- tor-commits - lists.torproject.org

r24760: {projects} updated for 1.0.5.1 (small mods to layout and prefs) (projects/android/trunk/Orbot)
by Nathan Freitas 17 May '11

17 May '11

Author: n8fr8 Date: 2011-05-17 02:08:39 +0000 (Tue, 17 May 2011) New Revision: 24760 Modified: projects/android/trunk/Orbot/AndroidManifest.xml Log: updated for 1.0.5.1 (small mods to layout and prefs) Modified: projects/android/trunk/Orbot/AndroidManifest.xml =================================================================== --- projects/android/trunk/Orbot/AndroidManifest.xml 2011-05-17 02:03:07 UTC (rev 24759) +++ projects/android/trunk/Orbot/AndroidManifest.xml 2011-05-17 02:08:39 UTC (rev 24760) @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" - package="org.torproject.android" android:versionName="0.2.2.25-orbot-alpha-1.0.5" android:versionCode="11"> + package="org.torproject.android" android:versionName="0.2.2.25-orbot-alpha-1.0.5.1" android:versionCode="11"> <uses-permission android:name="android.permission.INTERNET" /> <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED"/>

1 0

r24759: {projects} tweaking layout for small screens (in projects/android/trunk/Orbot/res: layout layout-land)
by Nathan Freitas 17 May '11

17 May '11

Author: n8fr8 Date: 2011-05-17 02:03:07 +0000 (Tue, 17 May 2011) New Revision: 24759 Modified: projects/android/trunk/Orbot/res/layout-land/layout_main.xml projects/android/trunk/Orbot/res/layout/layout_main.xml Log: tweaking layout for small screens Modified: projects/android/trunk/Orbot/res/layout/layout_main.xml =================================================================== --- projects/android/trunk/Orbot/res/layout/layout_main.xml 2011-05-17 02:02:36 UTC (rev 24758) +++ projects/android/trunk/Orbot/res/layout/layout_main.xml 2011-05-17 02:03:07 UTC (rev 24759) @@ -12,11 +12,11 @@ android:layout_height="30dp" android:layout_gravity="center_horizontal" android:background="#A0909090"> - <ImageView android:id="@+id/radioModeImage" + <ImageView android:id="@+id/radioModeImage" android:layout_width="wrap_content" android:layout_height="wrap_content" - android:layout_marginTop="3dip" - android:layout_marginRight="3dip" + android:layout_marginTop="3px" + android:layout_marginRight="3px" android:gravity="right" android:layout_toRightOf="@+id/radioModeLabel" android:layout_alignParentRight="true" @@ -26,46 +26,32 @@ <TextView android:id="@+id/radioModeText" android:layout_width="wrap_content" android:layout_height="wrap_content" - android:text="@string/powered_by" - android:layout_marginTop="9px" + android:text="powered by The Tor Project " + android:layout_marginTop="8px" android:layout_marginRight="0px" android:gravity="right" android:layout_toLeftOf="@+id/radioModeImage" - android:textColor="#333333" /> + android:textColor="#cccccc" /> </RelativeLayout> - <TableLayout android:id="@+id/mainLayout" - android:layout_gravity="center" - android:layout_height="wrap_content" - android:layout_width="wrap_content"> - <TableRow android:id="@+id/startRow"> - <TableLayout - android:layout_gravity="center" - android:layout_height="wrap_content" - android:layout_width="wrap_content"> - <TableRow> - <ImageView - android:id="@+id/imgStatus" - android:layout_marginTop="30dip" - android:layout_width="wrap_content" - android:layout_height="wrap_content" - android:src="@drawable/toroff"/> - </TableRow> - <TableRow> - <TextView android:id="@+id/lblStatus" - android:text="@string/press_to_start" - android:layout_gravity="center_horizontal" - android:gravity="center_horizontal" - android:textStyle="bold" - android:layout_width="fill_parent" - android:layout_height="75px" - android:textColor="#ffffff" - /> - </TableRow> - </TableLayout> - </TableRow> - - </TableLayout> + <ImageView + android:id="@+id/imgStatus" + android:layout_margin="5dip" + android:layout_width="320dip" + android:layout_height="320dip" + android:src="@drawable/toroff" + android:layout_gravity="center_horizontal" + /> + + <TextView android:id="@+id/lblStatus" + android:text="@string/press_to_start" + android:layout_gravity="center_horizontal" + android:textStyle="bold" + android:layout_width="wrap_content" + android:layout_height="30dip" + android:textColor="#ffffff" + /> + Modified: projects/android/trunk/Orbot/res/layout-land/layout_main.xml =================================================================== --- projects/android/trunk/Orbot/res/layout-land/layout_main.xml 2011-05-17 02:02:36 UTC (rev 24758) +++ projects/android/trunk/Orbot/res/layout-land/layout_main.xml 2011-05-17 02:03:07 UTC (rev 24759) @@ -31,46 +31,26 @@ android:layout_toLeftOf="@+id/radioModeImage" android:textColor="#cccccc" /> </RelativeLayout> - - <ScrollView android:id="@+id/mainview" - android:orientation="vertical" - android:layout_width="fill_parent" - android:layout_height="fill_parent"> - <TableLayout android:id="@+id/mainLayout" - android:layout_gravity="center" - android:layout_height="wrap_content" - android:layout_width="wrap_content"> - <TableRow android:id="@+id/startRow"> - <TableLayout - android:layout_gravity="center" - android:layout_height="wrap_content" - android:layout_width="wrap_content"> - <TableRow> - <ImageView - android:id="@+id/imgStatus" - android:layout_width="wrap_content" - android:layout_height="225px" - android:src="@drawable/toroff"/> - </TableRow> - <TableRow> - <TextView android:id="@+id/lblStatus" - android:text="- Press to enable - " - android:layout_gravity="center_horizontal" - android:gravity="center_horizontal" - android:textStyle="bold" - android:width="320px" - android:height="100px" - android:textColor="#ffffff" - /> - </TableRow> - </TableLayout> - </TableRow> - - </TableLayout> - </ScrollView> + + <ImageView + android:id="@+id/imgStatus" + android:layout_width="fill_parent" + android:layout_margin="5dip" + android:layout_height="fill_parent" + android:layout_gravity="center_horizontal" + android:src="@drawable/toroff"/> + + + <TextView android:id="@+id/lblStatus" + android:text="@string/press_to_start" + android:layout_gravity="center_horizontal" + android:textStyle="bold" + android:layout_width="wrap_content" + android:layout_height="50dip" + android:textColor="#ffffff" + /> </LinearLayout> -

