[tor-bugs] #32284 [Applications/Tor Browser]: No need to save all bundles for mar-signing and authenticode-signing check until we are done

[Tor Bug Tracker & Wiki]

#32284: No need to save all bundles for mar-signing and authenticode-signing check
until we are done
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-rbm, TorBrowserTeam201910,       |  Actual Points:
  GeorgKoppen201910                              |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Description changed by gk:

Old description:

> While doing the 9.0 release with it's big incremental .mar files I
> realized that we keep all the checked files around until the whole check
> is done essentially doubling the space needed for incremental .mar files
> which could be too large for folks to properly check them (happened to
> me).
>
> The same goes in fact for the authenticode signing check.
>
> I think once checked there is no need to keep the checked binary around
> until the end of the check were it would get deleted anyway.

New description:

 While doing the 9.0 release with it's big incremental .mar files I
 realized that we keep all the checked files around until the whole check
 is done essentially doubling the space needed for .mar files which could
 be too large for folks to properly check them (happened to me).

 The same goes in fact for the authenticode signature check.

 I think once checked there is no need to keep the checked binary around
 until the end of the check were it would get deleted anyway.

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32284#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online