March 2020 - tor-commits - lists.torproject.org

[tor/master] practracker: Disable practracker in git hooks
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit bb3df5f322814740d7021ae680bc387297c84e72 Author: teor <teor(a)torproject.org> Date: Fri Mar 20 17:32:57 2020 +1000 practracker: Disable practracker in git hooks Disable our coding standards best practices tracker in our git hooks. 0.4.3 branches only. Closes ticket 33678. --- changes/ticket33678_043 | 3 +++ scripts/maint/practracker/.enable_practracker_in_hooks | 1 - 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/changes/ticket33678_043 b/changes/ticket33678_043 new file mode 100644 index 000000000..12316262f --- /dev/null +++ b/changes/ticket33678_043 @@ -0,0 +1,3 @@ + o Code simplification and refactoring: + - Disable our coding standards best practices tracker in our git hooks. + (0.4.3 branches only.) Closes ticket 33678. diff --git a/scripts/maint/practracker/.enable_practracker_in_hooks b/scripts/maint/practracker/.enable_practracker_in_hooks deleted file mode 100644 index a9e707f5d..000000000 --- a/scripts/maint/practracker/.enable_practracker_in_hooks +++ /dev/null @@ -1 +0,0 @@ -This file is present to tell our git hooks to run practracker on this branch.

1 0

[tor/release-0.4.3] Merge branch 'maint-0.4.3' into release-0.4.3
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit 0db545b17a8065eee06df50563999d8ee8589e53 Merge: 3913575ac e380396d4 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Mar 20 08:06:53 2020 -0400 Merge branch 'maint-0.4.3' into release-0.4.3 changes/ticket33678_043 | 3 +++ scripts/maint/practracker/.enable_practracker_in_hooks | 1 - 2 files changed, 3 insertions(+), 1 deletion(-)

1 0

[tor/master] Merge remote-tracking branch 'tor-github/pr/1824/head'
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit 269d3f2760e60e47ad41f3143054b104236e23af Merge: 3e24bd555 d66005ada Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Mar 20 08:06:46 2020 -0400 Merge remote-tracking branch 'tor-github/pr/1824/head'

1 0

[tor/release-0.4.3] practracker: Disable practracker in git hooks
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit bb3df5f322814740d7021ae680bc387297c84e72 Author: teor <teor(a)torproject.org> Date: Fri Mar 20 17:32:57 2020 +1000 practracker: Disable practracker in git hooks Disable our coding standards best practices tracker in our git hooks. 0.4.3 branches only. Closes ticket 33678. --- changes/ticket33678_043 | 3 +++ scripts/maint/practracker/.enable_practracker_in_hooks | 1 - 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/changes/ticket33678_043 b/changes/ticket33678_043 new file mode 100644 index 000000000..12316262f --- /dev/null +++ b/changes/ticket33678_043 @@ -0,0 +1,3 @@ + o Code simplification and refactoring: + - Disable our coding standards best practices tracker in our git hooks. + (0.4.3 branches only.) Closes ticket 33678. diff --git a/scripts/maint/practracker/.enable_practracker_in_hooks b/scripts/maint/practracker/.enable_practracker_in_hooks deleted file mode 100644 index a9e707f5d..000000000 --- a/scripts/maint/practracker/.enable_practracker_in_hooks +++ /dev/null @@ -1 +0,0 @@ -This file is present to tell our git hooks to run practracker on this branch.

1 0

[tor/master] Merge branch 'maint-0.4.3'
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit 89bd58837cfbb30902626d0a9f0aa2a50cba2a96 Merge: 269d3f276 e380396d4 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Mar 20 08:06:53 2020 -0400 Merge branch 'maint-0.4.3'

1 0

[tor/release-0.4.3] Merge remote-tracking branch 'tor-github/pr/1823/head' into maint-0.4.3
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit e380396d423deded74e6c0e6f6f767a1cc93df04 Merge: d4a74021e bb3df5f32 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Mar 20 08:06:30 2020 -0400 Merge remote-tracking branch 'tor-github/pr/1823/head' into maint-0.4.3 changes/ticket33678_043 | 3 +++ scripts/maint/practracker/.enable_practracker_in_hooks | 1 - 2 files changed, 3 insertions(+), 1 deletion(-)

