Opened 4 years ago

Last modified 3 years ago

#18138 new defect

Two circuits for one domain (Circuit visualizer sometimes shows the "wrong" exit node)

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: gk Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Making an arbitrary number of new circuits (either with the new identity button or when the Tor client creates circuits while browsing) eventually causes the circuit view in Torbutton to show the wrong exit node.

I have noticed this in Tor Browser 5.0.3 through Tor Browser 5.0.7

A far as I can tell, this is not related to architecture or OS nor to my network or even to machines owned by me. Also the problem is not limited to any particular website and it has nothing to do with JavaScript. I noticed this on Linux 64-bit and 32-bit on every Tor Browser version above and Windows 64-bit and 32-bit on version 5.0.3 (I've not checked since then). However I have not tested this in Mac OS X at all.

When testing this I found that the number of new circuits that are needed to reproduce this varies. Sometimes it happened first time I visited check.torproject.org, other times I spent 10-15 minutes creating new identities.

A screenshot can be found on stack exchange. https://tor.stackexchange.com/questions/9460/why-does-torbutton-circuit-view-not-consistently-show-the-correct-exit-node

Child Tickets

Change History (5)

comment:1 Changed 4 years ago by gk

Cc: gk added

comment:2 Changed 3 years ago by bugzilla

Seems it shows the exit node that is/was used by *.torproject.org in the other tabs when new circuit had to be created for check.torproject.org.

Version 0, edited 3 years ago by bugzilla (next)

comment:3 Changed 3 years ago by bugzilla

Keywords: tbb-torbutton tbb-circuit-display removed
Summary: Circuit visualizer sometimes shows the wrong exit nodeTwo circuits for one domain (Circuit visualizer sometimes shows the "wrong" exit node)

Right after New Identity:

getFirstPartyURI failed for chrome://browser/content/browser.xul: 0x80070057
[09-10 14:17:28] Torbutton INFO: tor SOCKS: https://check.torproject.org/?lang=en_US via torproject.org:81a70b4ee5a36062744b2f8290e9c706
[09-10 14:17:28] Torbutton INFO: controlPort >> 650 STREAM 573 NEW 0 check.torproject.org:443 SOURCE_ADDR=127.0.0.1:55083 PURPOSE=USER
[09-10 14:17:29] Torbutton INFO: controlPort >> 650 STREAM 573 SENTCONNECT 51 check.torproject.org:443
[09-10 14:17:29] Torbutton INFO: streamEvent.CircuitID: 51
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo circuit-status
[09-10 14:17:29] Torbutton INFO: controlPort >> 250+circuit-status=
52 BUILT $GUARD,$F88D1795F4977A3D1D7FCB1E6159ECE53B13A4B4~YesWeScan,$DD8BD7307017407FCC36F8D04A688F74A0774C02~DFRI0 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:15.376318 SOCKS_USERNAME="--unknown--" SOCKS_PASSWORD="6a92a8a6d482f3fdafcbc5e6206efef6"
51 BUILT $GUARD,$C64BD98931AA5C945270CE9C6882FF7AB6603B86~DrInsekTor,$DED6892FF89DBD737BA689698A171B2392EB3E82~ThorExit BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:14.376260 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"
50 BUILT $GUARD,$5D7D8E6CB9F57303D9437ED4DE46EA14CED3B16B~Iridium33,$578E007E5E4535FBFEF7758D8587B07B4C8C5D06~marylou1 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:13.377203
.
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:29] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ns/id/GUARD
[09-10 14:17:29] Torbutton INFO: controlPort >> 250+ns/id/GUARD 443 80
s Fast Guard HSDir Running Stable V2Dir Valid
w Bandwidth=31100
.
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ip-to-country/GUARD
[09-10 14:17:29] Torbutton INFO: controlPort >> 250-ip-to-country/GUARD
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:29] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ns/id/C64BD98931AA5C945270CE9C6882FF7AB6603B86
[09-10 14:17:29] Torbutton INFO: controlPort >> 250+ns/id/C64BD98931AA5C945270CE9C6882FF7AB6603B86=
r DrInsekTor xkvZiTGqXJRScM6caIL/erZgO4Y VBGrvhnai+xG76hmJOUcQqKXlj4 2016-09-09 23:32:51 91.143.91.142 443 80
s Fast Guard HSDir Running Stable V2Dir Valid
w Bandwidth=7700
.
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ip-to-country/91.143.91.142
[09-10 14:17:29] Torbutton INFO: controlPort >> 250-ip-to-country/91.143.91.142=de
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:29] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ns/id/DED6892FF89DBD737BA689698A171B2392EB3E82
[09-10 14:17:29] Torbutton INFO: controlPort >> 250+ns/id/DED6892FF89DBD737BA689698A171B2392EB3E82=
r ThorExit 3taJL/idvXN7polpihcbI5LrPoI 2u1NvHQZ0Is4j5oFHN5qkE6UiOo 2016-09-10 05:10:49 92.222.38.67 443 80
s Exit Fast Guard Running Stable V2Dir Valid
w Bandwidth=8410
.
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ip-to-country/92.222.38.67
[09-10 14:17:29] Torbutton INFO: controlPort >> 250-ip-to-country/92.222.38.67=fr
250 OK
[09-10 14:17:29] Torbutton WARN: no SOCKS credentials found for current document.
[09-10 14:17:29] Torbutton INFO: controlPort >> 650 STREAM 573 REMAP 51 138.201.14.212:443 SOURCE=EXIT
[09-10 14:17:29] Torbutton INFO: controlPort >> 650 STREAM 573 SUCCEEDED 51 138.201.14.212:443
[09-10 14:17:29] Torbutton INFO: tor SOCKS: http://ocsp.digicert.com/ via torproject.org:81a70b4ee5a36062744b2f8290e9c706
[09-10 14:17:29] Torbutton INFO: controlPort >> 650 STREAM 574 NEW 0 ocsp.digicert.com:80 SOURCE_ADDR=127.0.0.1:55084 PURPOSE=USER
getFirstPartyURI failed for chrome://browser/content/browser.xul: 0x80070057
[09-10 14:17:31] Torbutton INFO: controlPort >> 650 STREAM 574 SENTCONNECT 53 ocsp.digicert.com:80
[09-10 14:17:31] Torbutton INFO: streamEvent.CircuitID: 53
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo circuit-status
[09-10 14:17:31] Torbutton INFO: controlPort >> 250+circuit-status=
52 BUILT $GUARD,$F88D1795F4977A3D1D7FCB1E6159ECE53B13A4B4~YesWeScan,$DD8BD7307017407FCC36F8D04A688F74A0774C02~DFRI0 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:15.376318 SOCKS_USERNAME="--unknown--" SOCKS_PASSWORD="6a92a8a6d482f3fdafcbc5e6206efef6"
51 BUILT $GUARD,$C64BD98931AA5C945270CE9C6882FF7AB6603B86~DrInsekTor,$DED6892FF89DBD737BA689698A171B2392EB3E82~ThorExit BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:14.376260 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"
50 BUILT $GUARD,$5D7D8E6CB9F57303D9437ED4DE46EA14CED3B16B~Iridium33,$578E007E5E4535FBFEF7758D8587B07B4C8C5D06~marylou1 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:13.377203
53 BUILT $GUARD,$8672E8A01B4D3FA4C0BBE21C740D4506302EA487~OrangeLine,$B7828C22ECC3DA13480DAC1ECD4194F89F742EF6~RedMonster BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:30.376175 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"
.
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:31] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ns/id/GUARD
[09-10 14:17:31] Torbutton INFO: controlPort >> 250+ns/id/GUARD 443 80
s Fast Guard HSDir Running Stable V2Dir Valid
w Bandwidth=31100
.
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ip-to-country/GUARD
[09-10 14:17:31] Torbutton INFO: controlPort >> 250-ip-to-country/GUARD
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:31] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ns/id/8672E8A01B4D3FA4C0BBE21C740D4506302EA487
[09-10 14:17:31] Torbutton INFO: controlPort >> 250+ns/id/8672E8A01B4D3FA4C0BBE21C740D4506302EA487=
r OrangeLine hnLooBtNP6TAu+IcdA1FBjAupIc dHTwCCmyYGhzBYpMarPMbpLoT7Y 2016-09-10 04:26:08 188.166.23.127 443 80
s Fast Guard Running Stable V2Dir Valid
w Bandwidth=77000
.
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ip-to-country/188.166.23.127
[09-10 14:17:31] Torbutton INFO: controlPort >> 250-ip-to-country/188.166.23.127=nl
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:31] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ns/id/B7828C22ECC3DA13480DAC1ECD4194F89F742EF6
[09-10 14:17:31] Torbutton INFO: controlPort >> 250+ns/id/B7828C22ECC3DA13480DAC1ECD4194F89F742EF6=
r RedMonster t4KMIuzD2hNIDawezUGU+J90LvY YDtIYcJGv1/3/16v37Oi91vRmms 2016-09-10 04:19:16 31.220.43.190 110 9300
s Exit Fast HSDir Running Stable V2Dir Valid
w Bandwidth=12000
.
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ip-to-country/31.220.43.190
[09-10 14:17:31] Torbutton INFO: controlPort >> 250-ip-to-country/31.220.43.190=nl
250 OK
[09-10 14:17:31] Torbutton WARN: no SOCKS credentials found for current document.
[09-10 14:17:31] Torbutton INFO: controlPort >> 650 STREAM 574 REMAP 53 93.184.220.29:80 SOURCE=EXIT
[09-10 14:17:31] Torbutton INFO: controlPort >> 650 STREAM 574 SUCCEEDED 53 93.184.220.29:80
getFirstPartyURI failed for chrome://browser/content/browser.xul: 0x80070057
[09-10 14:17:32] Torbutton INFO: tor SOCKS: https://check.torproject.org/torcheck/img/tor-on.png via torproject.org:81a70b4ee5a36062744b2f8290e9c706
[09-10 14:17:32] Torbutton INFO: tor SOCKS: https://check.torproject.org/torcheck/img/tor-on.png via torproject.org:81a70b4ee5a36062744b2f8290e9c706
getFirstPartyURI failed for chrome://browser/content/browser.xul: 0x80070057
[09-10 14:17:36] Torbutton INFO: controlPort >> 650 STREAM 572 CLOSED 52 93.184.220.29:80 REASON=END REMOTE_REASON=DONE
[09-10 14:17:37] Torbutton INFO: controlPort >> 650 STREAM 573 CLOSED 51 138.201.14.212:443 REASON=END REMOTE_REASON=DONE