1 0

r24758: {projects} last modification for StrictNodes, exit node support (in projects/android/trunk/Orbot: res/xml src/org/torproject/android/service)
by Nathan Freitas 17 May '11

17 May '11

Author: n8fr8 Date: 2011-05-17 02:02:36 +0000 (Tue, 17 May 2011) New Revision: 24758 Modified: projects/android/trunk/Orbot/res/xml/preferences.xml projects/android/trunk/Orbot/src/org/torproject/android/service/TorService.java Log: last modification for StrictNodes, exit node support Modified: projects/android/trunk/Orbot/res/xml/preferences.xml =================================================================== --- projects/android/trunk/Orbot/res/xml/preferences.xml 2011-05-16 14:39:26 UTC (rev 24757) +++ projects/android/trunk/Orbot/res/xml/preferences.xml 2011-05-17 02:02:36 UTC (rev 24758) @@ -42,17 +42,26 @@ </PreferenceCategory> -<PreferenceCategory android:title="Exit Nodes"> - +<PreferenceCategory android:title="Node Configuration" android:summary="These are advanced settings that can reduce your anonymity"> +<EditTextPreference android:key="pref_entrance_nodes" +android:title="Entrance Nodes" +android:summary="Fingerprints, nicks, countries and addresses for the first hop" +android:dialogTitle="Enter Entrance Nodes" +/> <EditTextPreference android:key="pref_exit_nodes" android:title="Exit Nodes" -android:summary="Fingerprints, nicknames, country codes and address patterns for the last hop" +android:summary="Fingerprints, nicks, countries and addresses for the last hop" android:dialogTitle="Enter Exit Nodes" /> +<EditTextPreference android:key="pref_exclude_nodes" +android:title="Exclude Nodes" +android:summary="Fingerprints, nicks, countries and addresses to exclude" +android:dialogTitle="Enter Exclude Nodes" +/> <CheckBoxPreference android:defaultValue="false" -android:title="Strict Exit Nodes" android:key="pref_strict_exit_nodes" -android:summary="Use only these specific exit nodes"/> +android:title="Strict Nodes" android:key="pref_strict_nodes" +android:summary="Use *only* these specified nodes"/> </PreferenceCategory> <PreferenceCategory android:title="Bridges"> Modified: projects/android/trunk/Orbot/src/org/torproject/android/service/TorService.java =================================================================== --- projects/android/trunk/Orbot/src/org/torproject/android/service/TorService.java 2011-05-16 14:39:26 UTC (rev 24757) +++ projects/android/trunk/Orbot/src/org/torproject/android/service/TorService.java 2011-05-17 02:02:36 UTC (rev 24758) @@ -1288,8 +1288,10 @@ boolean enableHiddenServices = prefs.getBoolean("pref_hs_enable", false); - boolean enableStrictExitNodes = prefs.getBoolean("pref_strict_exit_nodes", false); + boolean enableStrictNodes = prefs.getBoolean("pref_strict_nodes", false); + String entranceNodes = prefs.getString("pref_entrance_nodes", ""); String exitNodes = prefs.getString("pref_exit_nodes", ""); + String excludeNodes = prefs.getString("pref_exclude_nodes", ""); //boolean enableTransparentProxy = prefs.getBoolean(TorConstants.PREF_TRANSPARENT, false); @@ -1308,13 +1310,10 @@ } } - if (exitNodes.length() > 0) - { - - mBinder.updateConfiguration("ExitNodes", exitNodes, false); - mBinder.updateConfiguration("StrictExitNodes", enableStrictExitNodes ? "1" : "0", false); - - } + mBinder.updateConfiguration("EntranceNodes", entranceNodes, false); + mBinder.updateConfiguration("ExitNodes", exitNodes, false); + mBinder.updateConfiguration("ExcludeNodes", excludeNodes, false); + mBinder.updateConfiguration("StrictExitNodes", enableStrictNodes ? "1" : "0", false); if (useBridges) {