1 0

[tor/release-0.4.3] Set *have_low_ports_out from stub port_parse_ports_relay().
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit c478dc9b2f6c320cc21a10ffed0d7cc245fa933c Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Mar 19 20:04:53 2020 -0400 Set *have_low_ports_out from stub port_parse_ports_relay(). Previously we just ignored this option, which would leave it unset, and cause an assertion failure later on when running with the User option. Fixes bug 33668; bugfix on 0.4.3.1-alpha. --- changes/bug33668 | 4 ++++ src/feature/relay/relay_config.h | 17 ++++++++++++++--- 2 files changed, 18 insertions(+), 3 deletions(-) diff --git a/changes/bug33668 b/changes/bug33668 new file mode 100644 index 000000000..2b0830d6d --- /dev/null +++ b/changes/bug33668 @@ -0,0 +1,4 @@ + o Minor bugfixes (--disable-module-relay): + - Fix an assertion failure when Tor is build without the relay module, + and then invoked with the "User" option. Fixes bug 33668; bugfix on + 0.4.3.1-alpha. diff --git a/src/feature/relay/relay_config.h b/src/feature/relay/relay_config.h index 7a05561c2..c70c322d8 100644 --- a/src/feature/relay/relay_config.h +++ b/src/feature/relay/relay_config.h @@ -125,6 +125,20 @@ options_validate_relay_mode(const struct or_options_t *old_options, return 0; } +static inline int +port_parse_ports_relay(or_options_t *options, + char **msg, + smartlist_t *ports_out, + int *have_low_ports_out) +{ + (void)options; + (void)msg; + (void)ports_out; + if (*have_low_ports_out < 0) + *have_low_ports_out = 0; + return 0; +} + #define relay_get_dirportfrontpage() \ (NULL) #define relay_config_free_all() \ @@ -138,9 +152,6 @@ options_validate_relay_mode(const struct or_options_t *old_options, #define port_warn_nonlocal_ext_orports(ports, portname) \ (((void)(ports)),((void)(portname))) -#define port_parse_ports_relay(options, msg, ports_out, have_low_ports_out) \ - (((void)(options)),((void)(msg)),((void)(ports_out)), \ - ((void)(have_low_ports_out)),0) #define port_update_port_set_relay(options, ports) \ (((void)(options)),((void)(ports)))

1 0

[tor/release-0.4.3] Merge branch 'maint-0.4.3' into release-0.4.3
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit 3913575acd49394d6514c3d75af2a499b482daa8 Merge: 23d0dba7a d4a74021e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Mar 20 07:57:19 2020 -0400 Merge branch 'maint-0.4.3' into release-0.4.3 changes/bug33668 | 4 ++++ changes/bug33674 | 4 ++++ src/feature/dirauth/dirauth_config.h | 10 ++++++++-- src/feature/dirauth/dirvote.c | 24 ++++++++++++++++++++---- src/feature/dirauth/dirvote.h | 2 +- src/feature/dirauth/process_descs.c | 8 +++++--- src/feature/dirauth/process_descs.h | 11 ++++++----- src/feature/relay/relay_config.c | 7 ++++--- src/feature/relay/relay_config.h | 17 ++++++++++++++--- 9 files changed, 66 insertions(+), 21 deletions(-)

