Re: [tor-bugs] #19976 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS Everywhere tries to load a library with an empty name

[Tor Bug Tracker & Wiki]

#19976: HTTPS Everywhere tries to load a library with an empty name
-+-
 Reporter:  boklm|  Owner:  jsha
 Type:  defect   | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS   |Version:
  Everywhere |
 Severity:  Normal   | Resolution:  fixed
 Keywords:  TorBrowserTeam201608 |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by legind):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 A new release of HTTPS Everywhere has been made, v 5.2.3, which fixes this
 bug.  I've tested on Tor Browser, and it looks to be updating to the
 latest.  Thank you for reporting and for your patch.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19976 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS Everywhere tries to load a library with an empty name

[Tor Bug Tracker & Wiki]

#19976: HTTPS Everywhere tries to load a library with an empty name
-+-
 Reporter:  boklm|  Owner:  jsha
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS   |Version:
  Everywhere |
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201608 |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:   => TorBrowserTeam201608


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19976 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS Everywhere tries to load a library with an empty name

[Tor Bug Tracker & Wiki]

#19976: HTTPS Everywhere tries to load a library with an empty name
-+-
 Reporter:  boklm|  Owner:  jsha
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS   |Version:
  Everywhere |
 Severity:  Normal   | Resolution:
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * cc: legind (added)
 * status:  new => needs_review


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19976 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS Everywhere tries to load a library with an empty name

[Tor Bug Tracker & Wiki]

#19976: HTTPS Everywhere tries to load a library with an empty name
---+--
 Reporter:  boklm  |  Owner:  jsha
 Type:  defect | Status:  new
 Priority:  Medium |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS Everywhere  |Version:
 Severity:  Normal | Resolution:
 Keywords: |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--
Changes (by mcs):

 * cc: mcs (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19976 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS Everywhere tries to load a library with an empty name

[Tor Bug Tracker & Wiki]

#19976: HTTPS Everywhere tries to load a library with an empty name
---+--
 Reporter:  boklm  |  Owner:  jsha
 Type:  defect | Status:  new
 Priority:  Medium |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS Everywhere  |Version:
 Severity:  Normal | Resolution:
 Keywords: |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--

Comment (by boklm):

 I attached a patch that should fix this.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #19976 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS Everywhere tries to load a library with an empty name

[Tor Bug Tracker & Wiki]

#19976: HTTPS Everywhere tries to load a library with an empty name
---+--
 Reporter:  boklm  |  Owner:  jsha
 Type:  defect | Status:  new
 Priority:  Medium |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS Everywhere  |Version:
 Severity:  Normal |   Keywords:
Actual Points: |  Parent ID:
   Points: |   Reviewer:
  Sponsor: |
---+--
 The `NSS.initialize` function, called from `src/components/ssl-
 observatory.js` with an empty argument, is trying to load a library with
 an empty name.

 This is possibly causing a DLL hijacking vulnerability in Tor Browser (see
 #12736).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs