| #13347 |
TicketMaster stadium view does not load
|
TicketMaster
|
needs_information
|
zyan
|
defect
|
Medium
|
| #13367 |
Rate limit gyroscope sampling frequency on FF mobile
|
tbb-security, tbb-fingerprinting, tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
| #13400 |
Canvas Fingerprinting: fonts
|
tbb-testcase, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
High
|
| #13453 |
circular link, outdated info on orbot info page
|
website, chatsecure, gibberbot, tor, proxy, transparent, polipo, privoxy, android, webpage
|
new
|
n8fr8
|
defect
|
Low
|
| #13727 |
BridgeDB should not distribute Tor Browser's default bridges
|
bridgedb-dist, tbb-bridges, anti-censorship-roadmap-september, s30-o23a1
|
assigned
|
|
defect
|
Medium
|
| #13817 |
Untange kludgey library detection, particularly for SSL forks
|
tor-build build library-detection
|
new
|
|
defect
|
High
|
| #13893 |
Torbrowser crashes on start when using MS EMET 5.x
|
tbb-security, tbb-crash, tbb-usability-stoppoint-app, fuck-mingw-gcc, GeorgKoppen201609, TorBrowserTeam201610, ff52-esr
|
assigned
|
tbb-team
|
defect
|
High
|
| #13912 |
Key Security: Zeroing Buffers Is Insufficient (AES-NI leaves keys in SSE registers)
|
security registers aesni memwipe tor-relay
|
new
|
|
defect
|
Medium
|
| #13929 |
Increase Authority reachability testing rate with low TestingAuthDirTimeToLearnReachability
|
testing, chutney, SponsorS-deferred, tor-dirauth
|
new
|
|
defect
|
Medium
|
| #13937 |
Allow the use of NoScript in whitelist mode
|
ux ui noscript
|
new
|
tbb-team
|
defect
|
Medium
|
| #13976 |
Simplify adjustment of consensus speed in testing tor networks
|
lorax, chutney, testing, tor-relay, robustness
|
new
|
|
defect
|
Medium
|
| #14006 |
Hidden service error: "We'd like to launch a circuit to handle a connection, but we already have 32 general-purpose client circuits..."
|
tor-hs, circuit-management, scaling, 033-triage-20180320, 033-removed-20180320, 033-removed-20180403, tor-dos
|
needs_information
|
|
defect
|
Medium
|
| #14034 |
Make TestingDirAuthVoteGuard/Exit/HSDir and AssumeReachable less essential in test networks
|
chutney, lorax, SponsorS-deferred, tor-dirauth, testing, test-support
|
new
|
|
defect
|
Medium
|
| #14056 |
IPredator complains that we call time() too much when running over 500Mbps
|
performance tor-relay lorax syscall vdso
|
new
|
|
defect
|
Medium
|
| #14066 |
SIGHUP: Reloading config and does not reset internal state of accounting
|
tor-relay accounting hibernation hup state
|
new
|
|
defect
|
Very Low
|
| #14186 |
Try to use fchmod() first when changing permissions on an AF_UNIX socket
|
tor-client tor-relay posix permissions
|
new
|
|
defect
|
Medium
|
| #14197 |
Reverse lookup on automapped addresses doesn't work
|
dns tor-client needs-design
|
new
|
|
defect
|
Low
|
| #14223 |
END_STREAM_REASON_TIMEOUT blurs together two very different error cases
|
tor-client error-case needs-spec
|
new
|
|
defect
|
Medium
|
| #14266 |
Make address mapping conditional on having the particular address mapping types enabled.
|
tor-client refactoring
|
new
|
|
defect
|
Low
|
| #14269 |
Imported certificate doesn't works at all
|
TBB, certificate
|
new
|
tbb-team
|
defect
|
High
|
| #14322 |
torsocks fails to wrap setcap binaries
|
setcap setuid LD_PRELOAD torsocks
|
assigned
|
|
defect
|
Medium
|
| #14354 |
Improve torflow engineering quality and deployment procedure
|
tor-dirauth, torflow, technical-debt
|
new
|
|
defect
|
High
|
| #14579 |
Clients cannot use multiple transports with a single bridge
|
tor-client tor-bridge tor-pt
|
new
|
|
defect
|
Medium
|
| #14581 |
Looking up bridge by ID may choose the wrong bridge
|
tor-bridge tor-guards tor-pt refactor
|
new
|
|
defect
|
High
|
| #14715 |
Change the default for automaphostsonresolve to be on-by-default?