1 0

[tor/release-0.4.3] relay/dirauth: Set some output arguments in stubs
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit d4a74021e5ab9dbaf3bb27c0a52e1fd7f8f792ab Author: teor <teor(a)torproject.org> Date: Fri Mar 20 17:01:06 2020 +1000 relay/dirauth: Set some output arguments in stubs And document how some functions set their output arguments. Fixes bug 33674; bugfix on 0.4.3.1-alpha. --- changes/bug33674 | 4 ++++ src/feature/dirauth/dirauth_config.h | 10 ++++++++-- src/feature/dirauth/dirvote.c | 24 ++++++++++++++++++++---- src/feature/dirauth/dirvote.h | 2 +- src/feature/dirauth/process_descs.c | 8 +++++--- src/feature/dirauth/process_descs.h | 11 ++++++----- src/feature/relay/relay_config.c | 7 ++++--- 7 files changed, 48 insertions(+), 18 deletions(-) diff --git a/changes/bug33674 b/changes/bug33674 new file mode 100644 index 000000000..bcc3fcab0 --- /dev/null +++ b/changes/bug33674 @@ -0,0 +1,4 @@ + o Minor bugfixes (--disable-module-relay,--disable-module-dirauth): + - Set some output arguments in the relay and dirauth module stubs, to + guard against future stub argument handling bugs like 33668. + Fixes bug 33674; bugfix on 0.4.3.1-alpha. diff --git a/src/feature/dirauth/dirauth_config.h b/src/feature/dirauth/dirauth_config.h index ede1207a8..9042ff877 100644 --- a/src/feature/dirauth/dirauth_config.h +++ b/src/feature/dirauth/dirauth_config.h @@ -75,8 +75,14 @@ options_validate_dirauth_mode(const struct or_options_t *old_options, #define options_act_dirauth_mtbf(old_options) \ (((void)(old_options)),0) -#define options_act_dirauth_stats(old_options, print_notice_out) \ - (((void)(old_options)),((void)(print_notice_out)),0) +static inline int +options_act_dirauth_stats(const struct or_options_t *old_options, + bool *print_notice_out) +{ + (void)old_options; + *print_notice_out = 0; + return 0; +} #define dirauth_should_reject_requests_under_load() (false) diff --git a/src/feature/dirauth/dirvote.c b/src/feature/dirauth/dirvote.c index 9490867e8..e230815ca 100644 --- a/src/feature/dirauth/dirvote.c +++ b/src/feature/dirauth/dirvote.c @@ -2527,9 +2527,12 @@ compute_consensus_package_lines(smartlist_t *votes) * any new signatures in src_voter_list that should be added to * target. (A signature should be added if we have no signature for that * voter in target yet, or if we have no verifiable signature and the - * new signature is verifiable.) Return the number of signatures added or - * changed, or -1 if the document signed by sigs isn't the same - * document as target. */ + * new signature is verifiable.) + * + * Return the number of signatures added or changed, or -1 if the document + * signatures are invalid. Sets *msg_out to a string constant + * describing the signature status. + */ STATIC int networkstatus_add_detached_signatures(networkstatus_t *target, ns_detached_signatures_t *sigs, @@ -3564,6 +3567,14 @@ dirvote_add_signatures_to_pending_consensus( return r; } +/** Helper: we just got the detached_signatures_body sent to us as + * signatures on the currently pending consensus. Add them to the pending + * consensus (if we have one). + * + * Set *msg to a string constant describing the status, regardless of + * success or failure. + * + * Return negative on failure, nonnegative on success. */ static int dirvote_add_signatures_to_all_pending_consensuses( const char *detached_signatures_body, @@ -3626,7 +3637,12 @@ dirvote_add_signatures_to_all_pending_consensuses( /** Helper: we just got the detached_signatures_body sent to us as * signatures on the currently pending consensus. Add them to the pending * consensus (if we have one); otherwise queue them until we have a - * consensus. Return negative on failure, nonnegative on success. */ + * consensus. + * + * Set *msg to a string constant describing the status, regardless of + * success or failure. + * + * Return negative on failure, nonnegative on success. */ int dirvote_add_signatures(const char *detached_signatures_body, const char *source, diff --git a/src/feature/dirauth/dirvote.h b/src/feature/dirauth/dirvote.h index