lukechilds/node - node - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
isaacs	97738994e0	npm: Upgrade to 1.3.19	11 years ago
Fedor Indutny	8803aa3af7	deps: update v8 to 3.22.24.9	11 years ago
jkummerow@chromium.org	39e2426b20	v8: backport fix for CVE-2013-{6639\|6640} Quoting CVE-2013-6639: The DehoistArrayIndex function in hydrogen-dehoist.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index. Quoting CVE-2013-6640: The DehoistArrayIndex function in hydrogen-dehoist.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index. Like 6b92a7, this is unlikely to affect node.js because it only runs local, trusted code. However, if there exists some module somewhere that populates an array index with remotely provided data this could very well be used to crash a remote server running node. Defense in depth and all. This is a backport of upstream commit r17801. Original commit log: Limit size of dehoistable array indices LOG=Y BUG=chromium:319835,chromium:319860 R=dslomov@chromium.org Review URL: https://codereview.chromium.org/74113002	11 years ago
Fedor Indutny	f61d9405bf	uv: Upgrade to v0.11.16	11 years ago
Timothy J Fontaine	910bc3c02d	uv: Upgrade v0.10.20	11 years ago
isaacs	a22de4f7ee	npm: Upgrade to 1.3.17	11 years ago
Fedor Indutny	6f3d60388e	gyp: build openssl-cli tool and use it in tests fix #6663	11 years ago
Fedor Indutny	153784b348	openssl: fix keypress requirement in apps on win32 Original source: http://openssl.6102.n7.nabble.com/PATCH-s-client-Fix-keypress-requirement-with-redirected-input-on-Windows-td46787.html	11 years ago
Fedor Indutny	1903240f2a	openssl: add assembly for aes and gcm	11 years ago
Fedor Indutny	04b92632bd	openssl: more asm	11 years ago
Ben Noordhuis	de8c0a51a7	v8: unbreak freebsd build Pending review of https://codereview.appspot.com/31500043/ Fixes #6576.	11 years ago
isaacs	c1452f4c6f	npm: Upgrade to v1.3.15	11 years ago
Timothy J Fontaine	1fef66ffd4	uv: upgrade to v0.11.15	11 years ago
Timothy J Fontaine	b73967e9a0	v8: upgrade to 3.22.24.5	11 years ago
Timothy J Fontaine	ac799ba0af	uv: Upgrade to v0.10.19	11 years ago
yangguo@chromium.org	007393a09d	v8: use correct timezone information on Solaris `timezone` variable contains the difference, in seconds, between UTC and local standard time (see `man 3 localtime` on Solaris). Call to `tzset` is required to apply contents of `TZ` variable to `timezone` variable. BUG=v8:2064 Review URL: https://chromiumcodereview.appspot.com/10967066 Patch from Maciej Małecki <me@mmalecki.com>. This is a back-port of upstream commit r12802 and a forward port of commit `9fa953d` from the v0.8 branch. V8 3.22 in the master branch contains the patch so no further forward-porting is necessary.	12 years ago
Ben Noordhuis	f230a1cf74	v8: upgrade to 3.22.24 This commit removes the simple/test-event-emitter-memory-leak test for being unreliable with the new garbage collector: the memory pressure exerted by the test case is too low for the garbage collector to kick in. It can be made to work again by limiting the heap size with the --max_old_space_size=x flag but that won't be very reliable across platforms and architectures.	11 years ago
Ben Noordhuis	3dcc9b93e1	v8: unbreak `make native` build The security fix from commit `6b92a713` also back-ported the test case. Said test case relies on API that is only available in newer versions of V8 and, as a result, broke the `make native` and `make <arch.mode>` builds. This commit reverts that part of the back-port. Fixes the following build error: ../test/cctest/test-api.cc: In function ‘void TestRegress260106()’: ../test/cctest/test-api.cc:17712:34: error: ‘class v8::Context’ has no member named ‘GetIsolate’	11 years ago
isaacs	8f221bc43d	npm: Upgrade to 1.3.14	11 years ago
