mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-11-27 22:03:31 +01:00
forward-port changelog and releasenotes from 0.4.0.5
This commit is contained in:
Nick Mathewson
parent
b2c2cb9287
commit
2fca2ed499
48
ChangeLog
48
ChangeLog
@ -1,3 +1,51 @@
|
|||||||
|
Changes in version 0.4.0.5 - 2019-05-02
|
||||||
|
This is the first stable release in the 0.4.0.x series. It contains
|
||||||
|
improvements for power management and bootstrap reporting, as well as
|
||||||
|
preliminary backend support for circuit padding to prevent some kinds
|
||||||
|
of traffic analysis. It also continues our work in refactoring Tor for
|
||||||
|
long-term maintainability.
|
||||||
|
|
||||||
|
Per our support policy, we will support the 0.4.0.x series for nine
|
||||||
|
months, or until three months after the release of a stable 0.4.1.x:
|
||||||
|
whichever is longer. If you need longer-term support, please stick
|
||||||
|
with 0.3.5.x, which will we plan to support until Feb 2022.
|
||||||
|
|
||||||
|
Below are the changes since 0.4.0.4-rc. For a complete list of changes
|
||||||
|
since 0.3.5.7, see the ReleaseNotes file.
|
||||||
|
|
||||||
|
o Minor features (continuous integration):
|
||||||
|
- In Travis, tell timelimit to use stem's backtrace signals, and
|
||||||
|
launch python directly from timelimit, so python receives the
|
||||||
|
signals from timelimit, rather than make. Closes ticket 30117.
|
||||||
|
|
||||||
|
o Minor features (diagnostic):
|
||||||
|
- Add more diagnostic log messages in an attempt to solve the issue
|
||||||
|
of NUL bytes appearing in a microdescriptor cache. Related to
|
||||||
|
ticket 28223.
|
||||||
|
|
||||||
|
o Minor features (testing):
|
||||||
|
- Use the approx_time() function when setting the "Expires" header
|
||||||
|
in directory replies, to make them more testable. Needed for
|
||||||
|
ticket 30001.
|
||||||
|
|
||||||
|
o Minor bugfixes (rust):
|
||||||
|
- Abort on panic in all build profiles, instead of potentially
|
||||||
|
unwinding into C code. Fixes bug 27199; bugfix on 0.3.3.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (shellcheck):
|
||||||
|
- Look for scripts in their correct locations during "make
|
||||||
|
shellcheck". Previously we had looked in the wrong place during
|
||||||
|
out-of-tree builds. Fixes bug 30263; bugfix on 0.4.0.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (testing):
|
||||||
|
- Check the time in the "Expires" header using approx_time(). Fixes
|
||||||
|
bug 30001; bugfix on 0.4.0.4-rc.
|
||||||
|
|
||||||
|
o Minor bugfixes (UI):
|
||||||
|
- Lower log level of unlink() errors during bootstrap. Fixes bug
|
||||||
|
29930; bugfix on 0.4.0.1-alpha.
|
||||||
|
|
||||||
|
|
||||||
Changes in version 0.4.0.4-rc - 2019-04-11
|
Changes in version 0.4.0.4-rc - 2019-04-11
|
||||||
Tor 0.4.0.4-rc is the first release candidate in its series; it fixes
|
Tor 0.4.0.4-rc is the first release candidate in its series; it fixes
|
||||||
several bugs from earlier versions, including some that had affected
|
several bugs from earlier versions, including some that had affected
|
||||||
|
|||||||
599
ReleaseNotes
599
ReleaseNotes
@ -2,6 +2,605 @@ This document summarizes new features and bugfixes in each stable
|
|||||||
release of Tor. If you want to see more detailed descriptions of the
|
release of Tor. If you want to see more detailed descriptions of the
|
||||||
changes in each development snapshot, see the ChangeLog file.
|
changes in each development snapshot, see the ChangeLog file.
|
||||||
|
|
||||||
|
Changes in version 0.4.0.5 - 2019-05-02
|
||||||
|
This is the first stable release in the 0.4.0.x series. It contains
|
||||||
|
improvements for power management and bootstrap reporting, as well as
|
||||||
|
preliminary backend support for circuit padding to prevent some kinds
|
||||||
|
of traffic analysis. It also continues our work in refactoring Tor for
|
||||||
|
long-term maintainability.
|
||||||
|
|
||||||
|
Per our support policy, we will support the 0.4.0.x series for nine
|
||||||
|
months, or until three months after the release of a stable 0.4.1.x:
|
||||||
|
whichever is longer. If you need longer-term support, please stick
|
||||||
|
with 0.3.5.x, which will we plan to support until Feb 2022.
|
||||||
|
|
||||||
|
Below are the changes since 0.3.5.7. For a complete list of changes
|
||||||
|
since 0.4.0.4-rc, see the ChangeLog file.
|
||||||
|
|
||||||
|
o Major features (battery management, client, dormant mode):
|
||||||
|
- When Tor is running as a client, and it is unused for a long time,
|
||||||
|
it can now enter a "dormant" state. When Tor is dormant, it avoids
|
||||||
|
network and CPU activity until it is reawoken either by a user
|
||||||
|
request or by a controller command. For more information, see the
|
||||||
|
configuration options starting with "Dormant". Implements tickets
|
||||||
|
2149 and 28335.