f695e93ab..675f4ee14 100644 --- a/src/feature/dirauth/dirvote.h +++ b/src/feature/dirauth/dirvote.h @@ -162,7 +162,7 @@ dirvote_add_signatures(const char *detached_signatures_body, { (void) detached_signatures_body; (void) source; - (void) msg_out; + *msg_out = "No directory authority support"; /* If the dirauth module is disabled, this should NEVER be called else we * failed to safeguard the dirauth module. */ tor_assert_nonfatal_unreached(); diff --git a/src/feature/dirauth/process_descs.c b/src/feature/dirauth/process_descs.c index 5c918ca0b..5025d0ae3 100644 --- a/src/feature/dirauth/process_descs.c +++ b/src/feature/dirauth/process_descs.c @@ -285,7 +285,7 @@ dirserv_load_fingerprint_file(void) * Return the appropriate router status. * * If the status is 'RTR_REJECT' and msg is provided, set - * *msg to an explanation of why. */ + * *msg to a string constant explaining why. */ uint32_t dirserv_router_get_status(const routerinfo_t *router, const char **msg, int severity) @@ -563,7 +563,8 @@ dirserv_router_has_valid_address(routerinfo_t *ri) /** Check whether we, as a directory server, want to accept ri. If so, * set its is_valid,running fields and return 0. Otherwise, return -1. * - * If the router is rejected, set *msg to an explanation of why. + * If the router is rejected, set *msg to a string constant explining + * why. * * If complain then explain at log-level 'notice' why we refused * a descriptor; else explain at log-level 'info'. @@ -729,7 +730,8 @@ dirserv_add_multiple_descriptors(const char *desc, size_t desclen, * That means the caller must not access ri after this function * returns, since it might have been freed. * - * Return the status of the operation. + * Return the status of the operation, and set *msg to a string + * constant describing the status. * * This function is only called when fresh descriptors are posted, not when * we re-load the cache. diff --git a/src/feature/dirauth/process_descs.h b/src/feature/dirauth/process_descs.h index 9c1369277..1461ab697 100644 --- a/src/feature/dirauth/process_descs.h +++ b/src/feature/dirauth/process_descs.h @@ -98,7 +98,7 @@ dirserv_add_multiple_descriptors(const char *desc, size_t desclen, (void)desclen; (void)purpose; (void)source; - (void)msg; + *msg = "No directory authority support"; return (enum was_router_added_t)0; } static inline enum was_router_added_t @@ -107,8 +107,8 @@ dirserv_add_descriptor(routerinfo_t *ri, const char *source) { (void)ri; - (void)msg; (void)source; + *msg = "No directory authority support"; return (enum was_router_added_t)0; } static inline int @@ -125,9 +125,9 @@ authdir_wants_to_reject_router(routerinfo_t *ri, const char **msg, int *valid_out) { (void)ri; - (void)msg; (void)complain; - (void)valid_out; + *msg = "No directory authority support"; + *valid_out = 0; return 0; } static inline int @@ -143,8 +143,9 @@ dirserv_router_get_status(const routerinfo_t *router, int severity) { (void)router; - (void)msg; (void)severity; + if (msg) + *msg = "No directory authority support"; return 0; } static inline void diff --git a/src/feature/relay/relay_config.c b/src/feature/relay/relay_config.c index c8b40ae05..3e9961f47 100644 --- a/src/feature/relay/relay_config.c +++ b/src/feature/relay/relay_config.c @@ -231,8 +231,8 @@ check_server_ports(const smartlist_t *ports, } /** Parse all relay ports from options. On success, add parsed ports to - * ports, and return 0. On failure, set *msg to a description - * of the problem and return -1. + * ports, and return 0. On failure, set *msg to a newly + * allocated string describing the problem, and return -1. **/ int port_parse_ports_relay(or_options_t *options, @@ -334,7 +334,8 @@ port_update_port_set_relay(or_options_t *options, * Legacy validation function, which checks that the current OS is usable in * relay mode, if options is set to a relay mode. * - * Warns about OSes with potential issues. Always returns 0. + * Warns about OSes with potential issues. Does not set *msg. + * Always returns 0. */ int options_validate_relay_os(const or_options_t *old_options,

