embedded in the

1 0

[tor/master] Correctly describe which inputs would confuse the old BSD strtol
by nickm＠torproject.org 06 Sep '17

06 Sep '17

commit b268dca41175fe438441d3e4137766efee30da35 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 6 13:23:19 2017 -0400 Correctly describe which inputs would confuse the old BSD strtol This fixes our changelog's description of 22789. --- ChangeLog | 4 ++-- ReleaseNotes | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5bc625ace..b30ca2ad4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -108,7 +108,7 @@ Changes in version 0.3.0.10 - 2017-08-02 o Major bugfixes (openbsd, denial-of-service, backport from 0.3.1.5-alpha): - Avoid an assertion failure bug affecting our implementation of inet_pton(AF_INET6) on certain OpenBSD systems whose strtol() - handling of "0xfoo" differs from what we had expected. Fixes bug + handling of "0xbar" differs from what we had expected. Fixes bug 22789; bugfix on 0.2.3.8-alpha. Also tracked as TROVE-2017-007. o Minor features (backport from 0.3.1.5-alpha): @@ -180,7 +180,7 @@ Changes in version 0.3.1.5-alpha - 2017-08-01 o Major bugfixes (openbsd, denial-of-service): - Avoid an assertion failure bug affecting our implementation of inet_pton(AF_INET6) on certain OpenBSD systems whose strtol() - handling of "0xfoo" differs from what we had expected. Fixes bug + handling of "0xbar" differs from what we had expected. Fixes bug 22789; bugfix on 0.2.3.8-alpha. Also tracked as TROVE-2017-007. o Major bugfixes (relay, performance): diff --git a/ReleaseNotes b/ReleaseNotes index 668ee533c..0012c060f 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -25,7 +25,7 @@ Changes in version 0.3.0.10 - 2017-08-02 o Major bugfixes (openbsd, denial-of-service, backport from 0.3.1.5-alpha): - Avoid an assertion failure bug affecting our implementation of inet_pton(AF_INET6) on certain OpenBSD systems whose strtol() - handling of "0xfoo" differs from what we had expected. Fixes bug + handling of "0xbar" differs from what we had expected. Fixes bug 22789; bugfix on 0.2.3.8-alpha. Also tracked as TROVE-2017-007. o Minor features (backport from 0.3.1.5-alpha):

1 0