|
||||||
|
- The client's memory of whether it is "dormant", and how long it
|
||||||
|
has spent idle, persists across invocations. Implements
|
||||||
|
ticket 28624.
|
||||||
|
- There is a DormantOnFirstStartup option that integrators can use
|
||||||
|
if they expect that in many cases, Tor will be installed but
|
||||||
|
not used.
|
||||||
|
|
||||||
|
o Major features (bootstrap reporting):
|
||||||
|
- When reporting bootstrap progress, report the first connection
|
||||||
|
uniformly, regardless of whether it's a connection for building
|
||||||
|
application circuits. This allows finer-grained reporting of early
|
||||||
|
progress than previously possible, with the improvements of ticket
|
||||||
|
27169. Closes tickets 27167 and 27103. Addresses ticket 27308.
|
||||||
|
- When reporting bootstrap progress, treat connecting to a proxy or
|
||||||
|
pluggable transport as separate from having successfully used that
|
||||||
|
proxy or pluggable transport to connect to a relay. Closes tickets
|
||||||
|
27100 and 28884.
|
||||||
|
|
||||||
|
o Major features (circuit padding):
|
||||||
|
- Implement preliminary support for the circuit padding portion of
|
||||||
|
Proposal 254. The implementation supports Adaptive Padding (aka
|
||||||
|
WTF-PAD) state machines for use between experimental clients and
|
||||||
|
relays. Support is also provided for APE-style state machines that
|
||||||
|
use probability distributions instead of histograms to specify
|
||||||
|
inter-packet delay. At the moment, Tor does not provide any
|
||||||
|
padding state machines that are used in normal operation: for now,
|
||||||
|
this feature exists solely for experimentation. Closes
|
||||||
|
ticket 28142.
|
||||||
|
|
||||||
|
o Major features (refactoring):
|
||||||
|
- Tor now uses an explicit list of its own subsystems when
|
||||||
|
initializing and shutting down. Previously, these systems were
|
||||||
|
managed implicitly in various places throughout the codebase.
|
||||||
|
(There may still be some subsystems using the old system.) Closes
|
||||||
|
ticket 28330.
|
||||||
|
|
||||||
|
o Major bugfixes (cell scheduler, KIST, security):
|
||||||
|
- Make KIST consider the outbuf length when computing what it can
|
||||||
|
put in the outbuf. Previously, KIST acted as though the outbuf
|
||||||
|
were empty, which could lead to the outbuf becoming too full. It
|
||||||
|
is possible that an attacker could exploit this bug to cause a Tor
|
||||||
|
client or relay to run out of memory and crash. Fixes bug 29168;
|
||||||
|
bugfix on 0.3.2.1-alpha. This issue is also being tracked as
|
||||||
|
TROVE-2019-001 and CVE-2019-8955.
|
||||||
|
|
||||||
|
o Major bugfixes (networking):
|
||||||
|
- Gracefully handle empty username/password fields in SOCKS5
|
||||||
|
username/password auth messsage and allow SOCKS5 handshake to
|
||||||
|
continue. Previously, we had rejected these handshakes, breaking
|
||||||
|
certain applications. Fixes bug 29175; bugfix on 0.3.5.1-alpha.
|
||||||
|
|
||||||
|
o Major bugfixes (NSS, relay):
|
||||||
|
- When running with NSS, disable TLS 1.2 ciphersuites that use
|
||||||
|
SHA384 for their PRF. Due to an NSS bug, the TLS key exporters for
|
||||||
|
these ciphersuites don't work -- which caused relays to fail to
|
||||||
|
handshake with one another when these ciphersuites were enabled.
|
||||||
|
Fixes bug 29241; bugfix on 0.3.5.1-alpha.
|
||||||
|
|
||||||
|
o Major bugfixes (windows, startup):
|
||||||
|
- When reading a consensus file from disk, detect whether it was
|
||||||
|
written in text mode, and re-read it in text mode if so. Always
|
||||||
|
write consensus files in binary mode so that we can map them into
|
||||||
|
memory later. Previously, we had written in text mode, which
|
||||||
|
confused us when we tried to map the file on windows. Fixes bug
|
||||||
|
28614; bugfix on 0.4.0.1-alpha.
|
||||||
|
|
||||||
|
o Minor features (address selection):
|
||||||
|
- Treat the subnet 100.64.0.0/10 as public for some purposes;
|
||||||
|
private for others. This subnet is the RFC 6598 (Carrier Grade
|
||||||
|
NAT) IP range, and is deployed by many ISPs as an alternative to
|
||||||
|
RFC 1918 that does not break existing internal networks. Tor now
|
||||||
|
blocks SOCKS and control ports on these addresses and warns users
|
||||||
|
if client ports or ExtORPorts are listening on a RFC 6598 address.
|
||||||
|
Closes ticket 28525. Patch by Neel Chauhan.
|
||||||
|
|
||||||
|
o Minor features (bandwidth authority):
|
||||||
|
- Make bandwidth authorities ignore relays that are reported in the
|
||||||
|
bandwidth file with the flag "vote=0". This change allows us to
|
||||||
|
report unmeasured relays for diagnostic reasons without including
|
||||||
|
their bandwidth in the bandwidth authorities' vote. Closes
|
||||||
|
ticket 29806.