|
tor-client needs-decision
|
new
|
|
defect
|
Medium
|
| #14799 |
Make failure to create extrainfo an error?
|
tor-relay needs-decision
|
reopened
|
|
defect
|
Low
|
| #14801 |
"EXCLUDE Nodes" is not respected in Orbot
|
Strict Nodes, Orbot, Exclude Nodes,
|
needs_information
|
n8fr8
|
defect
|
Medium
|
| #14827 |
Tor controller command to write its file to disk
|
tor-client tor-control needs-design
|
new
|
|
defect
|
Medium
|
| #14854 |
Document the hardlimit of HiddenServiceAuthorizeClient basic
|
tor-hs, tor-doc, hs-auth
|
new
|
|
defect
|
Medium
|
| #14883 |
Orbot handshake fails on networks with Blue Coat Systems' technology
|
Blue, coat, systems, proxySG
|
new
|
n8fr8
|
defect
|
Medium
|
| #14900 |
To link connections only if they ready
|
tor-client correctness needs-interpretation
|
reopened
|
|
defect
|
Medium
|
| #14921 |
Investigate whether we sometimes remove all predicted ports at startup
|
needs-investigation tor-client predicted-ports
|
new
|
|
defect
|
Medium
|
| #14939 |
Support ipv6 addresses in Tor Circuit DIsplay
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14957 |
Clients wait for an extra consensus before learning the correct UseGuardFraction value
|
tor-client, tor-guard, SponsorU-deferred, 032-unreached
|
new
|
|
defect
|
Medium
|
| #14985 |
NoScript Clickjacking warning when clicking on embedded content
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
High
|
| #14999 |
Most/all esc_for_log instances in control.c should change.
|
tor-spec, tor-control needs-design
|
new
|
|
defect
|
Medium
|
| #15000 |
bring some sanity to quoted strings in the controller api
|
tor-client, needs-proposal, tor-control tor-spec
|
needs_revision
|
|
defect
|
Medium
|
| #15008 |
Design an opt-in Hidden Service Public Directory Submission system
|
tor-hs needs-design research-program
|
new
|
|
defect
|
Low
|
| #15043 |
Use acx_pthread.m4 to find pthreads library
|
easy tor-relay build autoconf pthreads
|
new
|
|
defect
|
Medium
|
| #15054 |
Complete implementation of prop220 (ed25519 identity keys)
|
tor-crypto-identity, tor-ed25519-proto
|
assigned
|
|
defect
|
Low
|
| #15061 |
Support Ed25519 identities in controller interface
|
needs-proposal, prop220, needs-design tor-client tor-control
|
assigned
|
|
defect
|
Low
|
| #15062 |
Support identifying nodes by ed25519 keys in state file, other misc files
|
needs-spec, prop-220, SponsorU-deferred
|
assigned
|
|
defect
|
Low
|
| #15214 |
networkstatus_compute_consensus() is unreasonably large and should be refactored
|
tor-client refactor technical-debt intro
|
new
|
|
defect
|
Medium
|
| #15232 |
Specify a potential TLS-replacing protocol for future use in Tor.
