mirror of
https://github.com/onionshare/onionshare.git
synced 2024-12-29 09:16:24 -05:00
fa29f868a7
Fixes 5 exploits 2 of the exploits effect onion services https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516
93 lines
4.1 KiB
Python
93 lines
4.1 KiB
Python
# -*- coding: utf-8 -*-
|
|
"""
|
|
OnionShare | https://onionshare.org/
|
|
|
|
Copyright (C) 2017 Micah Lee <micah@micahflee.com>
|
|
|
|
This program is free software: you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation, either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
"""
|
|
|
|
"""
|
|
This script downloads a pre-built tor binary to bundle with OnionShare.
|
|
In order to avoid a Mac gnupg dependency, I manually verify the signature
|
|
and hard-code the sha256 hash.
|
|
"""
|
|
|
|
import inspect, os, sys, hashlib, zipfile, io, shutil, subprocess
|
|
import urllib.request
|
|
|
|
def main():
|
|
dmg_url = 'https://archive.torproject.org/tor-package-archive/torbrowser/7.0.11/TorBrowser-7.0.11-osx64_en-US.dmg'
|
|
dmg_filename = 'TorBrowser-7.0.11-osx64_en-US.dmg'
|
|
expected_dmg_sha256 = '5143e4a2141a69f66869be13eef4bcaac4e6c27c78383fc8a4c38b334759f3a2'
|
|
|
|
# Build paths
|
|
root_path = os.path.dirname(os.path.dirname(os.path.abspath(inspect.getfile(inspect.currentframe()))))
|
|
working_path = os.path.join(root_path, 'build', 'tor')
|
|
dmg_tor_path = os.path.join('/Volumes', 'Tor Browser', 'TorBrowser.app', 'Contents')
|
|
dmg_path = os.path.join(working_path, dmg_filename)
|
|
dist_path = os.path.join(root_path, 'dist', 'OnionShare.app', 'Contents')
|
|
|
|
# Make sure the working folder exists
|
|
if not os.path.exists(working_path):
|
|
os.makedirs(working_path)
|
|
|
|
# Make sure the zip is downloaded
|
|
if not os.path.exists(dmg_path):
|
|
print("Downloading {}".format(dmg_url))
|
|
response = urllib.request.urlopen(dmg_url)
|
|
dmg_data = response.read()
|
|
open(dmg_path, 'wb').write(dmg_data)
|
|
dmg_sha256 = hashlib.sha256(dmg_data).hexdigest()
|
|
else:
|
|
dmg_data = open(dmg_path, 'rb').read()
|
|
dmg_sha256 = hashlib.sha256(dmg_data).hexdigest()
|
|
|
|
# Compare the hash
|
|
if dmg_sha256 != expected_dmg_sha256:
|
|
print("ERROR! The sha256 doesn't match:")
|
|
print("expected: {}".format(expected_dmg_sha256))
|
|
print(" actual: {}".format(dmg_sha256))
|
|
sys.exit(-1)
|
|
|
|
# Mount the dmg, copy data to the working path
|
|
subprocess.call(['hdiutil', 'attach', dmg_path])
|
|
|
|
# Make sure Resources/tor exists before copying files
|
|
if os.path.exists(os.path.join(dist_path, 'Resources', 'Tor')):
|
|
shutil.rmtree(os.path.join(dist_path, 'Resources', 'Tor'))
|
|
os.makedirs(os.path.join(dist_path, 'Resources', 'Tor'))
|
|
if os.path.exists(os.path.join(dist_path, 'MacOS', 'Tor')):
|
|
shutil.rmtree(os.path.join(dist_path, 'MacOS', 'Tor'))
|
|
os.makedirs(os.path.join(dist_path, 'MacOS', 'Tor'))
|
|
|
|
# Modify the tor script to adjust the path
|
|
tor_script = open(os.path.join(dmg_tor_path, 'Resources', 'TorBrowser', 'Tor', 'tor'), 'r').read()
|
|
tor_script = tor_script.replace('../../../MacOS/Tor', '../../MacOS/Tor')
|
|
open(os.path.join(dist_path, 'Resources', 'Tor', 'tor'), 'w').write(tor_script)
|
|
|
|
# Copy into dist
|
|
shutil.copyfile(os.path.join(dmg_tor_path, 'Resources', 'TorBrowser', 'Tor', 'geoip'), os.path.join(dist_path, 'Resources', 'Tor', 'geoip'))
|
|
shutil.copyfile(os.path.join(dmg_tor_path, 'Resources', 'TorBrowser', 'Tor', 'geoip6'), os.path.join(dist_path, 'Resources', 'Tor', 'geoip6'))
|
|
os.chmod(os.path.join(dist_path, 'Resources', 'Tor', 'tor'), 0o755)
|
|
shutil.copyfile(os.path.join(dmg_tor_path, 'MacOS', 'Tor', 'tor.real'), os.path.join(dist_path, 'MacOS', 'Tor', 'tor.real'))
|
|
shutil.copyfile(os.path.join(dmg_tor_path, 'MacOS', 'Tor', 'libevent-2.0.5.dylib'), os.path.join(dist_path, 'MacOS', 'Tor', 'libevent-2.0.5.dylib'))
|
|
os.chmod(os.path.join(dist_path, 'MacOS', 'Tor', 'tor.real'), 0o755)
|
|
|
|
# Unmount dmg
|
|
subprocess.call(['diskutil', 'unmount', '/Volumes/Tor Browser'])
|
|
|
|
if __name__ == '__main__':
|
|
main()
|