|
||||||
|
- When a directory authority is using a bandwidth file to obtain the
|
||||||
|
bandwidth values that will be included in the next vote, serve
|
||||||
|
this bandwidth file at /tor/status-vote/next/bandwidth. Closes
|
||||||
|
ticket 21377.
|
||||||
|
|
||||||
|
o Minor features (bootstrap reporting):
|
||||||
|
- When reporting bootstrap progress, stop distinguishing between
|
||||||
|
situations where only internal paths are available and situations
|
||||||
|
where external paths are available. Previously, Tor would often
|
||||||
|
erroneously report that it had only internal paths. Closes
|
||||||
|
ticket 27402.
|
||||||
|
|
||||||
|
o Minor features (compilation):
|
||||||
|
- Compile correctly when OpenSSL is built with engine support
|
||||||
|
disabled, or with deprecated APIs disabled. Closes ticket 29026.
|
||||||
|
Patches from "Mangix".
|
||||||
|
|
||||||
|
o Minor features (continuous integration):
|
||||||
|
- On Travis Rust builds, cleanup Rust registry and refrain from
|
||||||
|
caching the "target/" directory to speed up builds. Resolves
|
||||||
|
issue 29962.
|
||||||
|
- Log Python version during each Travis CI job. Resolves
|
||||||
|
issue 28551.
|
||||||
|
- In Travis, tell timelimit to use stem's backtrace signals, and
|
||||||
|
launch python directly from timelimit, so python receives the
|
||||||
|
signals from timelimit, rather than make. Closes ticket 30117.
|
||||||
|
|
||||||
|
o Minor features (controller):
|
||||||
|
- Add a DROPOWNERSHIP command to undo the effects of TAKEOWNERSHIP.
|
||||||
|
Implements ticket 28843.
|
||||||
|
|
||||||
|
o Minor features (developer tooling):
|
||||||
|
- Check that bugfix versions in changes files look like Tor versions
|
||||||
|
from the versions spec. Warn when bugfixes claim to be on a future
|
||||||
|
release. Closes ticket 27761.
|
||||||
|
- Provide a git pre-commit hook that disallows commiting if we have
|
||||||
|
any failures in our code and changelog formatting checks. It is
|
||||||
|
now available in scripts/maint/pre-commit.git-hook. Implements
|
||||||
|
feature 28976.
|
||||||
|
- Provide a git hook script to prevent "fixup!" and "squash!"
|
||||||
|
commits from ending up in the master branch, as scripts/main/pre-
|
||||||
|
push.git-hook. Closes ticket 27993.
|
||||||
|
|
||||||
|
o Minor features (diagnostic):
|
||||||
|
- Add more diagnostic log messages in an attempt to solve the issue
|
||||||
|
of NUL bytes appearing in a microdescriptor cache. Related to
|
||||||
|
ticket 28223.
|
||||||
|
|
||||||
|
o Minor features (directory authority):
|
||||||
|
- When a directory authority is using a bandwidth file to obtain
|
||||||
|
bandwidth values, include the digest of that file in the vote.
|
||||||
|
Closes ticket 26698.
|
||||||
|
- Directory authorities support a new consensus algorithm, under
|
||||||
|
which the family lines in microdescriptors are encoded in a
|
||||||
|
canonical form. This change makes family lines more compressible
|
||||||
|
in transit, and on the client. Closes ticket 28266; implements
|
||||||
|
proposal 298.
|
||||||
|
|
||||||
|
o Minor features (directory authority, relay):
|
||||||
|
- Authorities now vote on a "StaleDesc" flag to indicate that a
|
||||||
|
relay's descriptor is so old that the relay should upload again
|
||||||
|
soon. Relays treat this flag as a signal to upload a new
|
||||||
|
descriptor. This flag will eventually let us remove the
|
||||||
|
'published' date from routerstatus entries, and make our consensus
|
||||||
|
diffs much smaller. Closes ticket 26770; implements proposal 293.
|
||||||
|
|
||||||
|
o Minor features (dormant mode):
|
||||||
|
- Add a DormantCanceledByStartup option to tell Tor that it should
|
||||||
|
treat a startup event as cancelling any previous dormant state.
|
||||||
|
Integrators should use this option with caution: it should only be
|
||||||
|
used if Tor is being started because of something that the user
|
||||||
|
did, and not if Tor is being automatically started in the
|
||||||
|
background. Closes ticket 29357.
|
||||||
|
|
||||||
|
o Minor features (fallback directory mirrors):
|
||||||
|
- Update the fallback whitelist based on operator opt-ins and opt-
|
||||||
|
outs. Closes ticket 24805, patch by Phoul.
|
||||||
|
|
||||||
|
o Minor features (FreeBSD):
|
||||||
|
- On FreeBSD-based systems, warn relay operators if the
|
||||||
|
"net.inet.ip.random_id" sysctl (IP ID randomization) is disabled.
|
||||||
|
Closes ticket 28518.
|
||||||
|
|
||||||
|
o Minor features (geoip):
|
||||||
|
- Update geoip and geoip6 to the April 2 2019 Maxmind GeoLite2
|
||||||
|
Country database. Closes ticket 29992.
|
||||||
|
|
||||||
|
o Minor features (HTTP standards compliance):
|
||||||
|
- Stop sending the header "Content-type: application/octet-stream"
|
||||||
|
along with transparently compressed documents: this confused
|
||||||
|
browsers. Closes ticket 28100.
