March 2023 - tor-commits - lists.torproject.org

Tor-Weather : Verify your email address
by weather＠torproject.org 01 Apr '23

01 Apr '23

Hi, Welcome to the Tor-Weather Service. Congratulations, you have successfully completed your registration. We just need to verify your email to finish account registration. https://weather.torproject.org/api/verify?code=gAAAAABkJzygYYRCOrYmRniHyIU5… Thank You!

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.9.0esr-12.5-1] fixup! Bug 23247: Communicating security expectations for .onion
by Pier Angelo Vendrame (＠pierov) 31 Mar '23

31 Mar '23

Pier Angelo Vendrame pushed to branch tor-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 31088582 by cypherpunks1 at 2023-03-31T09:49:11-08:00 fixup! Bug 23247: Communicating security expectations for .onion Bug 41533: Fix onion detection on the page info window - - - - - 1 changed file: - browser/base/content/pageinfo/security.js Changes: ===================================== browser/base/content/pageinfo/security.js ===================================== @@ -66,7 +66,12 @@ var security = { Ci.nsIWebProgressListener.STATE_LOADED_MIXED_DISPLAY_CONTENT); var isEV = ui.state & Ci.nsIWebProgressListener.STATE_IDENTITY_EV_TOPLEVEL; var isOnion = false; - const hostName = this.windowInfo.hostName; + let hostName; + try { + hostName = Services.eTLD.getBaseDomain(this.uri); + } catch (e) { + hostName = this.windowInfo.hostName; + } if (hostName && hostName.endsWith(".onion")) { isOnion = true; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3108858… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3108858… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[pluggable-transports/snowflake-webext] branch main updated: Decrease image padding on mobile in index.css
by gitolite role 31 Mar '23

31 Mar '23

This is an automated email from the git hooks/post-receive script. cohosh pushed a commit to branch main in repository pluggable-transports/snowflake-webext. The following commit(s) were added to refs/heads/main by this push: new f030b85 Decrease image padding on mobile in index.css f030b85 is described below commit f030b85b57212cae447d2d81e28bc751a0977f84 Author: devilkiller-ag <ashmitgupta.official(a)gmail.com> AuthorDate: Mon Mar 6 18:46:38 2023 +0000 Decrease image padding on mobile in index.css --- static/index.css | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/static/index.css b/static/index.css index b23e1ad..06553c4 100644 --- a/static/index.css +++ b/static/index.css @@ -74,6 +74,12 @@ h2 { text-align: center; } +@media only screen and (max-width: 600px) { + .diagram, .screenshot { + padding: 1rem 1rem; + } +} + .diagram img, .screenshot img { max-width: 100%; } -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.9.0esr-12.5-1] fixup! Bug 10760: Integrate TorButton to TorBrowser core
by Pier Angelo Vendrame (＠pierov) 31 Mar '23

31 Mar '23

Pier Angelo Vendrame pushed to branch tor-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 50201d24 by Pier Angelo Vendrame at 2023-03-31T17:43:49+02:00 fixup! Bug 10760: Integrate TorButton to TorBrowser core Bug 40501: High CPU load after tor exits unexpectedly When a peers (tor) disconnects, Firefox seems to keep the stream open, and return 0 on available, rather than throwing. So, as a matter of fact, we had a while trying to read 0 bytes without any pause in _readLine, hence the 100% CPU usage. - - - - - 1 changed file: - toolkit/torbutton/modules/tor-control-port.js Changes: ===================================== toolkit/torbutton/modules/tor-control-port.js ===================================== @@ -135,6 +135,18 @@ class AsyncSocket { this.inputQueue.push({ onInputStreamReady: stream => { try { + if (!this.scriptableInputStream.available()) { + // This means EOF, but not closed yet. However, arriving at EOF + // should be an error condition for us, since we are in a socket, + // and EOF should mean peer disconnected. + // If the stream has been closed, this function itself should + // throw. + reject( + new Error("onInputStreamReady called without available bytes.") + ); + return; + } + // read our string from input stream let str = this.scriptableInputStream.read( this.scriptableInputStream.available() View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/50201d2… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/50201d2… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[pluggable-transports/snowflake-webext] branch main updated: Fix unclosed `<a>` in website
by gitolite role 31 Mar '23

31 Mar '23

This is an automated email from the git hooks/post-receive script. cohosh pushed a commit to branch main in repository pluggable-transports/snowflake-webext. The following commit(s) were added to refs/heads/main by this push: new 141e5ff Fix unclosed `<a>` in website 141e5ff is described below commit 141e5ff526704764a3973de2b41a1806047cac0c Author: WofWca <wofwca(a)protonmail.com> AuthorDate: Thu Jan 5 11:59:36 2023 +0000 Fix unclosed `<a>` in website --- static/_locales/en_US/website.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/static/_locales/en_US/website.json b/static/_locales/en_US/website.json index 60eeebb..ec7c40b 100644 --- a/static/_locales/en_US/website.json +++ b/static/_locales/en_US/website.json @@ -72,7 +72,7 @@ "message": "Please try to be as descriptive as possible with your ticket and if possible include log messages that will help us reproduce the bug." }, "contactSnowflakeDevs": { - "message": "If you're interested in making use of Snowflake inside your application, get in touch with <a href=\"https://lists.torproject.org/cgi-bin/mailman/listinfo/anti-censorship-team\">anti-censorship team." + "message": "If you're interested in making use of Snowflake inside your application, get in touch with <a href=\"https://lists.torproject.org/cgi-bin/mailman/listinfo/anti-censorship-team\">anti-censorship team</a>." }, "howSnowflakeWorks": { "message":"Learn more about how Snowflake works" -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[pluggable-transports/snowflake-webext] branch main updated (995a427 -> 8587222)
by gitolite role 31 Mar '23

