Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

Tags

browser, bug, bundle, linux, security, tor

Special Forums Cybersecurity Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

03-19-2012

Registered User

1, 0

Join Date: Feb 2012

Last Activity: 19 March 2012, 2:03 PM EDT

Posts: 1

Thanks Given: 0

Thanked 0 Times in 0 Posts

Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

There is an EVIL bug in at least the Linux (2.2.35-8) Tor Browser Bundle start-tor-browser script. It will log things like domain names to a file in the root of the browser bundle.

trac.torproject.org/projects/tor/ticket/5417

Ticket #5417 (new defect)

RelativeLink.sh in Tor browser bundle has small typo causing debug mode to be always turned on

Reported by: cypherpunks
Priority: critical
Component: Tor bundles/installation

Description

TBB starts in debug mode disregardless of --debug switch used or not. This is caused by small bug on line 208 on RelativeLink.sh, where it says

if [ "${debug}" ];

where it should say

if [ "${debug}" == 1];

or

if [ ${debug} -eq 1 ];

madeinindia

View Public Profile for madeinindia

Find all posts by madeinindia

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Is this a bug of linux's "ls" command?

I found an interesting thing with ls. do the following steps in your linux: open a terminal mkdir x cd x echo "aaa" > test1 ls <you will see test1> Don't close the terminal, open another terminal rm -r x mkdir x cd x echo "aaa" > test2 ls <you will see test2> Now go to the first...

LEARN ABOUT PLAN9

bundle

BUNDLE(1)						      General Commands Manual							 BUNDLE(1)

NAME

       bundle - collect files for distribution

SYNOPSIS

       bundle file ...

DESCRIPTION

       Bundle  writes  on  its	standard output a shell script for rc(1) or a Bourne shell which, when executed, will recreate the original files.
       Its main use is for distributing small numbers of text files by mail(1).

       Although less refined than standard archives from ar(1) or tar(1), a bundle file is self-documenting and complete;  little  preparation	is
       required on the receiving machine.

EXAMPLES

       bundle mkfile *.[ch] | mail kremvax!boris
	      Send  a  makefile  to Boris together with related and files.  Upon receiving the mail, Boris may save the file sans postmark, say in
	      gift/horse, then do

       cd gift; rc horse; mk

SOURCE

       /rc/bin/bundle

SEE ALSO

       ar(1), tar(1), mail(1)

BUGS

       Bundle will not create directories and is unsatisfactory for non-text files.
       Beware of gift horses.

																	 BUNDLE(1)

Cybersecurity