|
||||||
|
|
||||||
|
o Minor features (IPv6):
|
||||||
|
- We add an option ClientAutoIPv6ORPort, to make clients randomly
|
||||||
|
prefer a node's IPv4 or IPv6 ORPort. The random preference is set
|
||||||
|
every time a node is loaded from a new consensus or bridge config.
|
||||||
|
We expect that this option will enable clients to bootstrap more
|
||||||
|
quickly without having to determine whether they support IPv4,
|
||||||
|
IPv6, or both. Closes ticket 27490. Patch by Neel Chauhan.
|
||||||
|
- When using addrs_in_same_network_family(), avoid choosing circuit
|
||||||
|
paths that pass through the same IPv6 subnet more than once.
|
||||||
|
Previously, we only checked IPv4 subnets. Closes ticket 24393.
|
||||||
|
Patch by Neel Chauhan.
|
||||||
|
|
||||||
|
o Minor features (log messages):
|
||||||
|
- Improve log message in v3 onion services that could print out
|
||||||
|
negative revision counters. Closes ticket 27707. Patch
|
||||||
|
by "ffmancera".
|
||||||
|
|
||||||
|
o Minor features (memory usage):
|
||||||
|
- Save memory by storing microdescriptor family lists with a more
|
||||||
|
compact representation. Closes ticket 27359.
|
||||||
|
- Tor clients now use mmap() to read consensus files from disk, so
|
||||||
|
that they no longer need keep the full text of a consensus in
|
||||||
|
memory when parsing it or applying a diff. Closes ticket 27244.
|
||||||
|
|
||||||
|
o Minor features (NSS, diagnostic):
|
||||||
|
- Try to log an error from NSS (if there is any) and a more useful
|
||||||
|
description of our situation if we are using NSS and a call to
|
||||||
|
SSL_ExportKeyingMaterial() fails. Diagnostic for ticket 29241.
|
||||||
|
|
||||||
|
o Minor features (parsing):
|
||||||
|
- Directory authorities now validate that router descriptors and
|
||||||
|
ExtraInfo documents are in a valid subset of UTF-8, and reject
|
||||||
|
them if they are not. Closes ticket 27367.
|
||||||
|
|
||||||
|
o Minor features (performance):
|
||||||
|
- Cache the results of summarize_protocol_flags(), so that we don't
|
||||||
|
have to parse the same protocol-versions string over and over.
|
||||||
|
This should save us a huge number of malloc calls on startup, and
|
||||||
|
may reduce memory fragmentation with some allocators. Closes
|
||||||
|
ticket 27225.
|
||||||
|
- Remove a needless memset() call from get_token_arguments, thereby
|
||||||
|
speeding up the tokenization of directory objects by about 20%.
|
||||||
|
Closes ticket 28852.
|
||||||
|
- Replace parse_short_policy() with a faster implementation, to
|
||||||
|
improve microdescriptor parsing time. Closes ticket 28853.
|
||||||
|
- Speed up directory parsing a little by avoiding use of the non-
|
||||||
|
inlined strcmp_len() function. Closes ticket 28856.
|
||||||
|
- Speed up microdescriptor parsing by about 30%, to help improve
|
||||||
|
startup time. Closes ticket 28839.
|
||||||
|
|
||||||
|
o Minor features (pluggable transports):
|
||||||
|
- Add support for emitting STATUS updates to Tor's control port from
|
||||||
|
a pluggable transport process. Closes ticket 28846.
|
||||||
|
- Add support for logging to Tor's logging subsystem from a
|
||||||
|
pluggable transport process. Closes ticket 28180.
|
||||||
|
|
||||||
|
o Minor features (process management):
|
||||||
|
- Add a new process API for handling child processes. This new API
|
||||||
|
allows Tor to have bi-directional communication with child
|
||||||
|
processes on both Unix and Windows. Closes ticket 28179.
|
||||||
|
- Use the subsystem manager to initialize and shut down the process
|
||||||
|
module. Closes ticket 28847.
|
||||||
|
|
||||||
|
o Minor features (relay):
|
||||||
|
- When listing relay families, list them in canonical form including
|
||||||
|
the relay's own identity, and try to give a more useful set of
|
||||||
|
warnings. Part of ticket 28266 and proposal 298.
|
||||||
|
|
||||||
|
o Minor features (required protocols):
|
||||||
|
- Before exiting because of a missing required protocol, Tor will
|
||||||
|
now check the publication time of the consensus, and not exit
|
||||||
|
unless the consensus is newer than the Tor program's own release
|
||||||
|
date. Previously, Tor would not check the consensus publication
|
||||||
|
time, and so might exit because of a missing protocol that might
|
||||||
|
no longer be required in a current consensus. Implements proposal
|
||||||
|
297; closes ticket 27735.
|
||||||
|
|
||||||
|
o Minor features (testing):
|
||||||
|
- Treat all unexpected ERR and BUG messages as test failures. Closes
|
||||||
|
ticket 28668.
|
||||||
|
- Allow a HeartbeatPeriod of less than 30 minutes in testing Tor
|
||||||
|
networks. Closes ticket 28840. Patch by Rob Jansen.
|
||||||
|
- Use the approx_time() function when setting the "Expires" header
|
||||||
|
in directory replies, to make them more testable. Needed for
|
||||||
|
ticket 30001.
|
||||||
|
|
||||||
|
o Minor bugfixes (security):
|
||||||
|
- Fix a potential double free bug when reading huge bandwidth files.