|
SponsorZ, needs-proposal, spec sponsor3-maybe
|
new
|
|
defect
|
Medium
|
| #15239 |
Add hyperlinks in tor circuit display to show "more info" about relays
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #15380 |
log messages are doubled and unclear
|
tor-relay accounting log-message usability
|
new
|
|
defect
|
Very Low
|
| #15404 |
BridgeDB's email localisation isn't working
|
bridgedb-ui, localization, anti-censorship-roadmap, s30-o22a3
|
assigned
|
|
defect
|
Low
|
| #15470 |
cannot edit the certificates in Tor browser,
|
tbb-security, CNNIC
|
reopened
|
tbb-team
|
defect
|
Very High
|
| #15514 |
Trim the NoScript whitelist
|
tbb-security, noscript
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #15532 |
Tor Browser 4.5 displays signature validation error during update
|
tbb-firefox-patch, ff38-esr, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #15557 |
Improve relaunch logic for failed rendezvous circuits
|
tor-hs, tor-client, prop224, prop224-extra
|
new
|
|
defect
|
Low
|
| #15607 |
Tor log dates imprecise
|
tor-client tor-relay log usability needs-design
|
needs_revision
|
|
defect
|
Medium
|
| #15660 |
[feature suggestion] Need signal to totally switch to the new set of circuits
|
security needs-design tor-client
|
new
|
|
defect
|
Medium
|
| #15661 |
Same "non-loopback address" notice is printed twice
|
easy, intro, usability tor-relay torrc configuration bootstrap
|
new
|
|
defect
|
Very Low
|
| #15687 |
Make Tor Browser work with AppLocker
|
tbb-security, tbb-usability-stoppoint-app
|
new
|
tbb-team
|
defect
|
Medium
|
| #15692 |
'GETINFO config-file' command on ControlPort returns the standard torrc file when it was overridden in the command line
|
tor-control correctness easy
|
new
|
|
defect
|
Medium
|
| #15713 |
toggling DisableNetwork during bootstrap causes delay
|
tor-client, bootstrap, delay, sponsor8-maybe, tbb-needs
|
accepted
|
arma
|
defect
|
Medium
|
| #15715 |
spurious "Network is unreachable" error after setting DisableNetwork=1
|
tor-client, bootstrap, sponsor8-maybe, disablenetwork, tbb-needs
|
accepted
|
arma
|
defect
|
Medium
|
| #15785 |
New proxy settings don't close old TLS connections
|
tor-client proxy setting configuration torrc consistency
|
new
|
|
defect
|
Medium
|
| #15802 |
add automated tests for svg.in-content.enabled
|
tbb-testcase, ff78-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #15825 |
webgl.disable-extensions true about:config setting may allow DoS and breaks websites
|
tbb-security, tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #15930 |
Orbot fails to connect using VPN Mode (using Outbound Proxy)
|
orbot-15.0.0-rc3
|
new
|
n8fr8
|
defect
|
Medium
|
| #15938 |
HS descriptor cache leaks timing information to local users
|
tor-hs, tor-client needs-design maybe-bad-idea
|
new
|
|
defect
|
Medium
|
| #16027 |
APPLICATION_VERIFIER_NETWORKING_WSA_NOT_INITIALIZED in tor (via torbrowser 4.5.1)
|
Application Verifier, WSA_NOT_INITIALIZED
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #16070 |
Tor log doesn't have to be world readable
|
tor-client log permissions umask
|
new
|
|
defect
|
Low
|
| #16156 |
Tor browser does not display correct exit node
|
circuit compromised
|
new
|
tbb-team
|
defect
|
High
|
| #16255 |
Guardfraction on dirauths screws up bandwidth weights
|
tor-dirauth, tor-guard, mike-can, SponsorU-deferred
|
needs_revision
|
asn
|
defect
|
High
|
| #16294 |
Unable to bootstrap when no relays meet criteria; logging messages unhelpful
|
tor-client, bootstrap, logging
|
new
|
|
defect
|
Low
|
| #16327 |
NavigatorLanguage API needs a testcase for intl pref
|
tbb-testcase
|
assigned
|
boklm
|
defect
|
Medium
|
| #16348 |
Suppress exception chaining when PEP 3134 is merged
|
controller unactionable
|
accepted
|
atagar
|
defect
|
Low
|
| #16350 |
tor.pid should be deleted on exit in every case possible, like assert termination, and catchable signals
|
tor-relay cleanup
|
new
|
|
defect
|
Medium
|
| #16366 |
tor hangs for 30 seconds when parsing torrc ending in backslash-newline
|
lorax tor-relay tor-client configuration newline osx torrc
|
new
|
|
defect
|
Low
|
| #16394 |
orbot bug for HTC One M9
|
Connectivity, bug, error
|
new
|
n8fr8
|
defect
|
Medium
|
| #16453 |
View Source doesn't work on Tor Browser with HTTP AUTH
|
tbb-firefox-patch, tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #16546 |
Should we move anonbib to the Tor website?
