lukechilds/node - node - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
Ben Noordhuis	0dcbecd32b	crypto: fix uninitialized memory access in openssl ASN1_STRING_to_UTF8() passes an ASN1_STRING to ASN1_STRING_set() but forgot to initialize the `length` field. Fixes the following valgrind error: $ valgrind -q --track-origins=yes --num-callers=19 \ out/Debug/node test/simple/test-tls-client-abort.js ==2690== Conditional jump or move depends on uninitialised value(s) ==2690== at 0x784B69: ASN1_STRING_set (asn1_lib.c:382) ==2690== by 0x809564: ASN1_mbstring_ncopy (a_mbstr.c:204) ==2690== by 0x8090F0: ASN1_mbstring_copy (a_mbstr.c:86) ==2690== by 0x782F1F: ASN1_STRING_to_UTF8 (a_strex.c:570) ==2690== by 0x78F090: asn1_string_canon (x_name.c:409) ==2690== by 0x78EF17: x509_name_canon (x_name.c:354) ==2690== by 0x78EA7D: x509_name_ex_d2i (x_name.c:210) ==2690== by 0x788058: ASN1_item_ex_d2i (tasn_dec.c:239) ==2690== by 0x7890D4: asn1_template_noexp_d2i (tasn_dec.c:746) ==2690== by 0x788CB6: asn1_template_ex_d2i (tasn_dec.c:607) ==2690== by 0x78877A: ASN1_item_ex_d2i (tasn_dec.c:448) ==2690== by 0x7890D4: asn1_template_noexp_d2i (tasn_dec.c:746) ==2690== by 0x788CB6: asn1_template_ex_d2i (tasn_dec.c:607) ==2690== by 0x78877A: ASN1_item_ex_d2i (tasn_dec.c:448) ==2690== by 0x787C93: ASN1_item_d2i (tasn_dec.c:136) ==2690== by 0x78F5E4: d2i_X509 (x_x509.c:141) ==2690== by 0x7C9B91: PEM_ASN1_read_bio (pem_oth.c:81) ==2690== by 0x7CA506: PEM_read_bio_X509 (pem_x509.c:67) ==2690== by 0x703C9A: node::crypto::SecureContext::AddRootCerts(v8::Arguments const&) (node_crypto.cc:497) ==2690== Uninitialised value was created by a stack allocation ==2690== at 0x782E89: ASN1_STRING_to_UTF8 (a_strex.c:560)	13 years ago
Bert Belder	da945a7376	openssl: make perlasm target pentium or newer for masm outputs When perlasm generates MASM code it sets the assembler target to 468. In this mode MASM refuses to assemble a couple of instructions. Bumping the target to 686 solves this problem.	12 years ago
Bert Belder	eb29c4b2e6	openssl: disable HT sidechannel attack mitigation It used to be off before. It's extremely unlikely that such an attack would be a viable attack against node. And it makes AES much slower.	12 years ago
Fedor Indutny	f317f5aee9	openssl: update to 1.0.1e	12 years ago
isaacs	4911a30803	npm: Upgrade to 1.2.12	12 years ago
isaacs	73be4608d9	npm: Upgrade to v1.2.11	12 years ago
isaacs	e4a856e0ba	V8: Reapply floating patches	12 years ago
isaacs	0c2e5ec840	V8: Upgrade to 3.15.11.15	12 years ago
isaacs	5aef65a98a	npm: Upgrade to v1.2.10	12 years ago
Bryan Cantrill	202b5db4ef	v8: loosen artificial mmap constraint Fixes #4010.	12 years ago
Bert Belder	1a87776be9	deps: upgrade libuv to 034ea31	12 years ago
isaacs	e722ca32d9	npm: Upgrade to v1.2.3	12 years ago
isaacs	7a2ebce8d8	V8: Reapply floating patches	12 years ago
isaacs	8024252877	V8: Upgrade to 3.15.11.10	12 years ago
Bert Belder	e2acf26a91	deps: upgrade libuv to e4d8cba	12 years ago
Ben Noordhuis	814bdf0f51	deps: upgrade libuv to 7841f77	12 years ago
isaacs	4d32fc5964	npm: Upgrade to v1.2.2	12 years ago
isaacs	0459a60232	npm: Upgrade to 1.2.2	12 years ago
Ben Noordhuis	8b0f3ce397	v8: add %p option to --logfile, expands to pid Useful when you are profiling multiple instances of V8 concurrently. Submitted upstream: http://code.google.com/p/v8/issues/detail?id=2503 Refs #4617.	12 years ago
Ben Noordhuis	952e42de72	deps: upgrade libuv to 4ba03dd	12 years ago
Ben Noordhuis	9668df8b39	v8: work around String::WriteAscii segfault See http://code.google.com/p/v8/issues/detail?id=2493 for details. Once the patch lands in upstream V8, this commit can be reverted.	12 years ago
yangguo@chromium.org	926c90bc64	v8: Hardfloat does not imply VFPv3, only VFPv2. Raspberry Pi is an example. BUG=v8:2393 Review URL: https://chromiumcodereview.appspot.com/11570061 Patch from Chi-Thanh Christopher Nguyen <nguyenchithanh@gmail.com>. git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@13232 ce2b1a6d-e550-0410-aec6-3dcde31c8c00 This is a backport of v8/v8@44419ad089b729a1aab4a5f27c0833e2ce69d28b.	12 years ago
Ben Noordhuis	e4f2a140d2	deps: upgrade libuv to 8e3e60f	12 years ago