|
||||||
|
The issue is not exploitable in the current Tor network because
|
||||||
|
the vulnerable code is only reached when directory authorities
|
||||||
|
read bandwidth files, but bandwidth files come from a trusted
|
||||||
|
source (usually the authorities themselves). Furthermore, the
|
||||||
|
issue is only exploitable in rare (non-POSIX) 32-bit architectures,
|
||||||
|
which are not used by any of the current authorities. Fixes bug
|
||||||
|
30040; bugfix on 0.3.5.1-alpha. Bug found and fixed by
|
||||||
|
Tobias Stoeckmann.
|
||||||
|
- Verify in more places that we are not about to create a buffer
|
||||||
|
with more than INT_MAX bytes, to avoid possible OOB access in the
|
||||||
|
event of bugs. Fixes bug 30041; bugfix on 0.2.0.16. Found and
|
||||||
|
fixed by Tobias Stoeckmann.
|
||||||
|
|
||||||
|
o Minor bugfix (continuous integration):
|
||||||
|
- Reset coverage state on disk after Travis CI has finished. This
|
||||||
|
should prevent future coverage merge errors from causing the test
|
||||||
|
suite for the "process" subsystem to fail. The process subsystem
|
||||||
|
was introduced in 0.4.0.1-alpha. Fixes bug 29036; bugfix
|
||||||
|
on 0.2.9.15.
|
||||||
|
- Terminate test-stem if it takes more than 9.5 minutes to run.
|
||||||
|
(Travis terminates the job after 10 minutes of no output.)
|
||||||
|
Diagnostic for 29437. Fixes bug 30011; bugfix on 0.3.5.4-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (build, compatibility, rust):
|
||||||
|
- Update Cargo.lock file to match the version made by the latest
|
||||||
|
version of Rust, so that "make distcheck" will pass again. Fixes
|
||||||
|
bug 29244; bugfix on 0.3.3.4-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (C correctness):
|
||||||
|
- Fix an unlikely memory leak in consensus_diff_apply(). Fixes bug
|
||||||
|
29824; bugfix on 0.3.1.1-alpha. This is Coverity warning
|
||||||
|
CID 1444119.
|
||||||
|
|
||||||
|
o Minor bugfixes (client, clock skew):
|
||||||
|
- Bootstrap successfully even when Tor's clock is behind the clocks
|
||||||
|
on the authorities. Fixes bug 28591; bugfix on 0.2.0.9-alpha.
|
||||||
|
- Select guards even if the consensus has expired, as long as the
|
||||||
|
consensus is still reasonably live. Fixes bug 24661; bugfix
|
||||||
|
on 0.3.0.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (compilation):
|
||||||
|
- Fix compilation warnings in test_circuitpadding.c. Fixes bug
|
||||||
|
29169; bugfix on 0.4.0.1-alpha.
|
||||||
|
- Silence a compiler warning in test-memwipe.c on OpenBSD. Fixes bug
|
||||||
|
29145; bugfix on 0.2.9.3-alpha. Patch from Kris Katterjohn.
|
||||||
|
- Compile correctly on OpenBSD; previously, we were missing some
|
||||||
|
headers required in order to detect it properly. Fixes bug 28938;
|
||||||
|
bugfix on 0.3.5.1-alpha. Patch from Kris Katterjohn.
|
||||||
|
|
||||||
|
o Minor bugfixes (directory clients):
|
||||||
|
- Mark outdated dirservers when Tor only has a reasonably live
|
||||||
|
consensus. Fixes bug 28569; bugfix on 0.3.2.5-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (directory mirrors):
|
||||||
|
- Even when a directory mirror's clock is behind the clocks on the
|
||||||
|
authorities, we now allow the mirror to serve "future"
|
||||||
|
consensuses. Fixes bug 28654; bugfix on 0.3.0.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (DNS):
|
||||||
|
- Gracefully handle an empty or absent resolve.conf file by falling
|
||||||
|
back to using "localhost" as a DNS server (and hoping it works).
|
||||||
|
Previously, we would just stop running as an exit. Fixes bug
|
||||||
|
21900; bugfix on 0.2.1.10-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (documentation):
|
||||||
|
- Describe the contents of the v3 onion service client authorization
|
||||||
|
files correctly: They hold public keys, not private keys. Fixes
|
||||||
|
bug 28979; bugfix on 0.3.5.1-alpha. Spotted by "Felixix".
|
||||||
|
|
||||||
|
o Minor bugfixes (guards):
|
||||||
|
- In count_acceptable_nodes(), the minimum number is now one bridge
|
||||||
|
or guard node, and two non-guard nodes for a circuit. Previously,
|
||||||
|
we had added up the sum of all nodes with a descriptor, but that
|
||||||
|
could cause us to build failing circuits when we had either too
|
||||||
|
many bridges or not enough guard nodes. Fixes bug 25885; bugfix on
|
||||||
|
0.3.6.1-alpha. Patch by Neel Chauhan.
|
||||||
|
|
||||||
|
o Minor bugfixes (IPv6):
|
||||||
|
- Fix tor_ersatz_socketpair on IPv6-only systems. Previously, the
|
||||||
|
IPv6 socket was bound using an address family of AF_INET instead
|
||||||
|
of AF_INET6. Fixes bug 28995; bugfix on 0.3.5.1-alpha. Patch from
|
||||||
|
Kris Katterjohn.
