- tor-commits - lists.torproject.org

[Git][tpo/applications/tor-browser] Pushed new branch base-browser-102.8.0esr-12.5-1
by Pier Angelo Vendrame (＠pierov) 08 Feb '23

08 Feb '23

Pier Angelo Vendrame pushed new branch base-browser-102.8.0esr-12.5-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/base-brow… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-102.8.0esr-12.5-1
by Pier Angelo Vendrame (＠pierov) 08 Feb '23

08 Feb '23

Pier Angelo Vendrame pushed new branch tor-browser-102.8.0esr-12.5-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag FIREFOX_102_8_0esr_BUILD1
by Pier Angelo Vendrame (＠pierov) 08 Feb '23

08 Feb '23

Pier Angelo Vendrame pushed new tag FIREFOX_102_8_0esr_BUILD1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/FIREFOX_1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-102.8.0esr-12.0-1
by Pier Angelo Vendrame (＠pierov) 08 Feb '23

08 Feb '23

Pier Angelo Vendrame pushed new branch tor-browser-102.8.0esr-12.0-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor] branch main updated: Fix small typo in mainloop.c docs.
by gitolite role 07 Feb '23

07 Feb '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new a9c7cd6b2c Fix small typo in mainloop.c docs. a9c7cd6b2c is described below commit a9c7cd6b2c08eed9bfd6dd3daa64a89083fd0b08 Author: Gabriela Moldovan <gabi(a)torproject.org> AuthorDate: Tue Feb 7 12:00:57 2023 +0000 Fix small typo in mainloop.c docs. The docs should reference `tor_event_new()` rather than `tor_libevent_new()`. Signed-off-by: Gabriela Moldovan <gabi(a)torproject.org> --- src/core/mainloop/mainloop.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/mainloop/mainloop.c b/src/core/mainloop/mainloop.c index 8e1b33e56e..a1ea32220a 100644 --- a/src/core/mainloop/mainloop.c +++ b/src/core/mainloop/mainloop.c @@ -21,7 +21,7 @@ * <li>signal_callback(), which handles incoming signals. * </ul> * Other events are used for specific purposes, or for building more complex - * control structures. If you search for usage of tor_libevent_new(), you + * control structures. If you search for usage of tor_event_new(), you * will find all the events that we construct in Tor. * * Tor has numerous housekeeping operations that need to happen -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.7.0esr-12.5-1] amend! Bug 8324: Prevent DNS proxy bypasses caused by Drag&Drop
by Richard Pospesel (＠richard) 07 Feb '23

07 Feb '23

Richard Pospesel pushed to branch tor-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 1ac8520e by hackademix at 2023-02-07T09:27:49+01:00 amend! Bug 8324: Prevent DNS proxy bypasses caused by Drag&Drop Bug 8324: Prevent DNS proxy bypasses caused by Drag&Drop Bug 41613: Skip Drang & Drop filtering for DNS-safe URLs - - - - - 1 changed file: - toolkit/torbutton/components/dragDropFilter.js Changes: ===================================== toolkit/torbutton/components/dragDropFilter.js ===================================== @@ -113,6 +113,25 @@ DragDropFilter.prototype = { for (let i = 0, count = aDataTransfer.mozItemCount; i < count; ++i) { this.logger.log(3, `Inspecting the data transfer: ${i}.`); const types = aDataTransfer.mozTypesAt(i); + const urlType = "text/x-moz-url"; + // Fallback url type, to be parsed by this browser but not externally + const INTERNAL_FALLBACK = "application/x-torbrowser-opaque"; + if (types.contains(urlType)) { + const links = aDataTransfer.mozGetDataAt(urlType, i); + // Skip DNS-safe URLs (no hostname, e.g. RFC 3966 tel:) + const mayLeakDNS = links.split("\n").some(link => { + try { + return new URL(link).hostname; + } catch (e) { + return false; + } + }); + if (!mayLeakDNS) { + continue; + } + const opaqueKey = OpaqueDrag.store(links, urlType); + aDataTransfer.mozSetDataAt(INTERNAL_FALLBACK, opaqueKey, i); + } for (const type of types) { this.logger.log(3, `Type is: ${type}.`); if (URLISH_TYPES.includes(type)) { @@ -120,14 +139,6 @@ DragDropFilter.prototype = { 3, `Removing transfer data ${aDataTransfer.mozGetDataAt(type, i)}` ); - const urlType = "text/x-moz-url"; - // Fallback url type, to be parsed by this browser but not externally - const INTERNAL_FALLBACK = "application/x-torbrowser-opaque"; - if (types.contains(urlType)) { - const link = aDataTransfer.mozGetDataAt(urlType, i); - const opaqueKey = OpaqueDrag.store(link, urlType); - aDataTransfer.mozSetDataAt(INTERNAL_FALLBACK, opaqueKey, i); - } for (const type of types) { if ( type !== INTERNAL_FALLBACK && View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/1ac8520… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/1ac8520… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[torspec] branch main updated (ca400dc -> 103c772)
by gitolite role 06 Feb '23