1 0

[tor/release-0.2.2] nickm wanted to call this one a beta, so a beta it is
by arma＠torproject.org 17 May '11

17 May '11

commit 68c364bbc34c02a96f95a08a21b032f349f80802 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 16 22:01:18 2011 -0400 nickm wanted to call this one a beta, so a beta it is because hey, if the new status tag breaks something, it's still an alpha after all. ;) --- ChangeLog | 2 +- configure.in | 2 +- contrib/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/ChangeLog b/ChangeLog index cc688ad..09dc93e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.2.2.26-alpha - 2011-05-17 +Changes in version 0.2.2.26-beta - 2011-05-17 o Security/privacy fixes: - Replace all potentially sensitive memory comparison operations with versions whose runtime does not depend on the data being diff --git a/configure.in b/configure.in index 2eadd15..2fdec04 100644 --- a/configure.in +++ b/configure.in @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2008, The Tor Project, Inc. dnl See LICENSE for licensing information AC_INIT -AM_INIT_AUTOMAKE(tor, 0.2.2.26-alpha) +AM_INIT_AUTOMAKE(tor, 0.2.2.26-beta) AM_CONFIG_HEADER(orconfig.h) AC_CANONICAL_HOST diff --git a/contrib/tor-mingw.nsi.in b/contrib/tor-mingw.nsi.in index fbc049b..13f48e9 100644 --- a/contrib/tor-mingw.nsi.in +++ b/contrib/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.2.26-alpha" +!define VERSION "0.2.2.26-beta" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 9b52bda..bce3488 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -233,5 +233,5 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.2.26-alpha" +#define VERSION "0.2.2.26-beta"

1 0

[tor/release-0.2.2] bump to 0.2.2.26-alpha
by arma＠torproject.org 17 May '11

17 May '11

commit 472cbbc826e9f3bfda9944532582107009e31232 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 16 21:56:19 2011 -0400 bump to 0.2.2.26-alpha --- configure.in | 2 +- contrib/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.in b/configure.in index 124383c..2eadd15 100644 --- a/configure.in +++ b/configure.in @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2008, The Tor Project, Inc. dnl See LICENSE for licensing information AC_INIT -AM_INIT_AUTOMAKE(tor, 0.2.2.25-alpha) +AM_INIT_AUTOMAKE(tor, 0.2.2.26-alpha) AM_CONFIG_HEADER(orconfig.h) AC_CANONICAL_HOST diff --git a/contrib/tor-mingw.nsi.in b/contrib/tor-mingw.nsi.in index 78e4820..fbc049b 100644 --- a/contrib/tor-mingw.nsi.in +++ b/contrib/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.2.25-alpha" +!define VERSION "0.2.2.26-alpha" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 8d5b969..9b52bda 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -233,5 +233,5 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.2.25-alpha" +#define VERSION "0.2.2.26-alpha"

1 0

[tor/release-0.2.2] elevate some changelog entries
by arma＠torproject.org 17 May '11

