June 2021 - tor-commits - lists.torproject.org

[tor/release-0.4.6] Merge branch 'maint-0.3.5' into maint-0.4.4
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit 253b83b72223f67024ea10b4008610dd18396811 Merge: 0ae9fd62fd 87492154e0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 14 11:46:20 2021 -0400 Merge branch 'maint-0.3.5' into maint-0.4.4 "ours" to avoid version bump.

1 0

[tor/release-0.4.6] Bump to 0.4.5.9-dev
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit 9085508310ab06c2b7ed0650e77dbe86023095f3 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 14 11:47:41 2021 -0400 Bump to 0.4.5.9-dev --- configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/configure.ac b/configure.ac index df721512fc..460154da90 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.4.5.9]) +AC_INIT([tor],[0.4.5.9-dev]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) @@ -16,7 +16,7 @@ configure_flags="$*" # version number changes. Tor uses it to make sure that it # only shuts down for missing "required protocols" when those protocols # are listed as required by a consensus after this date. -AC_DEFINE(APPROX_RELEASE_DATE, ["2021-06-07"], # for 0.4.5.9 +AC_DEFINE(APPROX_RELEASE_DATE, ["2021-06-14"], # for 0.4.5.9-dev [Approximate date when this software was released. (Updated when the version changes.)]) # "foreign" means we don't follow GNU package layout standards diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 966057bab1..7e7f0fdd19 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.4.5.9" +!define VERSION "0.4.5.9-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 58943025d7..ffe7c65ba4 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -217,7 +217,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.4.5.9" +#define VERSION "0.4.5.9-dev" #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.5' into maint-0.4.6
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit e04e545173028aa6c16a55388e2057dbb6f5aa1f Merge: 8e590992c4 9085508310 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 14 11:47:54 2021 -0400 Merge branch 'maint-0.4.5' into maint-0.4.6 "Ours" to avoid version bump.

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.6' into release-0.4.6
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit e18bf39e66eef181be5fa054d6a1bf806242fde6 Merge: 62a500dd1d 91aec8dbc1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 14 11:49:01 2021 -0400 Merge branch 'maint-0.4.6' into release-0.4.6 configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-)

1 0

[tor/release-0.4.6] Bump to 0.4.6.5-dev
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit 91aec8dbc158a60ee3a521d20eae1d0d71adbbaa Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 14 11:48:30 2021 -0400 Bump to 0.4.6.5-dev --- configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/configure.ac b/configure.ac index 016b6664b8..dff93a1fa3 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.4.6.5]) +AC_INIT([tor],[0.4.6.5-dev]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) @@ -18,7 +18,7 @@ AC_DEFINE_UNQUOTED([CONFIG_FLAGS], ["$configure_flags"], [Flags passed to config # version number changes. Tor uses it to make sure that it # only shuts down for missing "required protocols" when those protocols # are listed as required by a consensus after this date. -AC_DEFINE(APPROX_RELEASE_DATE, ["2021-06-07"], # for 0.4.6.5 +AC_DEFINE(APPROX_RELEASE_DATE, ["2021-06-14"], # for 0.4.6.5-dev [Approximate date when this software was released. (Updated when the version changes.)]) # "foreign" means we don't follow GNU package layout standards diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 062333eb9c..6d9a9d6cc6 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.4.6.5" +!define VERSION "0.4.6.5-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 8443e04c38..3929b91763 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -217,7 +217,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.4.6.5" +#define VERSION "0.4.6.5-dev" #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR

1 0

[tpo/master] 0.4.6.5 is latest stable.
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit 4ba571fac7cf1f48a6703290286924223517c9c2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 14 11:07:11 2021 -0400 0.4.6.5 is latest stable. --- databags/versions.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/databags/versions.ini b/databags/versions.ini index b3818366..af968b82 100644 --- a/databags/versions.ini +++ b/databags/versions.ini @@ -21,7 +21,7 @@ version = 10.5a16 version = 10.5a16 [tor-stable] -version = 0.4.5.8 +version = 0.4.6.5 [tor-alpha] version = 0.4.6.4-rc