|
||||||
|
|
||||||
|
o Minor bugfixes (linux seccomp sandbox):
|
||||||
|
- Fix startup crash when experimental sandbox support is enabled.
|
||||||
|
Fixes bug 29150; bugfix on 0.4.0.1-alpha. Patch by Peter Gerber.
|
||||||
|
|
||||||
|
o Minor bugfixes (logging):
|
||||||
|
- Correct a misleading error message when IPv4Only or IPv6Only is
|
||||||
|
used but the resolved address can not be interpreted as an address
|
||||||
|
of the specified IP version. Fixes bug 13221; bugfix on
|
||||||
|
0.2.3.9-alpha. Patch from Kris Katterjohn.
|
||||||
|
- Log the correct port number for listening sockets when "auto" is
|
||||||
|
used to let Tor pick the port number. Previously, port 0 was
|
||||||
|
logged instead of the actual port number. Fixes bug 29144; bugfix
|
||||||
|
on 0.3.5.1-alpha. Patch from Kris Katterjohn.
|
||||||
|
- Stop logging a BUG() warning when Tor is waiting for exit
|
||||||
|
descriptors. Fixes bug 28656; bugfix on 0.3.5.1-alpha.
|
||||||
|
- Avoid logging that we are relaxing a circuit timeout when that
|
||||||
|
timeout is fixed. Fixes bug 28698; bugfix on 0.2.4.7-alpha.
|
||||||
|
- Log more information at "warning" level when unable to read a
|
||||||
|
private key; log more information at "info" level when unable to
|
||||||
|
read a public key. We had warnings here before, but they were lost
|
||||||
|
during our NSS work. Fixes bug 29042; bugfix on 0.3.5.1-alpha.
|
||||||
|
- Rework rep_hist_log_link_protocol_counts() to iterate through all
|
||||||
|
link protocol versions when logging incoming/outgoing connection
|
||||||
|
counts. Tor no longer skips version 5, and we won't have to
|
||||||
|
remember to update this function when new link protocol version is
|
||||||
|
developed. Fixes bug 28920; bugfix on 0.2.6.10.
|
||||||
|
|
||||||
|
o Minor bugfixes (memory management):
|
||||||
|
- Refactor the shared random state's memory management so that it
|
||||||
|
actually takes ownership of the shared random value pointers.
|
||||||
|
Fixes bug 29706; bugfix on 0.2.9.1-alpha.
|
||||||
|
- Stop leaking parts of the shared random state in the shared-random
|
||||||
|
unit tests. Fixes bug 29599; bugfix on 0.2.9.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (misc):
|
||||||
|
- The amount of total available physical memory is now determined
|
||||||
|
using the sysctl identifier HW_PHYSMEM (rather than HW_USERMEM)
|
||||||
|
when it is defined and a 64-bit variant is not available. Fixes
|
||||||
|
bug 28981; bugfix on 0.2.5.4-alpha. Patch from Kris Katterjohn.
|
||||||
|
|
||||||
|
o Minor bugfixes (networking):
|
||||||
|
- Introduce additional checks into tor_addr_parse() to reject
|
||||||
|
certain incorrect inputs that previously were not detected. Fixes
|
||||||
|
bug 23082; bugfix on 0.2.0.10-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (onion service v3, client):
|
||||||
|
- Stop logging a "BUG()" warning and stacktrace when we find a SOCKS
|
||||||
|
connection waiting for a descriptor that we actually have in the
|
||||||
|
cache. It turns out that this can actually happen, though it is
|
||||||
|
rare. Now, tor will recover and retry the descriptor. Fixes bug
|
||||||
|
28669; bugfix on 0.3.2.4-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (onion services):
|
||||||
|
- Avoid crashing if ClientOnionAuthDir (incorrectly) contains more
|
||||||
|
than one private key for a hidden service. Fixes bug 29040; bugfix
|
||||||
|
on 0.3.5.1-alpha.
|
||||||
|
- In hs_cache_store_as_client() log an HSDesc we failed to parse at
|
||||||
|
"debug" level. Tor used to log it as a warning, which caused very
|
||||||
|
long log lines to appear for some users. Fixes bug 29135; bugfix
|
||||||
|
on 0.3.2.1-alpha.
|
||||||
|
- Stop logging "Tried to establish rendezvous on non-OR circuit..."
|
||||||
|
as a warning. Instead, log it as a protocol warning, because there
|
||||||
|
is nothing that relay operators can do to fix it. Fixes bug 29029;
|
||||||
|
bugfix on 0.2.5.7-rc.
|
||||||
|
|
||||||
|
o Minor bugfixes (periodic events):
|
||||||
|
- Refrain from calling routerlist_remove_old_routers() from
|
||||||
|
check_descriptor_callback(). Instead, create a new hourly periodic
|
||||||
|
event. Fixes bug 27929; bugfix on 0.2.8.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (pluggable transports):
|
||||||
|
- Make sure that data is continously read from standard output and
|
||||||
|
standard error pipes of a pluggable transport child-process, to
|
||||||
|
avoid deadlocking when a pipe's buffer is full. Fixes bug 26360;
|
||||||
|
bugfix on 0.2.3.6-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (rust):
|
||||||
|
- Abort on panic in all build profiles, instead of potentially
|
||||||
|
unwinding into C code. Fixes bug 27199; bugfix on 0.3.3.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (scheduler):
|
||||||
|
- When re-adding channels to the pending list, check the correct
|
||||||
|
channel's sched_heap_idx. This issue has had no effect in mainline
|
||||||
|
Tor, but could have led to bugs down the road in improved versions
|
||||||
|
of our circuit scheduling code. Fixes bug 29508; bugfix
|
||||||
|
on 0.3.2.10.