17 May '11

commit 1b14f12086254109e246be66370a6cd73150d985 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 16 21:56:13 2011 -0400 elevate some changelog entries --- ChangeLog | 80 +++++++++++++++++++++++++++++++----------------------------- 1 files changed, 41 insertions(+), 39 deletions(-) diff --git a/ChangeLog b/ChangeLog index 972692b..cc688ad 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.2.2.26-beta - 2011-05-1? +Changes in version 0.2.2.26-alpha - 2011-05-17 o Security/privacy fixes: - Replace all potentially sensitive memory comparison operations with versions whose runtime does not depend on the data being @@ -12,6 +12,9 @@ Changes in version 0.2.2.26-beta - 2011-05-1? wanted them or not. This wouldn't have let an attacker impersonate a hidden service, but it did let directories pre-seed a client with descriptors that it didn't want. Bugfix on 0.0.6. + - On SIGHUP, do not clear out all TrackHostExits mappings, client + DNS cache entries, and virtual address mappings: that's what + NEWNYM is for. Fixes bug 1345; bugfix on 0.1.0.1-rc. o Major features: - The options SocksPort, ControlPort, and so on now all accept a @@ -22,6 +25,10 @@ Changes in version 0.2.2.26-beta - 2011-05-1? group-readable. Now users can run two Tor clients on the same system without needing to manually mess with parameters. Resolves part of ticket 3076. + - Set SO_REUSEADDR on all sockets, not just listeners. This should + help busy exit nodes avoid running out of useable ports just + because all the ports have been used in the near past. Resolves + issue 2850. o Minor features: - New "GETINFO net/listeners/(type)" controller command to return @@ -40,33 +47,18 @@ Changes in version 0.2.2.26-beta - 2011-05-1? directory holding the socket, however, seems to work everywhere. - Rate-limit a warning about failures to download v2 networkstatus documents. Resolves part of bug 1352. - - Backport code from 0.2.3.x to allow directory authorities to clean - their microdescriptor caches. Needed to resolve bug 2230. + - Backport code from 0.2.3.x that allows directory authorities to + clean their microdescriptor caches. Needed to resolve bug 2230. - When an HTTPS proxy reports "403 Forbidden", we now explain what it means rather than calling it an unexpected status code. Closes bug 2503. Patch from Michael Yakubovich. - Update to the May 1 2011 Maxmind GeoLite Country database. - - Set SO_REUSEADDR on all sockets, not just listeners. This should - help busy exit nodes avoid running out of useable ports just - because all the ports have been used in the near past. Resolves - issue 2850. o Minor bugfixes: - - When loading the microdesc journal, remember its current size. - In 0.2.2, this helps prevent the microdesc journal from growing - without limit on authorities (who are the only ones to use it in - 0.2.2). Fixes a part of bug 2230; bugfix on 0.2.2.6-alpha. - Fix posted by "cypherpunks." - - The microdesc journal is supposed to get rebuilt only if it is - at least _half_ the length of the store, not _twice_ the length - of the store. Bugfix on 0.2.2.6-alpha; fixes part of bug 2230. - Authorities now clean their microdesc cache periodically and when reading from disk initially, not only when adding new descriptors. This prevents a bug where we could lose microdescriptors. Bugfix on 0.2.2.6-alpha. 2230 - - Fix a potential null-pointer dereference while computing a - consensus. Bugfix on tor-0.2.0.3-alpha, found with the help of - clang's analyzer. - Do not crash when our configuration file becomes unreadable, for example due to a permissions change, between when we start up and when a controller calls SAVECONF. Fixes bug 3135; bugfix @@ -75,18 +67,19 @@ Changes in version 0.2.2.26-beta - 2011-05-1? cache on Windows. (We would try to replace the file while still holding it open. That's fine on Unix, but Windows doesn't let us do that.) Bugfix on 0.2.2.6-alpha; bug found by wanoskarnet. - - Avoid a possible null-pointer dereference when rebuilding the mdesc - cache without actually having any descriptors to cache. Bugfix on - 0.2.2.6-alpha. Issue discovered using clang's static analyzer. - - If we fail to compute the identity digest of a v3 legacy keypair, - warn, and don't use a buffer-full of junk instead. Bugfix on - 0.2.1.1-alpha; fixes bug 3106. - Add missing explanations for the authority-related torrc options RephistTrackTime, BridgePassword, and V3AuthUseLegacyKey in the man page. Resolves issue 2379. - - On SIGHUP, do not clear out all TrackHostExits mappings, client - DNS cache entries, and virtual address mappings: that's what - NEWNYM is for. Fixes bug 1345; bugfix on 0.1.0.1-rc. + - As an authority, do not upload our own vote or signature set to + ourself. It would tell us nothing new, and as of 0.2.2.24-alpha, + it would get flagged as a duplicate. Resolves bug 3026. + - Accept hidden service descriptors if we think we are a hidden + service directory, regardless of what our consensus says. This + helps robustness, since clients and hidden services can sometimes + have a more up-to-date view of the network consensus than we do, + and if they think that the directory authorities list us a HSDir, + we might actually be one. Related to bug 2732; bugfix on + 0.2.0.10-alpha. - When a controller changes TrackHostExits, remove mappings for hosts that should no longer have their exits tracked. Bugfix on 0.1.0.1-rc. @@ -99,23 +92,32 @@ Changes in version 0.2.2.26-beta - 2011-05-1? - Do not reset the bridge descriptor download status every time we re-parse our configuration or get a configuration change. Fixes bug 3019; bugfix on 0.2.0.3-alpha. + + o Minor bugfixes (code cleanup): + - When loading the microdesc journal, remember its current size. + In 0.2.2, this helps prevent the microdesc journal from growing + without limit on authorities (who are the only ones to use it in + 0.2.2). Fixes a part of bug 2230; bugfix on 0.2.2.6-alpha. + Fix posted by "cypherpunks." + - The microdesc journal is supposed to get rebuilt only if it is + at least _half_ the length of the store, not _twice_ the length + of the store. Bugfix on 0.2.2.6-alpha; fixes part of bug 2230. + - Fix a potential null-pointer dereference while computing a + consensus. Bugfix on tor-0.2.0.3-alpha, found with the help of + clang's analyzer. + - Avoid a possible null-pointer dereference when rebuilding the mdesc + cache without actually having any descriptors to cache. Bugfix on + 0.2.2.6-alpha. Issue discovered using clang's static analyzer. + - If we fail to compute the identity digest of a v3 legacy keypair, + warn, and don't use a buffer-full of junk instead. Bugfix on + 0.2.1.1-alpha; fixes bug 3106. - Resolve an untriggerable issue in smartlist_string_num_isin(), where if the function had ever in the future been used to check for the presence of a too-large number, it would have given an incorrect result. (Fortunately, we only used it for 16-bit values.) Fixes bug 3175; bugfix on 0.1.0.1-rc. - - Require that introduction point keys and onion keys have public - exponent 65537. Bugfix on 0.2.0.10-alpha. - - As an authority, do not upload our own vote or signature set to - ourself. It would tell us nothing new, and as of 0.2.2.24-alpha, - it would get flagged as a duplicate. Resolves bug 3026. - - Accept hidden service descriptors if we think we are a hidden - service directory, regardless of what our consensus says. This - helps robustness, since clients and hidden services can sometimes - have a more up-to-date view of the network consensus than we do, - and if they think that the directory authorities list us a HSDir, - we might actually be one. Related to bug 2732; bugfix on - 0.2.0.10-alpha. + - Require that introduction point keys and onion handshake keys + have public exponent 65537. Bugfix on 0.2.0.10-alpha. o Removed features: - Caches no longer download and serve v2 networkstatus documents