|
defer-new-website, ux-team, research
|
assigned
|
cypherpunks
|
defect
|
Medium
|
| #16559 |
bwauth code needs to be smarter about failed circuits
|
tor-bwauth, sbws, scanner
|
assigned
|
juga
|
defect
|
Medium
|
| #16562 |
Harmonize curve25519-signature format with what others are doing
|
tor-relay x25519 cross-signature needs-design
|
new
|
|
defect
|
Medium
|
| #16579 |
(Sandbox) Caught a bad syscall attempt (syscall socket)
|
029-backport tor-client tor-relay linux sandbox 32bit
|
accepted
|
nickm
|
defect
|
Medium
|
| #16585 |
Long-running activity in scheduler_run() blocks network, creating information leaks
|
tor-client guard side-channel
|
new
|
|
defect
|
Medium
|
| #16598 |
fsync ed25519 master key files before closing them.
|
ed25519 tor-relay fsync easy
|
assigned
|
|
defect
|
Very Low
|
| #16621 |
Can we merge torbutton_do_new_identity with Clear Private Data?
|
tbb-torbutton-conversion
|
new
|
tbb-team
|
defect
|
Medium
|
| #16646 |
Cannibalized intro point circuits are now 4 hops, instead of 3 (HS-side)
|
tor-hs, performance, research, prop247, tor-hs
|
new
|
|
defect
|
Medium
|
| #16648 |
Libevent configuration doesn't use pkg-config
|
tor-build libevent pkg-config
|
new
|
|
defect
|
Medium
|
| #16740 |
Font defense in 5.0a4 crashes OS X 10.6.8
|
tbb-crash, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #16782 |
systemd unit file is not compatible with the AppArmorProfile= directive
|
systemd, apparmor, debian, packaging
|
new
|
|
defect
|
Medium
|
| #16805 |
Improve unit-test coverage on old and/or pure-ish functions/modules in src/or
|
testing, tor-tests-coverage, tor-tests-unit
|
new
|
|
defect
|
High
|
| #16809 |
High coverage on node/path selection functions
|
testing, tor-tests-coverage, tor-tests-unit
|
new
|
|
defect
|
High
|
| #16824 |
Emit a warning message about side channel leaks when using relays as clients
|
mike-can, tor-client, tor-relay, tor-log, sidechannel, easy, 035-triaged-in-20180711, 040-deferred-20190220
|
needs_revision
|
|
defect
|
High
|
| #16826 |
Add a mechanism to allow callgraph generator to find vtbl-like constructions
|
testing, callgraph, calltool, needs-insight
|
new
|
|
defect
|
Medium
|
| #16844 |
Slow clients can't bootstrap because they expire their consensus fetch but then receive all the bytes from it anyway, making them expire their next fetch, putting them in a terrible loop
|
needs-proposal, tor-client, low-bandwidth, sponsor4, bootstrap, 032-unreached
|
new
|
|
defect
|
High
|
| #16849 |
clear_status_flags_on_sybil might want to clear more flags
|
SponsorS-deferred, technical-debt, tor-dirauth, pending-disaster, review-group-32, review-group-34, 034-triage-20180328
|
needs_revision
|
ffmancera
|
defect
|
High
|
| #16888 |
Regression tests for Bug #2950 (Make Permissions Manager memory-only) never fails
|
tbb-testcase
|
new
|
tbb-team
|
defect
|
Medium
|
| #16926 |
Multiple OS: Tor Browser leaks domains to system DNS management.
|
tbb-security
|
new
|
tbb-team
|
defect
|
Very High
|
| #16936 |
Circuit display should show original circuit for each tab
|
tbb-torbutton, tbb-circuit-display
|
new
|
tbb-team
|
defect
|
Medium
|
| #16981 |
NoScript Option
|
noscript, tbb-usability
|
assigned
|
ma1
|
defect
|
Medium
|
| #17022 |
Tor Browser segfault during JavaScript Garbage Collection on OS X
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17028 |
silently ignore a bad/missing --defaults-torrc
|
easy tor-client bootstrap
|
needs_revision
|
|
defect
|
Medium
|
| #17032 |
Threadpool doesn't get shutdown when changing from relay to client
|
lorax tor-client tor-relay configuration
|
new
|
|
defect
|
Low
|
| #17091 |
Support our own hotfix mechanism
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #17101 |
Tests for connection_ap_handshake_rewrite_and_attach
|
coverage, tor-tests-coverage, tor-tests-unit
|
needs_revision
|
ipazmino
|
defect
|
Medium
|