Ben Noordhuis	c4def505cb	build: use zero overhead systemtap probes Profiling suggested that on Linux sometimes over 10% of CPU time was being spent inside the systemtap probe entry points in the binding layer, even when the process was not actively being traced with the `stap` tool. That's why this commit makes it possible to use the *_ENABLED() macros and bail out early when we're not being traced, reducing the overhead of unused probes to (almost) zero. Said macros were already being generated by `dtrace -h` but were not usable because they rely on external definitions. To remedy that, we now generate the accompanying object files with `dtrace -G`. This commit includes a change to libuv that has been landed upstream in commit joyent/libuv@3c172ea.	11 years ago
Timothy J Fontaine	a35a212f25	uv: Upgrade to v0.11.14	11 years ago
isaacs	4b5e6a38df	npm@1.3.13	11 years ago
isaacs	f6f176e108	npm@1.3.12	11 years ago
Timothy J Fontaine	a53c763c16	v8: upgrade 3.21.18.3	11 years ago
Timothy J Fontaine	8fc48bcf4c	uv: Upgrade to v0.10.18	11 years ago
Dave Pacheco	2b9e3fb183	mdb_v8: remove useless check	11 years ago
Dave Pacheco	5921158cbe	dtrace, mdb_v8: support more string, frame types This change makes several improvements to the ustack helper and MDB support: - ustack helper and MDB: add support for two-byte strings (necessary to print many filenames in stacktraces in 0.10 and later). - ustack helper: fix position numbers, which were off by a factor of two - ustack helper: fix frames with undefined Scripts (e.g., "RegExp") - ustack helper: add stub frames - MDB: add support for sliced strings - MDB: sync up with changes from the illumos version of the module Fixes #6309 Closes #6318	11 years ago
Timothy J Fontaine	711ec07d34	v8: ugprade to 3.20.17.14	11 years ago
Timothy J Fontaine	85898d1967	v8: upgrade to 3.20.17.13 fixes #6235	11 years ago
Timothy J Fontaine	55546f55d4	uv: Upgrade to v0.10.17	11 years ago
Ben Noordhuis	14687ebfc0	Revert "deps: update v8 to 3.20.17.11" After the upgrade from 3.20.17.7 to 3.20.17.11, we've begun hitting random assertions in V8 in memory-constrained / GC-heavy situations. The assertions all seem to be related to heap allocations and garbage collection but apart from that, they're all over the place. This reverts commit `970bdccc38`.	11 years ago
Fedor Indutny	970bdccc38	deps: update v8 to 3.20.17.11 fix #6235	11 years ago
Fedor Indutny	a1cf3ada62	deps: update v8 to 3.20.17.7	11 years ago
isaacs	ebeae2df51	npm: upgrade to 1.3.11	11 years ago
isaacs	1be09dfc25	npm: upgrade to v1.3.10	11 years ago
Bert Belder	6301613ff5	uv: upgrade to v0.10.16	11 years ago
Ben Noordhuis	7494c84fe6	uv: upgrade to v0.11.13 This commit changes src/tcp_wrap.cc and src/udp_wrap.cc just enough to get by (i.e. to compile and function correctly.) The new libuv API allows for more cleanup and deduplication but I'm saving that for another day.	11 years ago
Ben Noordhuis	ed8d97f572	uv: upgrade to v0.11.12 * upgrade deps/uv/ to v0.11.12. * update files in src/ after a libuv API change.	11 years ago
Bert Belder	e83a0cd016	uv: upgrade to v0.11.11	11 years ago
Trevor Norris	26bc8db33f	v8: upgrade to 3.20.17	12 years ago
Bert Belder	8333859735	uv: upgrade to v0.11.10	12 years ago
Bert Belder	6fa8398853	uv: upgrade to v0.11.9	12 years ago
Bert Belder	5508236c49	uv: update to v0.10.15	12 years ago
Timothy J Fontaine	e445fbda1f	uv: Upgrade v0.10.14	12 years ago
Timothy J Fontaine	a784abaff6	uv: Upgrade to v0.11.8	12 years ago
Ben Noordhuis	8d42c6344b	deps: upgrade http_parser to 303c4e4 Upgrade to joyent/http-parser@303c4e4. Changes: * Do not accept PUN/GEM methods as PUT/GET. * Further request method check strengthening.	12 years ago
isaacs	5abdef790c	npm: Upgrade to 1.3.8	12 years ago
Ben Noordhuis	a20d565d9c	v8: fix openbsd build This is [1] applied ahead of time. Summary: OpenBSD doesn't have <ucontext.h>. ucontext_t lives in <signal.h> and is a typedef for struct sigcontext. There is no uc_mcontext. [1] https://codereview.chromium.org/21705003/ Note: the patch has been accepted upstream but hasn't made its way into a stable release yet.	12 years ago
Ben Noordhuis	f69be329f0	v8: upgrade v8 to 3.20.14.1	12 years ago
Timothy J Fontaine	fa8efa98de	uv: Upgrade to v0.11.7	12 years ago

1 2 3 4 5 ...

1343 Commits (b26dd4e5ab9192bad72b9dc61fa4ad2d8f215da2)