1 0

[tor/release-0.2.2] two cleanups
by arma＠torproject.org 17 May '11

17 May '11

commit 026318e9b499126a2972eeb6bacd2aeaab40e5fd Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 16 20:17:18 2011 -0400 two cleanups --- ChangeLog | 11 ++--------- 1 files changed, 2 insertions(+), 9 deletions(-) diff --git a/ChangeLog b/ChangeLog index 764c5cc..972692b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,5 @@ Changes in version 0.2.2.26-beta - 2011-05-1? - o Security fixes: + o Security/privacy fixes: - Replace all potentially sensitive memory comparison operations with versions whose runtime does not depend on the data being compared. This will help resist a class of attacks where an @@ -11,7 +11,7 @@ Changes in version 0.2.2.26-beta - 2011-05-1? hidden service descriptors that a directory gave it, whether it wanted them or not. This wouldn't have let an attacker impersonate a hidden service, but it did let directories pre-seed a client - with a descriptors that it didn't want. Bugfix on 0.0.6. + with descriptors that it didn't want. Bugfix on 0.0.6. o Major features: - The options SocksPort, ControlPort, and so on now all accept a @@ -96,13 +96,6 @@ Changes in version 0.2.2.26-beta - 2011-05-1? - When a controller changes one of the AutomapHosts* options, remove any mappings for hosts that should no longer be automapped. Bugfix on 0.2.0.1-alpha. - - Accept hidden service descriptors if we think we are a hidden - service directory, regardless of what our consensus says. This - helps robustness, since clients and hidden services can sometimes - have a more up-to-date view of the network consensus than we do, - and if they think that the directory authorities list us a HSDir, - we might actually be one. Related to bug 2732; bugfix on - 0.2.0.10-alpha. - Do not reset the bridge descriptor download status every time we re-parse our configuration or get a configuration change. Fixes bug 3019; bugfix on 0.2.0.3-alpha.