06 Feb '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository torspec. from ca400dc rend-spec: Document how the cross-certificates (don't) work. new c6d10a9 prop340: Move stream_id to body becoming a per command value new 0fc6d07 More verbage in prop340 about the stream_id transition. new 103c772 Merge branch 'tor-gitlab/mr/102' The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: proposals/340-packed-and-fragmented.md | 61 ++++++++++++++++++++++++++++------ 1 file changed, 51 insertions(+), 10 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 3

[tor] branch main updated: Fix typos
by gitolite role 06 Feb '23

06 Feb '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new c1b940cebf Fix typos c1b940cebf is described below commit c1b940cebf110d5a05960d930ce55c0a782e9c8f Author: Dimitris Apostolou <dimitris.apostolou(a)icloud.com> AuthorDate: Sun Feb 5 00:36:37 2023 +0200 Fix typos --- src/feature/relay/onion_queue.c | 2 +- src/lib/math/prob_distr.c | 2 +- src/lib/math/stats.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/src/feature/relay/onion_queue.c b/src/feature/relay/onion_queue.c index b844aefcd1..f3f4b169f4 100644 --- a/src/feature/relay/onion_queue.c +++ b/src/feature/relay/onion_queue.c @@ -115,7 +115,7 @@ get_onion_queue_max_delay(const or_options_t *options) /** * We combine ntorv3 and ntor into the same queue, so we must - * use this function to covert the cell type to a queue index. + * use this function to convert the cell type to a queue index. */ static inline uint16_t onionskin_type_to_queue(uint16_t type) diff --git a/src/lib/math/prob_distr.c b/src/lib/math/prob_distr.c index a57fc1020c..9e60b9f37a 100644 --- a/src/lib/math/prob_distr.c +++ b/src/lib/math/prob_distr.c @@ -54,7 +54,7 @@ #ifndef COCCI /** Declare a function that downcasts from a generic dist struct to the actual - * subtype probablity distribution it represents. */ + * subtype probability distribution it represents. */ #define DECLARE_PROB_DISTR_DOWNCAST_FN(name) \ static inline \ const struct name##_t * \ diff --git a/src/lib/math/stats.h b/src/lib/math/stats.h index 14315a2506..7acc6fa43d 100644 --- a/src/lib/math/stats.h +++ b/src/lib/math/stats.h @@ -25,7 +25,7 @@ n_count_ewma_double(double avg, double value, uint64_t N) /* If the average was not previously computed, return value. * The less than is because we have stupid C warning flags that * prevent exact comparison to 0.0, so we can't do an exact - * check for unitialized double values. Yay pedantry! + * check for uninitialized double values. Yay pedantry! * Love it when it introduces surprising edge case bugs like * this will. */ if (avg < 0.0000002) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[depictor] branch master updated: Allow consensus increments of 30 minutes or 1 hour.
by gitolite role 03 Feb '23

03 Feb '23

This is an automated email from the git hooks/post-receive script. tom pushed a commit to branch master in repository depictor. The following commit(s) were added to refs/heads/master by this push: new 9f32b66 Allow consensus increments of 30 minutes or 1 hour. 9f32b66 is described below commit 9f32b66d6f875522efddd382a075495fad54bb69 Author: Tom Ritter <tom(a)ritter.vg> AuthorDate: Fri Feb 3 10:39:30 2023 -0500 Allow consensus increments of 30 minutes or 1 hour. This will get rid of tons of 'We seem to be missing...' messages that needlessly update the sqlite database. This _might_ also be the source of missing data, as it might have overwritten valid rows with potentially(?) empty ones --- write_website.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/write_website.py b/write_website.py index b496796..a4730f6 100755 --- a/write_website.py +++ b/write_website.py @@ -96,8 +96,9 @@ def main(): if previous == 0: pass else: - expected = ut_to_datetime(previous) + datetime.timedelta(hours=1) - if expected == ut_to_datetime(d): + expected_0 = ut_to_datetime(previous) + datetime.timedelta(hours=1) + expected_1 = ut_to_datetime(previous) + datetime.timedelta(minutes=30) + if ut_to_datetime(d) in [expected_0, expected_1]: pass else: print("We seem to be missing", consensus_datetime_format(expected)) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[Git][tpo/applications/fenix][tor-browser-102.2.1-12.0-2] Bug 40536: Wait until Tor is connected to process intents
by Richard Pospesel (＠richard) 02 Feb '23