31 Mar '23

This is an automated email from the git hooks/post-receive script. cohosh pushed a change to branch main in repository pluggable-transports/snowflake-webext. from 995a427 Add Microsoft Edge px-Edge_logo new 840ab41 Factor WS.makeWebsocketURL out of WS.makeWebsocket. new 1684bac Add a test for WS.makeWebsocketURL. new dcc24df Make WS.makeWebsocketURL properly attach params. new 9e14a21 Simplify WS.makeWebsocket to take just a client_ip. new 438abed Use "WebSocket" capitalization in WS interfaces. new 8587222 Remove an obsolete comment. The 6 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: init-badge.js | 2 +- init-webext.js | 2 +- proxypair.js | 12 ++---------- spec/websocket.spec.js | 25 +++++++++++++++++++++++++ websocket.js | 36 +++++++++++++++++++++++------------- 5 files changed, 52 insertions(+), 25 deletions(-) create mode 100644 spec/websocket.spec.js -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 6

[Git][tpo/applications/tor-browser-build][maint-12.0] Bug 40835: Download jessie faketime packages from http://archive.debian.org
by boklm (＠boklm) 30 Mar '23

30 Mar '23

boklm pushed to branch maint-12.0 at The Tor Project / Applications / tor-browser-build Commits: 1afcf429 by Nicolas Vigier at 2023-03-30T14:07:24+02:00 Bug 40835: Download jessie faketime packages from http://archive.debian.org - - - - - 1 changed file: - projects/container-image/config Changes: ===================================== projects/container-image/config ===================================== @@ -87,9 +87,9 @@ input_files: - project: mmdebstrap-image target: - '[% c("var/container/suite") %]-[% c("var/container/arch") %]' - - URL: http://deb.debian.org/debian/pool/main/f/faketime/faketime_0.9.6-3_amd64.deb + - URL: http://archive.debian.org/debian/pool/main/f/faketime/faketime_0.9.6-3_amd6… sha256sum: 19b2a01a2fae7e6d5a8b741fc0bc626451cb4c2cc884ee79f1136dd3c2c26213 enable: '[% c("var/container/suite") == "jessie" %]' - - URL: http://deb.debian.org/debian/pool/main/f/faketime/libfaketime_0.9.6-3_amd64… + - URL: http://archive.debian.org/debian/pool/main/f/faketime/libfaketime_0.9.6-3_a… sha256sum: 82747d5815b226cfed7f6f9a751bf8c20d457f3ba786add6017d6904dea4fdb4 enable: '[% c("var/container/suite") == "jessie" %]' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40835: Download jessie faketime packages from http://archive.debian.org
by boklm (＠boklm) 30 Mar '23

30 Mar '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: a9039721 by Nicolas Vigier at 2023-03-30T13:52:40+02:00 Bug 40835: Download jessie faketime packages from http://archive.debian.org - - - - - 1 changed file: - projects/container-image/config Changes: ===================================== projects/container-image/config ===================================== @@ -87,9 +87,9 @@ input_files: - project: mmdebstrap-image target: - '[% c("var/container/suite") %]-[% c("var/container/arch") %]' - - URL: http://deb.debian.org/debian/pool/main/f/faketime/faketime_0.9.6-3_amd64.deb + - URL: http://archive.debian.org/debian/pool/main/f/faketime/faketime_0.9.6-3_amd6… sha256sum: 19b2a01a2fae7e6d5a8b741fc0bc626451cb4c2cc884ee79f1136dd3c2c26213 enable: '[% c("var/container/suite") == "jessie" %]' - - URL: http://deb.debian.org/debian/pool/main/f/faketime/libfaketime_0.9.6-3_amd64… + - URL: http://archive.debian.org/debian/pool/main/f/faketime/libfaketime_0.9.6-3_a… sha256sum: 82747d5815b226cfed7f6f9a751bf8c20d457f3ba786add6017d6904dea4fdb4 enable: '[% c("var/container/suite") == "jessie" %]' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.0] Bug 40822: --disable-reloc-section on NSIS stubs.
by Pier Angelo Vendrame (＠pierov) 30 Mar '23