|
||||||
|
|
||||||
|
o Minor bugfixes (shellcheck):
|
||||||
|
- Look for scripts in their correct locations during "make
|
||||||
|
shellcheck". Previously we had looked in the wrong place during
|
||||||
|
out-of-tree builds. Fixes bug 30263; bugfix on 0.4.0.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (single onion services):
|
||||||
|
- Allow connections to single onion services to remain idle without
|
||||||
|
being disconnected. Previously, relays acting as rendezvous points
|
||||||
|
for single onion services were mistakenly closing idle rendezvous
|
||||||
|
circuits after 60 seconds, thinking that they were unused
|
||||||
|
directory-fetching circuits that had served their purpose. Fixes
|
||||||
|
bug 29665; bugfix on 0.2.1.26.
|
||||||
|
|
||||||
|
o Minor bugfixes (stats):
|
||||||
|
- When ExtraInfoStatistics is 0, stop including PaddingStatistics in
|
||||||
|
relay and bridge extra-info documents. Fixes bug 29017; bugfix
|
||||||
|
on 0.3.1.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (testing):
|
||||||
|
- Backport the 0.3.4 src/test/test-network.sh to 0.2.9. We need a
|
||||||
|
recent test-network.sh to use new chutney features in CI. Fixes
|
||||||
|
bug 29703; bugfix on 0.2.9.1-alpha.
|
||||||
|
- Fix a test failure on Windows caused by an unexpected "BUG"
|
||||||
|
warning in our tests for tor_gmtime_r(-1). Fixes bug 29922; bugfix
|
||||||
|
on 0.2.9.3-alpha.
|
||||||
|
- Downgrade some LOG_ERR messages in the address/* tests to
|
||||||
|
warnings. The LOG_ERR messages were occurring when we had no
|
||||||
|
configured network. We were failing the unit tests, because we
|
||||||
|
backported 28668 to 0.3.5.8, but did not backport 29530. Fixes bug
|
||||||
|
29530; bugfix on 0.3.5.8.
|
||||||
|
- Fix our gcov wrapper script to look for object files at the
|
||||||
|
correct locations. Fixes bug 29435; bugfix on 0.3.5.1-alpha.
|
||||||
|
- Decrease the false positive rate of stochastic probability
|
||||||
|
distribution tests. Fixes bug 29693; bugfix on 0.4.0.1-alpha.
|
||||||
|
- Fix intermittent failures on an adaptive padding test. Fixes one
|
||||||
|
case of bug 29122; bugfix on 0.4.0.1-alpha.
|
||||||
|
- Disable an unstable circuit-padding test that was failing
|
||||||
|
intermittently because of an ill-defined small histogram. Such
|
||||||
|
histograms will be allowed again after 29298 is implemented. Fixes
|
||||||
|
a second case of bug 29122; bugfix on 0.4.0.1-alpha.
|
||||||
|
- Detect and suppress "bug" warnings from the util/time test on
|
||||||
|
Windows. Fixes bug 29161; bugfix on 0.2.9.3-alpha.
|
||||||
|
- Do not log an error-level message if we fail to find an IPv6
|
||||||
|
network interface from the unit tests. Fixes bug 29160; bugfix
|
||||||
|
on 0.2.7.3-rc.
|
||||||
|
- Instead of relying on hs_free_all() to clean up all onion service
|
||||||
|
objects in test_build_descriptors(), we now deallocate them one by
|
||||||
|
one. This lets Coverity know that we are not leaking memory there
|
||||||
|
and fixes CID 1442277. Fixes bug 28989; bugfix on 0.3.5.1-alpha.
|
||||||
|
- Check the time in the "Expires" header using approx_time(). Fixes
|
||||||
|
bug 30001; bugfix on 0.4.0.4-rc.
|
||||||
|
|
||||||
|
o Minor bugfixes (TLS protocol):
|
||||||
|
- When classifying a client's selection of TLS ciphers, if the
|
||||||
|
client ciphers are not yet available, do not cache the result.
|
||||||
|
Previously, we had cached the unavailability of the cipher list
|
||||||
|
and never looked again, which in turn led us to assume that the
|
||||||
|
client only supported the ancient V1 link protocol. This, in turn,
|
||||||
|
was causing Stem integration tests to stall in some cases. Fixes
|
||||||
|
bug 30021; bugfix on 0.2.4.8-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (UI):
|
||||||
|
- Lower log level of unlink() errors during bootstrap. Fixes bug
|
||||||
|
29930; bugfix on 0.4.0.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (usability):
|
||||||
|
- Stop saying "Your Guard ..." in pathbias_measure_{use,close}_rate().
|
||||||
|
Some users took this phrasing to mean that the mentioned guard was
|
||||||
|
under their control or responsibility, which it is not. Fixes bug
|
||||||
|
28895; bugfix on Tor 0.3.0.1-alpha.