1 0

[tor/release-0.2.1] fold in new changes entries
by arma＠torproject.org 16 May '11

16 May '11

commit f1c43a1e6491d82ebc7aead7fe109e351ff55d4d Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 16 19:35:28 2011 -0400 fold in new changes entries --- ChangeLog | 22 ++++++++++++++++------ changes/check-fetched-rend-desc-service-id | 7 ------- changes/check-public-key-exponents | 5 ----- 3 files changed, 16 insertions(+), 18 deletions(-) diff --git a/ChangeLog b/ChangeLog index e799ded..8a74bcf 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,19 @@ Changes in version 0.2.1.31 - 2011-05-?? + Tor 0.2.1.31 fixes a variety of potential privacy problems. + o Security/privacy fixes (also included in 0.2.2.x): + - Replace all potentially sensitive memory comparison operations + with versions whose runtime does not depend on the data being + compared. This will help resist a class of attacks where an + adversary can use variations in timing information to learn + sensitive data. Fix for one case of bug 3122. (Safe memcmp + implementation by Robert Ransom based partially on code by DJB.) + - When receiving a hidden service descriptor, check that it is for + the hidden service we wanted. Previously, Tor would store any + hidden service descriptors that a directory gave it, whether it + wanted them or not. This wouldn't have let an attacker impersonate + a hidden service, but it did let directories pre-seed a client + with descriptors that it didn't want. Bugfix on 0.0.6. - Avoid linkability based on cached hidden service descriptors: forget all hidden service descriptors cached as a client when processing a SIGNAL NEWNYM command. Fixes bug 3000; bugfix on 0.0.6. @@ -10,12 +24,6 @@ Changes in version 0.2.1.31 - 2011-05-?? - Fix an assert in parsing router descriptors containing IPv6 addresses. This one took down the directory authorities when somebody tried some experimental code. Bugfix on 0.2.1.3-alpha. - - Replace all potentially sensitive memory comparison operations - with versions whose runtime does not depend on the data being - compared. This will help resist a class of attacks where an - adversary can use variations in timing information to learn - sensitive data. Fix for one case of bug 3122. (Safe memcmp - implementation by Robert Ransom based partially on code by DJB.) o Minor bugfixes (also included in 0.2.2.x): - When we restart our relay, we might get a successful connection @@ -39,6 +47,8 @@ Changes in version 0.2.1.31 - 2011-05-?? heavy load. Fixes bug 2933; bugfix on 0.2.0.1-alpha. - When warning about missing zlib development packages during compile, give the correct package names. Bugfix on 0.2.0.1-alpha. + - Require that introduction point keys and onion keys have public + exponent 65537. Bugfix on 0.2.0.10-alpha. - Do not crash when our configuration file becomes unreadable, for example due to a permissions change, between when we start up and when a controller calls SAVECONF. Fixes bug 3135; bugfix diff --git a/changes/check-fetched-rend-desc-service-id b/changes/check-fetched-rend-desc-service-id deleted file mode 100644 index 2f37c30..0000000 --- a/changes/check-fetched-rend-desc-service-id +++ /dev/null @@ -1,7 +0,0 @@ - o Security fixes: - - When fetching a hidden service descriptor, check that it is for - the hidden service we were trying to connect to, in order to - stop a directory from pre-seeding a client with a descriptor for - a hidden service that they didn't want. Bugfix on 0.0.6. - - diff --git a/changes/check-public-key-exponents b/changes/check-public-key-exponents deleted file mode 100644 index a8d0067..0000000 --- a/changes/check-public-key-exponents +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes: - - Require that introduction point keys and onion keys have public - exponent 65537. Bugfix on 0.2.0.10-alpha. - -

1 0

[tor/release-0.2.2] Fold in and clean up remaining changes files
by nickm＠torproject.org 16 May '11