1 0

[tor/master] relay/dirauth: Set some output arguments in stubs
by nickm＠torproject.org 20 Mar '20

20 Mar '20

commit d4a74021e5ab9dbaf3bb27c0a52e1fd7f8f792ab Author: teor <teor(a)torproject.org> Date: Fri Mar 20 17:01:06 2020 +1000 relay/dirauth: Set some output arguments in stubs And document how some functions set their output arguments. Fixes bug 33674; bugfix on 0.4.3.1-alpha. --- changes/bug33674 | 4 ++++ src/feature/dirauth/dirauth_config.h | 10 ++++++++-- src/feature/dirauth/dirvote.c | 24 ++++++++++++++++++++---- src/feature/dirauth/dirvote.h | 2 +- src/feature/dirauth/process_descs.c | 8 +++++--- src/feature/dirauth/process_descs.h | 11 ++++++----- src/feature/relay/relay_config.c | 7 ++++--- 7 files changed, 48 insertions(+), 18 deletions(-) diff --git a/changes/bug33674 b/changes/bug33674 new file mode 100644 index 000000000..bcc3fcab0 --- /dev/null +++ b/changes/bug33674 @@ -0,0 +1,4 @@ + o Minor bugfixes (--disable-module-relay,--disable-module-dirauth): + - Set some output arguments in the relay and dirauth module stubs, to + guard against future stub argument handling bugs like 33668. + Fixes bug 33674; bugfix on 0.4.3.1-alpha. diff --git a/src/feature/dirauth/dirauth_config.h b/src/feature/dirauth/dirauth_config.h index ede1207a8..9042ff877 100644 --- a/src/feature/dirauth/dirauth_config.h +++ b/src/feature/dirauth/dirauth_config.h @@ -75,8 +75,14 @@ options_validate_dirauth_mode(const struct or_options_t *old_options, #define options_act_dirauth_mtbf(old_options) \ (((void)(old_options)),0) -#define options_act_dirauth_stats(old_options, print_notice_out) \ - (((void)(old_options)),((void)(print_notice_out)),0) +static inline int +options_act_dirauth_stats(const struct or_options_t *old_options, + bool *print_notice_out) +{ + (void)old_options; + *print_notice_out = 0; + return 0; +} #define dirauth_should_reject_requests_under_load() (false) diff --git a/src/feature/dirauth/dirvote.c b/src/feature/dirauth/dirvote.c index 9490867e8..e230815ca 100644 --- a/src/feature/dirauth/dirvote.c +++ b/src/feature/dirauth/dirvote.c @@ -2527,9 +2527,12 @@ compute_consensus_package_lines(smartlist_t *votes) * any new signatures in src_voter_list that should be added to * target. (A signature should be added if we have no signature for that * voter in target yet, or if we have no verifiable signature and the - * new signature is verifiable.) Return the number of signatures added or - * changed, or -1 if the document signed by sigs isn't the same - * document as target. */ + * new signature is verifiable.) + * + * Return the number of signatures added or changed, or -1 if the document + * signatures are invalid. Sets *msg_out to a string constant + * describing the signature status. + */ STATIC int networkstatus_add_detached_signatures(networkstatus_t *target, ns_detached_signatures_t *sigs, @@ -3564,6 +3567,14 @@ dirvote_add_signatures_to_pending_consensus( return r; } +/** Helper: we just got the detached_signatures_body sent to us as + * signatures on the currently pending consensus. Add them to the pending + * consensus (if we have one). + * + * Set *msg to a string constant describing the status, regardless of + * success or failure. + * + * Return negative on failure, nonnegative on success. */ static int dirvote_add_signatures_to_all_pending_consensuses( const char *detached_signatures_body, @@ -3626,7 +3637,12 @@ dirvote_add_signatures_to_all_pending_consensuses( /** Helper: we just got the detached_signatures_body sent to us as * signatures on the currently pending consensus. Add them to the pending * consensus (if we have one); otherwise queue them until we have a - * consensus. Return negative on failure, nonnegative on success. */ + * consensus. + * + * Set *msg to a string constant describing the status, regardless of + * success or failure. + * + * Return negative on failure, nonnegative on success. */ int dirvote_add_signatures(const char *detached_signatures_body, const char *source, diff --git a/src/feature/dirauth/dirvote.h b/src/feature/dirauth/dirvote.h index