comment:4 Changed 3 years ago by gk

Status: newneeds_information

So, what is the bug about now, after the log got pasted? Originally, I assumed this bug is about the circuit display not getting updated properly (the description goes basically to https://i.stack.imgur.com/uRiTV.png). But the tbb-circuit-display keyword got removed with the log. So, if the issue is a different one now, why got this bug hjiacked?

comment:5 in reply to:  4 Changed 3 years ago by bugzilla

Status: needs_informationnew

Replying to gk:
The issue is the same as on your screenshot. But it turned out that the reason was different, and circuit visualizer was OK (comment:2).
Don't you like logs? It shows that

[09-10 14:17:31] Torbutton INFO: controlPort >> 250+circuit-status=
52 BUILT $GUARD,$F88D1795F4977A3D1D7FCB1E6159ECE53B13A4B4~YesWeScan,$DD8BD7307017407FCC36F8D04A688F74A0774C02~DFRI0 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:15.376318 SOCKS_USERNAME="--unknown--" SOCKS_PASSWORD="6a92a8a6d482f3fdafcbc5e6206efef6"
51 BUILT $GUARD,$C64BD98931AA5C945270CE9C6882FF7AB6603B86~DrInsekTor,$DED6892FF89DBD737BA689698A171B2392EB3E82~ThorExit BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:14.376260 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"
50 BUILT $GUARD,$5D7D8E6CB9F57303D9437ED4DE46EA14CED3B16B~Iridium33,$578E007E5E4535FBFEF7758D8587B07B4C8C5D06~marylou1 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:13.377203
53 BUILT $GUARD,$8672E8A01B4D3FA4C0BBE21C740D4506302EA487~OrangeLine,$B7828C22ECC3DA13480DAC1ECD4194F89F742EF6~RedMonster BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:30.376175 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"

circuits 51 and 53 are for the same domain SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706". So Tor Check shows IP of the first exit node (CID 51), and the circuit visualizer shows IP of the last exit node (CID 53).

Note: See TracTickets for help on using tickets.