02 Feb '23

Richard Pospesel pushed to branch tor-browser-102.2.1-12.0-2 at The Tor Project / Applications / fenix Commits: 25e5afc9 by Tommy Webb at 2023-02-02T23:24:52+00:00 Bug 40536: Wait until Tor is connected to process intents (cherry picked from commit 667092ef6caed0c7524e4cd717079bd159a556dd) - - - - - 2 changed files: - app/src/main/java/org/mozilla/fenix/HomeActivity.kt - app/src/main/java/org/mozilla/fenix/IntentReceiverActivity.kt Changes: ===================================== app/src/main/java/org/mozilla/fenix/HomeActivity.kt ===================================== @@ -129,6 +129,7 @@ import org.mozilla.fenix.tabstray.TabsTrayFragment import org.mozilla.fenix.tabstray.TabsTrayFragmentDirections import org.mozilla.fenix.theme.DefaultThemeManager import org.mozilla.fenix.theme.ThemeManager +import org.mozilla.fenix.tor.TorEvents import org.mozilla.fenix.trackingprotection.TrackingProtectionPanelDialogFragmentDirections import org.mozilla.fenix.utils.BrowsersCache import org.mozilla.fenix.utils.Settings @@ -533,6 +534,24 @@ open class HomeActivity : LocaleAwareAppCompatActivity(), NavHostActivity { * Handles intents received when the activity is open. */ final override fun onNewIntent(intent: Intent?) { + if (intent?.action == ACTION_MAIN || components.torController.isConnected) { + onNewIntentInternal(intent) + } else { + // Wait until Tor is connected to handle intents from external apps for links, search, etc. + components.torController.registerTorListener(object : TorEvents { + override fun onTorConnected() { + components.torController.unregisterTorListener(this) + onNewIntentInternal(intent) + } + override fun onTorConnecting() { /* no-op */ } + override fun onTorStopped() { /* no-op */ } + override fun onTorStatusUpdate(entry: String?, status: String?) { /* no-op */ } + }) + return + } + } + + private fun onNewIntentInternal(intent: Intent?) { super.onNewIntent(intent) intent?.let { handleNewIntent(it) @@ -1092,13 +1111,16 @@ open class HomeActivity : LocaleAwareAppCompatActivity(), NavHostActivity { /** * Indicates if the user should be redirected to the [BrowserFragment] or to the [HomeFragment], - * links from an external apps should always opened in the [BrowserFragment]. + * links from an external apps should always opened in the [BrowserFragment], + * unless Tor is not yet connected. */ fun shouldStartOnHome(intent: Intent? = this.intent): Boolean { return components.strictMode.resetAfter(StrictMode.allowThreadDiskReads()) { // We only want to open on home when users tap the app, - // we want to ignore other cases when the app gets open by users clicking on links. - getSettings().shouldStartOnHome() && intent?.action == ACTION_MAIN + // we want to ignore other cases when the app gets open by users clicking on links, + // unless Tor is not yet connected. + getSettings().shouldStartOnHome() && (intent?.action == ACTION_MAIN || + !components.torController.isConnected) } } ===================================== app/src/main/java/org/mozilla/fenix/IntentReceiverActivity.kt ===================================== @@ -6,6 +6,7 @@ package org.mozilla.fenix import android.app.Activity import android.content.Intent +import android.content.Intent.ACTION_MAIN import android.content.pm.PackageManager import android.os.Build import android.os.Bundle @@ -24,6 +25,7 @@ import org.mozilla.fenix.ext.settings import org.mozilla.fenix.perf.MarkersActivityLifecycleCallbacks import org.mozilla.fenix.perf.StartupTimeline import org.mozilla.fenix.shortcut.NewTabShortcutIntentProcessor +import org.mozilla.fenix.tor.TorEvents /** * Processes incoming intents and sends them to the corresponding activity. @@ -45,7 +47,23 @@ class IntentReceiverActivity : Activity() { // the HomeActivity. val intent = intent?.let { Intent(it) } ?: Intent() intent.sanitize().stripUnwantedFlags() - processIntent(intent) + if (intent.action == ACTION_MAIN || components.torController.isConnected) { + processIntent(intent) + } else { + // Wait until Tor is connected to handle intents from external apps for links, search, etc. + components.torController.registerTorListener(object : TorEvents { + override fun onTorConnected() { + components.torController.unregisterTorListener(this) + processIntent(intent) + } + override fun onTorConnecting() { /* no-op */ } + override fun onTorStopped() { /* no-op */ } + override fun onTorStatusUpdate(entry: String?, status: String?) { /* no-op */ } + }) + + // In the meantime, open the HomeActivity so the user can get connected. + processIntent(Intent()) + } components.core.engine.profiler?.addMarker( MarkersActivityLifecycleCallbacks.MARKER_NAME, startTimeProfiler, "IntentReceiverActivity.onCreate" View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/commit/25e5afc9e6e85… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/commit/25e5afc9e6e85… You're receiving this email because of your account on gitlab.torproject.org.

1 0