f695e93ab..675f4ee14 100644 --- a/src/feature/dirauth/dirvote.h +++ b/src/feature/dirauth/dirvote.h @@ -162,7 +162,7 @@ dirvote_add_signatures(const char *detached_signatures_body, { (void) detached_signatures_body; (void) source; - (void) msg_out; + *msg_out = "No directory authority support"; /* If the dirauth module is disabled, this should NEVER be called else we * failed to safeguard the dirauth module. */ tor_assert_nonfatal_unreached(); diff --git a/src/feature/dirauth/process_descs.c b/src/feature/dirauth/process_descs.c index 5c918ca0b..5025d0ae3 100644 --- a/src/feature/dirauth/process_descs.c +++ b/src/feature/dirauth/process_descs.c @@ -285,7 +285,7 @@ dirserv_load_fingerprint_file(void) * Return the appropriate router status. * * If the status is 'RTR_REJECT' and msg is provided, set - * *msg to an explanation of why. */ + * *msg to a string constant explaining why. */ uint32_t dirserv_router_get_status(const routerinfo_t *router, const char **msg, int severity) @@ -563,7 +563,8 @@ dirserv_router_has_valid_address(routerinfo_t *ri) /** Check whether we, as a directory server, want to accept ri. If so, * set its is_valid,running fields and return 0. Otherwise, return -1. * - * If the router is rejected, set *msg to an explanation of why. + * If the router is rejected, set *msg to a string constant explining + * why. * * If complain then explain at log-level 'notice' why we refused * a descriptor; else explain at log-level 'info'. @@ -729,7 +730,8 @@ dirserv_add_multiple_descriptors(const char *desc, size_t desclen, * That means the caller must not access ri after this function * returns, since it might have been freed. * - * Return the status of the operation. + * Return the status of the operation, and set *msg to a string + * constant describing the status. * * This function is only called when fresh descriptors are posted, not when * we re-load the cache. diff --git a/src/feature/dirauth/process_descs.h b/src/feature/dirauth/process_descs.h index 9c1369277..1461ab697 100644 --- a/src/feature/dirauth/process_descs.h +++ b/src/feature/dirauth/process_descs.h @@ -98,7 +98,7 @@ dirserv_add_multiple_descriptors(const char *desc, size_t desclen, (void)desclen; (void)purpose; (void)source; - (void)msg; + *msg = "No directory authority support"; return (enum was_router_added_t)0; } static inline enum was_router_added_t @@ -107,8 +107,8 @@ dirserv_add_descriptor(routerinfo_t *ri, const char *source) { (void)ri; - (void)msg; (void)source; + *msg = "No directory authority support"; return (enum was_router_added_t)0; } static inline int @@ -125,9 +125,9 @@ authdir_wants_to_reject_router(routerinfo_t *ri, const char **msg, int *valid_out) { (void)ri; - (void)msg; (void)complain; - (void)valid_out; + *msg = "No directory authority support"; + *valid_out = 0; return 0; } static inline int @@ -143,8 +143,9 @@ dirserv_router_get_status(const routerinfo_t *router, int severity) { (void)router; - (void)msg; (void)severity; + if (msg) + *msg = "No directory authority support"; return 0; } static inline void diff --git a/src/feature/relay/relay_config.c b/src/feature/relay/relay_config.c index c8b40ae05..3e9961f47 100644 --- a/src/feature/relay/relay_config.c +++ b/src/feature/relay/relay_config.c @@ -231,8 +231,8 @@ check_server_ports(const smartlist_t *ports, } /** Parse all relay ports from options. On success, add parsed ports to - * ports, and return 0. On failure, set *msg to a description - * of the problem and return -1. + * ports, and return 0. On failure, set *msg to a newly + * allocated string describing the problem, and return -1. **/ int port_parse_ports_relay(or_options_t *options, @@ -334,7 +334,8 @@ port_update_port_set_relay(or_options_t *options, * Legacy validation function, which checks that the current OS is usable in * relay mode, if options is set to a relay mode. * - * Warns about OSes with potential issues. Always returns 0. + * Warns about OSes with potential issues. Does not set *msg. + * Always returns 0. */ int options_validate_relay_os(const or_options_t *old_options,

1 0