Ben Noordhuis	8018113910	v8: remove optimization switches Remove compiler switches from $(TOPLEVEL)/deps/v8/build/common.gypi, we set them globally in $(TOPLEVEL)/common.gypi. Commit `7b4d95a` introduced the switches again, resulting in V8 getting built without any optimizations. This commit is essentially a rehash of commit `4b8629d`.	12 years ago
Fedor Indutny	d22bd9e3c4	deps: update v8 to 3.15.11.7	12 years ago
Ben Noordhuis	31fc52ab53	deps: upgrade libuv to 9aab5d4	12 years ago
yangguo@chromium.org	438e0c6d75	v8: Hardfloat does not imply VFPv3, only VFPv2. Raspberry Pi is an example. BUG=v8:2393 Review URL: https://chromiumcodereview.appspot.com/11570061 Patch from Chi-Thanh Christopher Nguyen <nguyenchithanh@gmail.com>. git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@13232 ce2b1a6d-e550-0410-aec6-3dcde31c8c00 This is a backport of v8/v8@44419ad089b729a1aab4a5f27c0833e2ce69d28b.	12 years ago
isaacs	aa742ddf80	npm: Upgrade to v1.2.0	12 years ago
Ben Noordhuis	93591a2a88	v8: remove optimization switches Remove compiler switches from $(TOPLEVEL)/deps/v8/build/common.gypi, we set them globally in $(TOPLEVEL)/common.gypi. Commit `7b4d95a` introduced the switches again, resulting in V8 getting built without any optimizations. This commit is essentially a rehash of commit `4b8629d`.	12 years ago
Fedor Indutny	0054264d88	v8: update to 3.15.11.5	12 years ago
Ben Noordhuis	ce1b33a9dc	v8: remove optimization switches Remove compiler switches from $(TOPLEVEL)/deps/v8/build/common.gypi, we set them globally in $(TOPLEVEL)/common.gypi. Commit `7b4d95a` introduced the switches again, resulting in V8 getting built without any optimizations. This commit is essentially a rehash of commit `4b8629d`.	12 years ago
Fedor Indutny	7b4d95a976	deps: update v8 to 3.15.11	12 years ago
Ben Noordhuis	a7cc53067d	deps: upgrade libuv to 4997738	12 years ago
Ben Noordhuis	6ecb0cd65d	openssl: clean up openssl.gyp Remove obsolete build configuration that escaped the purge in `7eaea7f`.	12 years ago
isaacs	d30e76e0e8	npm: upgrade to 1.1.70	12 years ago
Bert Belder	7475982801	openssl: enable optimized asm code on x86 and x64	12 years ago
Bert Belder	5edbb53c45	openssl: regenerate asm files for openssl 1.0.1	12 years ago
Bert Belder	1b5c5b137d	openssl: update makefile for asm files to work with openssl 1.0.1	12 years ago
Bert Belder	1d97db5acf	openssl: disable HT sidechannel attack mitigation It used to be off before. It's extremely unlikely that such an attack would be a viable attack against node. And it makes AES much slower.	12 years ago
Bert Belder	aeae22cbb2	openssl: revert empty_OPENSSL_cpuid_setup.patch	12 years ago
Bert Belder	2e6180a62a	openssl: make perlasm target pentium or newer for masm outputs When perlasm generates MASM code it sets the assembler target to 468. In this mode MASM refuses to assemble a couple of instructions. Bumping the target to 686 solves this problem.	12 years ago
Bert Belder	7eaea7f9e5	openssl: clean up and merge configuration files This patch brings the openssl library that is built with gyp closer to what the standard build system produces. All opensslconf.h versions are now merged into a single file, which makes it easier for compiled addons to locate this file.	12 years ago
Ben Noordhuis	7b2ef2de20	deps: upgrade libuv to dc559a5	12 years ago
Fedor Indutny	ba754524a9	deps: upgrade libuv to b86ed94	12 years ago
Ben Noordhuis	6cf68aead6	deps: upgrade libuv to e079a99	12 years ago
isaacs	b09f97068e	npm: Upgrade to v1.1.69	12 years ago
Ben Noordhuis	f8999da514	build: avoid -Wno-old-style-declaration with gcc 4.2 Fixes the build on FreeBSD <= 9 with the default compiler. Fixes #4186.	12 years ago
isaacs	db008f7cce	npm: Upgrade to 1.1.66	12 years ago
Ben Noordhuis	a25ebb1997	v8: fix dragonflybsd build * fix gyp build * don't require libexecinfo, it's not there * libpthread doesn't implement sem_timedwait(), fall back to sem_wait() Upstreamed in https://codereview.chromium.org/11421013/	12 years ago
Ben Noordhuis	1e738c5ef2	build: make python executable configurable Upstreamed in https://codereview.chromium.org/11418101/ Fixes #4287.	12 years ago

1 2 3 4 5 ...

1095 Commits (9f682265d6631a29457abeb53827d01fa77493c8)