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.4' into maint-0.4.5
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit d60f8fe98a59ce13809e65de67e53b3dcf6199f0 Merge: c80b98520b 57a41348ee Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 10 08:21:48 2021 -0400 Merge branch 'maint-0.4.4' into maint-0.4.5 changes/geoip-2021-06-10 | 3 + src/config/geoip | 4764 +++++++++++++++++++++++++++------------------- src/config/geoip6 | 2826 ++++++++++++++++----------- 3 files changed, 4536 insertions(+), 3057 deletions(-)

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.6' into release-0.4.6
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit 9e5e584cb62021e347f2dc106f239906d2aa3ad2 Merge: 009b5778b2 cb38219664 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 10 08:21:48 2021 -0400 Merge branch 'maint-0.4.6' into release-0.4.6 changes/geoip-2021-06-10 | 3 + src/config/geoip | 4764 +++++++++++++++++++++++++++------------------- src/config/geoip6 | 2826 ++++++++++++++++----------- 3 files changed, 4536 insertions(+), 3057 deletions(-)

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.5' into maint-0.4.6
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit cb3821966430abc51d81cb01bd32fc956f0c8125 Merge: b3fe9d5162 d60f8fe98a Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 10 08:21:48 2021 -0400 Merge branch 'maint-0.4.5' into maint-0.4.6 changes/geoip-2021-06-10 | 3 + src/config/geoip | 4764 +++++++++++++++++++++++++++------------------- src/config/geoip6 | 2826 ++++++++++++++++----------- 3 files changed, 4536 insertions(+), 3057 deletions(-)

1 0

[tor/release-0.4.6] Use a more secure hash function for the circuitmux hashtable.
by nickm＠torproject.org 14 Jun '21

14 Jun '21

commit 4c06c619faceb5d158a725d97fda45cadb2cf9c9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue May 18 08:40:09 2021 -0400 Use a more secure hash function for the circuitmux hashtable. Fixes bug 40931; bugfix on 0.2.4.4-alpha. Also tracked as TROVE-2021-005. This issue was reported by Jann Horn from Google's Project Zero. --- changes/bug40391 | 9 +++++++++ src/core/or/circuitmux.c | 8 ++++---- 2 files changed, 13 insertions(+), 4 deletions(-) diff --git a/changes/bug40391 b/changes/bug40391 new file mode 100644 index 0000000000..e3c186275f --- /dev/null +++ b/changes/bug40391 @@ -0,0 +1,9 @@ + o Major bugfixes (security): + - Resist a hashtable-based CPU denial-of-service attack against + relays. Previously we used a naive unkeyed hash function to look up + circuits in a circuitmux object. An attacker could exploit this to + construct circuits with chosen circuit IDs in order to try to create + collisions and make the hash table inefficient. Now we use a SipHash + construction for this hash table instead. Fixes bug 40391; bugfix on + 0.2.4.4-alpha. This issue is also tracked as TROVE-2021-005. + Reported by Jann Horn from Google's Project Zero. diff --git a/src/core/or/circuitmux.c b/src/core/or/circuitmux.c index 88f9ac7923..e7309553c4 100644 --- a/src/core/or/circuitmux.c +++ b/src/core/or/circuitmux.c @@ -216,9 +216,10 @@ chanid_circid_entries_eq(chanid_circid_muxinfo_t *a, static inline unsigned int chanid_circid_entry_hash(chanid_circid_muxinfo_t *a) { - return (((unsigned int)(a->circ_id) << 8) ^ - ((unsigned int)((a->chan_id >> 32) & 0xffffffff)) ^ - ((unsigned int)(a->chan_id & 0xffffffff))); + uint8_t data[8 + 4]; + set_uint64(data, a->chan_id); + set_uint32(data + 8, a->circ_id); + return (unsigned) siphash24g(data, sizeof(data)); } /* Declare the struct chanid_circid_muxinfo_map type */ @@ -1361,4 +1362,3 @@ circuitmux_compare_muxes, (circuitmux_t *cmux_1, circuitmux_t *cmux_2)) return 0; } } -

1 0