16 May '11

commit 9525de51a64c59f277e29876e82043748c9861fe Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 16 18:17:10 2011 -0400 Fold in and clean up remaining changes files --- ChangeLog | 60 +++++++++++++++++++++++++++- changes/bug1345 | 13 ------ changes/bug2732-simple | 7 --- changes/bug2792_checkdir | 8 ---- changes/bug2850 | 5 -- changes/bug2972 | 5 -- changes/bug3019 | 4 -- changes/bug3026 | 4 -- changes/bug3175 | 7 --- changes/check-fetched-rend-desc-service-id | 7 --- changes/check-public-key-exponents | 5 -- 11 files changed, 59 insertions(+), 66 deletions(-) diff --git a/ChangeLog b/ChangeLog index 8ea0008..764c5cc 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.2.2.26-alpha - 2011-05-?? +Changes in version 0.2.2.26-beta - 2011-05-1? o Security fixes: - Replace all potentially sensitive memory comparison operations with versions whose runtime does not depend on the data being @@ -6,6 +6,12 @@ Changes in version 0.2.2.26-alpha - 2011-05-?? adversary can use variations in timing information to learn sensitive data. Fix for one case of bug 3122. (Safe memcmp implementation by Robert Ransom based partially on code by DJB.) + - When receiving a hidden service descriptor, check that it is for + the hidden service we wanted. Previously, Tor would store any + hidden service descriptors that a directory gave it, whether it + wanted them or not. This wouldn't have let an attacker impersonate + a hidden service, but it did let directories pre-seed a client + with a descriptors that it didn't want. Bugfix on 0.0.6. o Major features: - The options SocksPort, ControlPort, and so on now all accept a @@ -23,6 +29,15 @@ Changes in version 0.2.2.26-alpha - 2011-05-?? given connection type. This is useful when the user has configured "SocksPort auto" and the controller needs to know which port got chosen. Resolves another part of ticket 3076. + - Add a new ControlSocketsGroupWritable configuration option: when + it is turned on, ControlSockets are group-writeable by the default + group of the current user. Patch by Jérémy Bobbio; implements + ticket 2972. + - Tor now refuses to create a ControlSocket in a directory that is + world-readable (or group-readable if ControlSocketsGroupWritable + is 0). This is necessary because some operating systems do not + enforce permissions on an AF_UNIX sockets. Permissions on the + directory holding the socket, however, seems to work everywhere. - Rate-limit a warning about failures to download v2 networkstatus documents. Resolves part of bug 1352. - Backport code from 0.2.3.x to allow directory authorities to clean @@ -31,6 +46,10 @@ Changes in version 0.2.2.26-alpha - 2011-05-?? what it means rather than calling it an unexpected status code. Closes bug 2503. Patch from Michael Yakubovich. - Update to the May 1 2011 Maxmind GeoLite Country database. + - Set SO_REUSEADDR on all sockets, not just listeners. This should + help busy exit nodes avoid running out of useable ports just + because all the ports have been used in the near past. Resolves + issue 2850. o Minor bugfixes: - When loading the microdesc journal, remember its current size. @@ -65,6 +84,45 @@ Changes in version 0.2.2.26-alpha - 2011-05-?? - Add missing explanations for the authority-related torrc options RephistTrackTime, BridgePassword, and V3AuthUseLegacyKey in the man page. Resolves issue 2379. + - On SIGHUP, do not clear out all TrackHostExits mappings, client + DNS cache entries, and virtual address mappings: that's what + NEWNYM is for. Fixes bug 1345; bugfix on 0.1.0.1-rc. + - When a controller changes TrackHostExits, remove mappings for + hosts that should no longer have their exits tracked. Bugfix on + 0.1.0.1-rc. + - When a controller changes VirtualAddrNetwork, remove any mappings + for hosts that were automapped to the old network. Bugfix on + 0.1.1.19-rc. + - When a controller changes one of the AutomapHosts* options, remove + any mappings for hosts that should no longer be automapped. Bugfix + on 0.2.0.1-alpha. + - Accept hidden service descriptors if we think we are a hidden + service directory, regardless of what our consensus says. This + helps robustness, since clients and hidden services can sometimes + have a more up-to-date view of the network consensus than we do, + and if they think that the directory authorities list us a HSDir, + we might actually be one. Related to bug 2732; bugfix on + 0.2.0.10-alpha. + - Do not reset the bridge descriptor download status every time we + re-parse our configuration or get a configuration change. Fixes + bug 3019; bugfix on 0.2.0.3-alpha. + - Resolve an untriggerable issue in smartlist_string_num_isin(), + where if the function had ever in the future been used to check + for the presence of a too-large number, it would have given an + incorrect result. (Fortunately, we only used it for 16-bit + values.) Fixes bug 3175; bugfix on 0.1.0.1-rc. + - Require that introduction point keys and onion keys have public + exponent 65537. Bugfix on 0.2.0.10-alpha. + - As an authority, do not upload our own vote or signature set to + ourself. It would tell us nothing new, and as of 0.2.2.24-alpha, + it would get flagged as a duplicate. Resolves bug 3026. + - Accept hidden service descriptors if we think we are a hidden + service directory, regardless of what our consensus says. This + helps robustness, since clients and hidden services can sometimes + have a more up-to-date view of the network consensus than we do, + and if they think that the directory authorities list us a HSDir, + we might actually be one. Related to bug 2732; bugfix on + 0.2.0.10-alpha. o Removed features: - Caches no