|
||||||
|
|
||||||
|
o Minor bugfixes (Windows, CI):
|
||||||
|
- Skip the Appveyor 32-bit Windows Server 2016 job, and 64-bit
|
||||||
|
Windows Server 2012 R2 job. The remaining 2 jobs still provide
|
||||||
|
coverage of 64/32-bit, and Windows Server 2016/2012 R2. Also set
|
||||||
|
fast_finish, so failed jobs terminate the build immediately. Fixes
|
||||||
|
bug 29601; bugfix on 0.3.5.4-alpha.
|
||||||
|
|
||||||
|
o Code simplification and refactoring:
|
||||||
|
- Introduce a connection_dir_buf_add() helper function that detects
|
||||||
|
whether compression is in use, and adds a string accordingly.
|
||||||
|
Resolves issue 28816.
|
||||||
|
- Refactor handle_get_next_bandwidth() to use
|
||||||
|
connection_dir_buf_add(). Implements ticket 29897.
|
||||||
|
- Reimplement NETINFO cell parsing and generation to rely on
|
||||||
|
trunnel-generated wire format handling code. Closes ticket 27325.
|
||||||
|
- Remove unnecessary unsafe code from the Rust macro "cstr!". Closes
|
||||||
|
ticket 28077.
|
||||||
|
- Rework SOCKS wire format handling to rely on trunnel-generated
|
||||||
|
parsing/generation code. Resolves ticket 27620.
|
||||||
|
- Split out bootstrap progress reporting from control.c into a
|
||||||
|
separate file. Part of ticket 27402.
|
||||||
|
- The .may_include files that we use to describe our directory-by-
|
||||||
|
directory dependency structure now describe a noncircular
|
||||||
|
dependency graph over the directories that they cover. Our
|
||||||
|
checkIncludes.py tool now enforces this noncircularity. Closes
|
||||||
|
ticket 28362.
|
||||||
|
|
||||||
|
o Documentation:
|
||||||
|
- Clarify that Tor performs stream isolation among *Port listeners
|
||||||
|
by default. Resolves issue 29121.
|
||||||
|
- In the manpage entry describing MapAddress torrc setting, use
|
||||||
|
example IP addresses from ranges specified for use in documentation
|
||||||
|
by RFC 5737. Resolves issue 28623.
|
||||||
|
- Mention that you cannot add a new onion service if Tor is already
|
||||||
|
running with Sandbox enabled. Closes ticket 28560.
|
||||||
|
- Improve ControlPort documentation. Mention that it accepts
|
||||||
|
address:port pairs, and can be used multiple times. Closes
|
||||||
|
ticket 28805.
|
||||||
|
- Document the exact output of "tor --version". Closes ticket 28889.
|
||||||
|
|
||||||
|
o Removed features:
|
||||||
|
- Remove the old check-tor script. Resolves issue 29072.
|
||||||
|
- Stop responding to the 'GETINFO status/version/num-concurring' and
|
||||||
|
'GETINFO status/version/num-versioning' control port commands, as
|
||||||
|
those were deprecated back in 0.2.0.30. Also stop listing them in
|
||||||
|
output of 'GETINFO info/names'. Resolves ticket 28757.
|
||||||
|
- The scripts used to generate and maintain the list of fallback
|
||||||
|
directories have been extracted into a new "fallback-scripts"
|
||||||
|
repository. Closes ticket 27914.
|
||||||
|
|
||||||
|
o Testing:
|
||||||
|
- Run shellcheck for scripts in the in scripts/ directory. Closes
|
||||||
|
ticket 28058.
|
||||||
|
- Add unit tests for tokenize_string() and get_next_token()
|
||||||
|
functions. Resolves ticket 27625.
|
||||||
|
|
||||||
|
o Code simplification and refactoring (onion service v3):
|
||||||
|
- Consolidate the authorized client descriptor cookie computation
|
||||||
|
code from client and service into one function. Closes
|
||||||
|
ticket 27549.
|
||||||
|
|
||||||
|
o Code simplification and refactoring (shell scripts):
|
||||||
|
- Cleanup scan-build.sh to silence shellcheck warnings. Closes
|
||||||
|
ticket 28007.
|
||||||
|
- Fix issues that shellcheck found in chutney-git-bisect.sh.
|
||||||
|
Resolves ticket 28006.
|
||||||
|
- Fix issues that shellcheck found in updateRustDependencies.sh.
|
||||||
|
Resolves ticket 28012.
|
||||||
|
- Fix shellcheck warnings in cov-diff script. Resolves issue 28009.
|
||||||
|
- Fix shellcheck warnings in run_calltool.sh. Resolves ticket 28011.
|
||||||
|
- Fix shellcheck warnings in run_trunnel.sh. Resolves issue 28010.
|
||||||
|
- Fix shellcheck warnings in scripts/test/coverage. Resolves
|
||||||
|
issue 28008.
|
||||||
|
|
||||||
|
|
||||||
Changes in version 0.3.5.8 - 2019-02-21
|
Changes in version 0.3.5.8 - 2019-02-21
|
||||||
Tor 0.3.5.8 backports serveral fixes from later releases, including fixes
|
Tor 0.3.5.8 backports serveral fixes from later releases, including fixes
|
||||||
for an annoying SOCKS-parsing bug that affected users in earlier 0.3.5.x
|
for an annoying SOCKS-parsing bug that affected users in earlier 0.3.5.x
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user