30 Mar '23

Pier Angelo Vendrame pushed to branch maint-12.0 at The Tor Project / Applications / tor-browser-build Commits: 1044b8c7 by Pier Angelo Vendrame at 2023-03-30T09:30:10+02:00 Bug 40822: --disable-reloc-section on NSIS stubs. Out binutils version adds the reloc sections by default, but NSIS does not work with them. So, we need to pass a flag to disable them, otherwise users with mandatory ASLR turned on will not be able to install Tor Browser. - - - - - 3 changed files: - projects/nsis/build - projects/nsis/config - + projects/nsis/no-reloc-section.diff Changes: ===================================== projects/nsis/build ===================================== @@ -13,6 +13,12 @@ cd /var/tmp/build/nsis-[% c('version') %]-src # only valid for the Windows linker. Therefore we add it using a patch # to the cross-compilation part only. Still needed as of 3.06.1, see: #40090. patch -p1 < $rootdir/no-insert-timestamp.patch +# tor-browser-build#40822: NSIS adds a flag to tell it supports ASLR, but it +# does so only to pass MS certifications. According to the NSIS forums, they +# intended not to ship the .reloc to save space. But, according to the bug +# tracker, binutils 2.36 started adding a .reloc section by default, and we need +# to disable it with this patch. +patch -p1 < $rootdir/no-reloc-section.diff [% IF c("var/windows-x86_64") %] # Seems like setting TARGET_ARCH is not enough so we need to patch build.cpp ===================================== projects/nsis/config ===================================== @@ -24,6 +24,7 @@ input_files: URL: 'https://downloads.sourceforge.net/nsis/nsis-[% c("version") %]-src.tar.bz2' sha256sum: a85270ad5386182abecb2470e3d7e9bec9fe4efd95210b13551cb386830d1e87 - filename: no-insert-timestamp.patch + - filename: no-reloc-section.diff - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' - name: zlib ===================================== projects/nsis/no-reloc-section.diff ===================================== @@ -0,0 +1,14 @@ +diff -Naur nsis-3.08-orig/SCons/Config/gnu nsis-3.08-src/SCons/Config/gnu +--- nsis-3.08-orig/SCons/Config/gnu 2023-03-23 09:22:46.315471779 +0100 ++++ nsis-3.08-src/SCons/Config/gnu 2023-03-23 09:24:05.260933879 +0100 +@@ -103,6 +103,10 @@ + stub_env.Append(LINKFLAGS = ['$ALIGN_FLAG']) # 512 bytes align + stub_env.Append(LINKFLAGS = ['$MAP_FLAG']) # generate map file + ++# https://sourceforge.net/p/nsis/bugs/1283/?limit=25#e303, ++# https://sourceforge.net/p/nsis/bugs/1283/?limit=25#e303/e90f ++stub_env.Append(LINKFLAGS = ['-Wl,--disable-reloc-section']) ++ + conf = FlagsConfigure(stub_env) + conf.CheckCompileFlag('-fno-tree-loop-distribute-patterns') # GCC 10: Don't generate msvcrt!memmove calls (bug #1248) + conf.Finish() View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.9.0esr-12.5-1] fixup! Bug 31740: Remove some unnecessary RemoteSettings instances
by Pier Angelo Vendrame (＠pierov) 29 Mar '23

29 Mar '23

Pier Angelo Vendrame pushed to branch base-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 9bdd279c by Pier Angelo Vendrame at 2023-03-29T20:21:32+02:00 fixup! Bug 31740: Remove some unnecessary RemoteSettings instances Bug 41704: Immediately return on remoteSettings.pollChanges - - - - - 2 changed files: - services/settings/remote-settings.js - services/settings/servicesSettings.manifest Changes: ===================================== services/settings/remote-settings.js ===================================== @@ -200,12 +200,17 @@ function remoteSettingsFunction() { full = false, } = {}) => { // When running in full mode, we ignore last polling status. - if (full) { + if (full || AppConstants.BASE_BROWSER_VERSION) { gPrefs.clearUserPref(PREF_SETTINGS_SERVER_BACKOFF); gPrefs.clearUserPref(PREF_SETTINGS_LAST_UPDATE); gPrefs.clearUserPref(PREF_SETTINGS_LAST_ETAG); } + if (AppConstants.BASE_BROWSER_VERSION) { + // tor-browser#41704: pollChanges is always online, so do not allow it. + return; + } + let pollTelemetryArgs = { source: TELEMETRY_SOURCE_POLL, trigger, ===================================== services/settings/servicesSettings.manifest ===================================== @@ -4,4 +4,4 @@ resource services-settings resource://gre/modules/services-settings/ # Schedule polling of remote settings changes # (default 24H, max 72H) # see syntax https://searchfox.org/mozilla-central/rev/cc280c4be94ff8cf64a27cc9b3d6831ff… -category update-timer RemoteSettingsComponents @mozilla.org/services/settings;1,getService,services-settings-poll-changes,services.settings.poll_interval,86400,259200 +# category update-timer RemoteSettingsComponents @mozilla.org/services/settings;1,getService,services-settings-poll-changes,services.settings.poll_interval,86400,259200 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/9bdd279… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/9bdd279… You're receiving this email because of your account on gitlab.torproject.org.

1 0