[tor-bugs] #15539 [Tor bundles/installation]: Removing signature on Tor Browser .exe should result in SHA256 value listed in sha256sums.txt

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Apr 1 14:40:08 UTC 2015


#15539: Removing signature on Tor Browser .exe should result in SHA256 value listed
in sha256sums.txt
------------------------------------------+-----------------
     Reporter:  gk                        |      Owner:  gk
         Type:  defect                    |     Status:  new
     Priority:  normal                    |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |
------------------------------------------+-----------------

Comment (by gk):

 Another good idea a bit deeper buried:

 "NSIS generates unaligned files. You can to test with exe from bundle, it
 should to matches.
 NSIS generates totally wrong PE files, it just appends compressed stuff to
 end of valid and aligned PE file without changing anything to PE-header,
 like malware."

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15539#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list