November 2020 - tor-commits - lists.torproject.org

[tor/release-0.4.3] Merge remote-tracking branch 'tor-gitlab/mr/196' into maint-0.4.3
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit 2e7cbd7a9c4672d334a5900be2d2f4be26e603a3 Merge: 7c0778ef7e 4154158d79 Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Nov 19 17:43:44 2020 +0000 Merge remote-tracking branch 'tor-gitlab/mr/196' into maint-0.4.3 changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

[tor/release-0.4.4] Make config/parse_tcp_proxy_line work in the presence of DNS hijacking
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit 4154158d79452a5026c25750fae220a529c00fa3 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 5 09:47:32 2020 -0500 Make config/parse_tcp_proxy_line work in the presence of DNS hijacking We can use our existing mocking functionality to do this: We have been in this position before. Fixes part of #40179; bugfix on 0.4.3.1-alpha. --- changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(… [View More]

1 0

[tor/release-0.4.4] Merge remote-tracking branch 'tor-gitlab/mr/196' into maint-0.4.3
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit 2e7cbd7a9c4672d334a5900be2d2f4be26e603a3 Merge: 7c0778ef7e 4154158d79 Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Nov 19 17:43:44 2020 +0000 Merge remote-tracking branch 'tor-gitlab/mr/196' into maint-0.4.3 changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

[tor/release-0.4.5] Merge remote-tracking branch 'tor-gitlab/mr/196' into maint-0.4.3
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit 2e7cbd7a9c4672d334a5900be2d2f4be26e603a3 Merge: 7c0778ef7e 4154158d79 Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Nov 19 17:43:44 2020 +0000 Merge remote-tracking branch 'tor-gitlab/mr/196' into maint-0.4.3 changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

[tor/release-0.4.5] Merge branch 'maint-0.4.3' into maint-0.4.4
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit 77bb4b0838da1d1c1cb7d2d47b02954abeb00a21 Merge: 9001732394 2e7cbd7a9c Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Nov 19 17:43:59 2020 +0000 Merge branch 'maint-0.4.3' into maint-0.4.4 changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

[tor/release-0.4.4] Merge branch 'maint-0.4.3' into maint-0.4.4
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit 77bb4b0838da1d1c1cb7d2d47b02954abeb00a21 Merge: 9001732394 2e7cbd7a9c Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Nov 19 17:43:59 2020 +0000 Merge branch 'maint-0.4.3' into maint-0.4.4 changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

[tor/release-0.4.5] Merge branch 'maint-0.4.4' into maint-0.4.5
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit b274e46309b4375f6014f3b698ea24b32d4935a5 Merge: ea52705e4b 77bb4b0838 Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Nov 19 17:44:00 2020 +0000 Merge branch 'maint-0.4.4' into maint-0.4.5 changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

[tor/release-0.4.4] Merge branch 'maint-0.4.4' into release-0.4.4
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit 498807b499654898a73d6867ab0c799cbe6d1a78 Merge: 615a38f052 77bb4b0838 Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Nov 19 17:43:59 2020 +0000 Merge branch 'maint-0.4.4' into release-0.4.4 changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

[tor/release-0.4.5] Make config/parse_tcp_proxy_line work in the presence of DNS hijacking
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit 4154158d79452a5026c25750fae220a529c00fa3 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 5 09:47:32 2020 -0500 Make config/parse_tcp_proxy_line work in the presence of DNS hijacking We can use our existing mocking functionality to do this: We have been in this position before. Fixes part of #40179; bugfix on 0.4.3.1-alpha. --- changes/bug40179_part2 | 4 ++++ src/test/test_config.c | 6 ++++-- 2 files changed, 8 insertions(+), 2 deletions(… [View More]

1 0

[tor/maint-0.4.5] config: Bridge line with a transport must have a ClientTransportPlugin
by ahf＠torproject.org 19 Nov '20

19 Nov '20

commit ea52705e4b1753a75aac77ec0bc828d70327a4ad Author: David Goulet <dgoulet(a)torproject.org> Date: Tue Sep 22 10:45:52 2020 -0400 config: Bridge line with a transport must have a ClientTransportPlugin Fixes #25528 Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- changes/ticket25528 | 6 ++++++ src/app/config/config.c | 16 ++++++++++++++++ src/feature/client/bridges.c | 11 +++++++++++ src/feature/client/bridges.h | 1 + 4 files … [View More]changed, 34 insertions(+) diff --git a/changes/ticket25528 b/changes/ticket25528 new file mode 100644 index 0000000000..cfc6c91fb7 --- /dev/null +++ b/changes/ticket25528 @@ -0,0 +1,6 @@ + o Minor bugfixes (client, bridge, configuration): + - Exit tor on a misconfiguration when the Bridge line has a transport but + no corresponding ClientTransportPlugin can be found. Prior to this fix, + tor would attempt to connect to the bridge directly without using the + transport leading to a possible leak on the wire. Fixes bug 25528; + bugfix on 0.2.6.1-alpha. diff --git a/src/app/config/config.c b/src/app/config/config.c index 04a82a5c43..79b67e7a90 100644 --- a/src/app/config/config.c +++ b/src/app/config/config.c @@ -2189,6 +2189,22 @@ options_act,(const or_options_t *old_options)) } } + /* Validate that we actually have a configured transport for a Bridge line + * that has one. This is done here because we require the bridge and + * transport to be added to the global list before doing the validation. + * + * In an ideal world, pt_parse_transport_line() would actually return a + * transport_t object so we could inspect it and thus do this step at + * validation time. */ + SMARTLIST_FOREACH_BEGIN(bridge_list_get(), const bridge_info_t *, bi) { + const char *bi_transport_name = bridget_get_transport_name(bi); + if (bi_transport_name && !transport_get_by_name(bi_transport_name)) { + log_warn(LD_CONFIG, "Bridge line with transport %s is missing a " + "ClientTransportPlugin line", bi_transport_name); + return -1; + } + } SMARTLIST_FOREACH_END(bi); + if (options_act_server_transport(old_options) < 0) return -1; diff --git a/src/feature/client/bridges.c b/src/feature/client/bridges.c index 6e10defa13..8e2bb01661 100644 --- a/src/feature/client/bridges.c +++ b/src/feature/client/bridges.c @@ -164,6 +164,17 @@ bridge_get_addr_port(const bridge_info_t *bridge) return &bridge->addrport_configured; } +/** + * Given a bridge, return the transport name. If none were configured, + * NULL is returned. + */ +const char * +bridget_get_transport_name(const bridge_info_t *bridge) +{ + tor_assert(bridge); + return bridge->transport_name; +} + /** If we have a bridge configured whose digest matches digest, or a * bridge with no known digest whose address matches any of the * tor_addr_port_t's in orports, return that bridge. Else return diff --git a/src/feature/client/bridges.h b/src/feature/client/bridges.h index 174149cf97..1b090e8649 100644 --- a/src/feature/client/bridges.h +++ b/src/feature/client/bridges.h @@ -23,6 +23,7 @@ void sweep_bridge_list(void); const smartlist_t *bridge_list_get(void); const uint8_t *bridge_get_rsa_id_digest(const bridge_info_t *bridge); const tor_addr_port_t * bridge_get_addr_port(const bridge_info_t *bridge); +const char *bridget_get_transport_name(const bridge_info_t *bridge); bridge_info_t *get_configured_bridge_by_addr_port_digest( const tor_addr_t *addr, uint16_t port, [View Less]

1 0