longer download and serve v2 networkstatus documents diff --git a/changes/bug1345 b/changes/bug1345 deleted file mode 100644 index 0c9375a..0000000 --- a/changes/bug1345 +++ /dev/null @@ -1,13 +0,0 @@ - o Minor bugfixes: - - On SIGHUP, do not clear out all TrackHostExits mappings, client DNS - cache entries, and virtual address mappings: that's what NEWNYM is - for. Bugfix on Tor 0.1.0.1-rc; fixes bug 1345. - - When TrackHostExits is changed from a controller, remove any - mappings for hosts that should no longer have their exits tracked. - Bugfix on Tor 0.1.0.1-rc. - - When VirtualAddrNetwork option is changed from a controller, - remove any mappings for hosts that were automapped to - that network. Bugfix on 0.1.1.19-rc. - - When one of the AutomapHosts* options is changed from a - controller, remove any mappings for hosts that should no longer be - automapped. Bugfix on 0.2.0.1-alpha. diff --git a/changes/bug2732-simple b/changes/bug2732-simple deleted file mode 100644 index 3678361..0000000 --- a/changes/bug2732-simple +++ /dev/null @@ -1,7 +0,0 @@ - o Minor bugfixes - - Do not reject hidden service descriptors simply because we don't - think we have not been assigned the HSDir flag. Clients and - hidden services can have a more up-to-date view of the network - consensus, and if they think that the directory authorities - list us a HSDir, we might actually be one. Related to bug 2732; - bugfix on 0.2.0.10-alpha. diff --git a/changes/bug2792_checkdir b/changes/bug2792_checkdir deleted file mode 100644 index 10de1de..0000000 --- a/changes/bug2792_checkdir +++ /dev/null @@ -1,8 +0,0 @@ - o Minor features: - - Tor now refuses to create a ControlSocket in a directory that is - world-readable (or group-readable if ControlSocketsGroupWritable - is 0). This is necessary because some operating systems do not - check the permissions on an AF_UNIX socket when programs try to - connect to it. Checking permissions on the directory holding - the socket, however, seems to work everywhere. - diff --git a/changes/bug2850 b/changes/bug2850 deleted file mode 100644 index 77ccbfa..0000000 --- a/changes/bug2850 +++ /dev/null @@ -1,5 +0,0 @@ - - Minor features - o Set SO_REUSEADDR on all sockets, not just listeners. This should - help busy exit nodes avoid running out of useable ports just because - all the ports have been used in the near past. Resolves issue 2850. - diff --git a/changes/bug2972 b/changes/bug2972 deleted file mode 100644 index 26afcca..0000000 --- a/changes/bug2972 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features: - - Allow ControlSockets to be group-writable when the - ControlSocksGroupWritable configuration option is turned on. Patch - by Jérémy Bobbio; implements ticket 2972. - diff --git a/changes/bug3019 b/changes/bug3019 deleted file mode 100644 index 4df709f..0000000 --- a/changes/bug3019 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - Do not reset the bridge descriptor download status every time we - re-parse our configuration or get a configuration change. Fixes - bug 3019; bugfix on Tor 0.2.0.3-alpha. diff --git a/changes/bug3026 b/changes/bug3026 deleted file mode 100644 index c0c0a38..0000000 --- a/changes/bug3026 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (directory authority) - - Do not upload our own vote or signature set to ourself. It would - tell us nothing new. Also, as of Tor 0.2.2.24-alpha, we started - to warn about receiving duplicate votes. Resolves bug 3026. diff --git a/changes/bug3175 b/changes/bug3175 deleted file mode 100644 index 3360fbc..0000000 --- a/changes/bug3175 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor bugfixes: - - Resolve an untriggerable issue in smartlist_string_num_isin(), - where if the function had ever in the future been used to check - for the presence of a too-large number, it would have given an - incorrect result. (Fortunately, we only used it for 16-bit - values.) Fixes bug 3175; bugfix on Tor 0.1.0.1-rc. - diff --git a/changes/check-fetched-rend-desc-service-id b/changes/check-fetched-rend-desc-service-id deleted file mode 100644 index 2f37c30..0000000 --- a/changes/check-fetched-rend-desc-service-id +++ /dev/null @@ -1,7 +0,0 @@ - o Security fixes: - - When fetching a hidden service descriptor, check that it is for - the hidden service we were trying to connect to, in order to - stop a directory from pre-seeding a client with a descriptor for - a hidden service that they didn't want. Bugfix on 0.0.6. - - diff --git a/changes/check-public-key-exponents b/changes/check-public-key-exponents deleted file mode 100644 index a8d0067..0000000 --- a/changes/check-public-key-exponents +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes: - - Require that introduction point keys and onion keys have public - exponent 65537. Bugfix on 0.2.0.10-alpha. - -

1 0

[tor/release-0.2.2] mikey has a real name.
by nickm＠torproject.org 16 May '11

16 May '11

commit aa68c39a1209560051a52d1ef13e15d634ff9d12 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 16 18:09:53 2011 -0400 mikey has a real name. --- ChangeLog | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/ChangeLog b/ChangeLog index e2c2d29..8ea0008 100644 --- a/ChangeLog +++ b/ChangeLog @@ -29,7 +29,7 @@ Changes in version 0.2.2.26-alpha - 2011-05-?? their microdescriptor caches. Needed to resolve bug 2230. - When an HTTPS proxy reports "403 Forbidden", we now explain what it means rather than calling it an unexpected status code. - Closes bug 2503. Patch from "mikey". + Closes bug 2503. Patch from Michael Yakubovich. - Update to the May 1 2011 Maxmind GeoLite Country database. o Minor bugfixes:

1 0