[tor-bugs] #19417 [Applications/Tor Browser]: asm.js files should not be cached to disk in Tor Browser and no linkability risk

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Sep 7 09:41:32 UTC 2016


#19417: asm.js files should not be cached to disk in Tor Browser and no linkability
risk
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  tbb-disk-leak, tbb-linkability,      |  Actual Points:
  GeorgKoppen201609, TorBrowserTeam201609R       |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by gk):

 * keywords:
     tbb-disk-leak, tbb-linkability, GeorgKoppen201609,
     TorBrowserTeam201609
     =>
     tbb-disk-leak, tbb-linkability, GeorgKoppen201609,
     TorBrowserTeam201609R
 * status:  assigned => needs_review


Comment:

 bug_19417_v2 in my tor-browser repo has the fixes we need to apply to the
 browser part (the backport of Mozilla's patch and not disabling asmjs
 anymore):

 https://gitweb.torproject.org/user/gk/tor-
 browser.git/commit/?h=bug_19417_v2&id=ecdfc89579b6a403beda082c536a1d0b960363f5
 https://gitweb.torproject.org/user/gk/tor-
 browser.git/commit/?h=bug_19417_v2&id=7af178793a20483896cd657fa06bb6ddc587b3a8

 bug_19417_v4 in my torbutton repo puts the pref under the rule of the
 security slider again:

 https://gitweb.torproject.org/user/gk/torbutton.git/commit/?h=bug_19417_v4&id=4953431fd7d14096a3f4217416a4578c96d40ec5

 Please review (especially the patch backport).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19417#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list