Commits · v1.x · github.com / v8-riscv / node

Jul 10, 2015

Working on v1.8.5 · a464ccf6
Jeremiah Senkpiel authored Jul 09, 2015

a464ccf6

2015-07-09 io.js v1.8.4 Release · c84a6370

Jeremiah Senkpiel authored Jul 09, 2015

Notable changes

* openssl: Upgrade to 1.0.2d, fixes CVE-2015-1793 (Alternate Chains
Certificate Forgery) https://github.com/nodejs/io.js/pull/2141.

c84a6370

deps: update deps/openssl/conf/arch/*/opensslconf.h · d8c22da1

Shigeki Ohtsu authored Jul 09, 2015

They should be updated according to the fix at
https://github.com/openssl/openssl/commit/b4f0d1a4a89b964dba80036a6348ca0a1913c526

PR-URL: https://github.com/nodejs/io.js/pull/2141


Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

PORT-PR-URL: https://github.com/nodejs/io.js/pull/2146
PORT-FROM: c70e68fa

d8c22da1

deps: upgrade openssl sources to 1.0.2d · 684732b2

Shigeki Ohtsu authored Jul 09, 2015

This just replaces all sources of openssl-1.0.2d.tar.gz
into deps/openssl/openssl

deps: copy all openssl header files to include dir

All symlink files in `deps/openssl/openssl/include/openssl/`
 are removed and replaced with real header files to avoid
issues on Windows.

deps: fix openssl assembly error on ia32 win32

`x86masm.pl` was mistakenly using .486 instruction set, why `cpuid` (and
perhaps others) are requiring .686 .

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>

deps: fix asm build error of openssl in x86_win32

See
https://mta.openssl.org/pipermail/openssl-dev/2015-February/000651.html

iojs needs to stop using masm and move to nasm or yasm on Win32.

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

openssl: fix keypress requirement in apps on win32

Reapply b9106137 .

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

deps: add -no_rand_screen to openssl s_client

In openssl s_client on Windows, RAND_screen() is invoked to initialize
random state but it takes several seconds in each connection.
This added -no_rand_screen to openssl s_client on Windows to skip
RAND_screen() and gets a better performance in the unit test of
test-tls-server-verify.
Do not enable this except to use in the unit test.

Fixes: https://github.com/nodejs/io.js/issues/1461
PR-URL: https://github.com/nodejs/io.js/pull/1836


Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

PR-URL: https://github.com/nodejs/io.js/pull/2141


Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

PORT-PR-URL: https://github.com/nodejs/io.js/pull/2146
PORT-FROM: ca93f7f2

684732b2

Jul 04, 2015

Working on v1.8.4 · 03c105a1
Rod Vagg authored Jul 04, 2015

03c105a1

2015-07-04 io.js v1.8.3 Release · 766a3b41

Rod Vagg authored Jul 04, 2015

Maintenance release

Notable Changes:

* v8: Fixed an out-of-band write in utf8 decoder. This is an important
  security update as it can be used to cause a denial of service
  attack.
* openssl: - Upgrade to 1.0.2b and 1.0.2c, introduces DHE
  man-in-the-middle protection (Logjam) and fixes malformed
  ECParameters causing infinite loop (CVE-2015-1788). See the
  security advisory for full details. (Shigeki Ohtsu) #1950 #1958
* build:
  - Added support for compiling with Microsoft Visual C++ 2015
  - Started building and distributing headers-only tarballs along with
    binaries

766a3b41

deps: fix out-of-band write in utf8 decoder · 78de5f85

Ben Noordhuis authored Jul 04, 2015

Originally reported by: Kris Reeves <kris.re@bbhmedia.com>

This is a back-port of commit 030f8045

 from the master branch.

Reviewed-By: Rod Vagg <rod@vagg.org>

78de5f85

build: add tar-headers target for headers-only tar · d8f260d3

Rod Vagg authored Jun 14, 2015

to replace the full src download by node-gyp, using the proper format
instead of the full source format

PR-URL: https://github.com/nodejs/io.js/pull/1975
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: 628a3ab0


Reviewed-By: William Blankenship <william.jblankenship@gmail.com>
Reviewed-By: Johan Bergström <bugs@bergstroem.nu>

d8f260d3

deps: copy all openssl header files to include dir · 83ee07b6

Shigeki Ohtsu authored Jun 19, 2015

On upgrading openssl, all symlinks in pulic header files are replaced
with nested include files. The issue was raised that installing them
leads to lost its references to real header files.
To avoid this, all public header files are copied into the
`deps/openssl/openssl/include/openssl/` directory.
As a result, we have duplicated header files under
`deps/openssl/openssl/` but copied files are refereed in build as
specified to include path in openssl.gyp.

Fixes: https://github.com/nodejs/io.js/pull/1975
PR-URL: https://github.com/nodejs/io.js/pull/2016
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: 1f371e39


Reviewed-By: Rod Vagg <rod@vagg.org>
Reviewed-By: Johan Bergström <bugs@bergstroem.nu>

83ee07b6

build: update build targets for io.js · 00ba4296

Rod Vagg authored Jun 10, 2015

PR-URL: https://github.com/nodejs/io.js/pull/1938
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: dcbb9e1d


Reviewed-By: Johan Bergström <bugs@bergstroem.nu>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Alexis Campailla <alexis@janeasystems.com>

00ba4296

build: fix cherry-pick ooops, fix comment wording · 39e2207f

Rod Vagg authored Jun 23, 2015

PR-URL: https://github.com/nodejs/io.js/pull/2036
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: c87c34c2


Reviewed-By: Alexis Campailla <alexis@janeasystems.com>

39e2207f

build: add MSVS 2015 support · 561919a6

Rod Vagg authored Apr 16, 2015

PR-URL: https://github.com/nodejs/io.js/pull/2036
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: 4208dc4f


Reviewed-By: Alexis Campailla <alexis@janeasystems.com>

561919a6

build,win: set env before generating projects · 2ce14755

Alexis Campailla authored Apr 23, 2015



vcbuild.bat calls python configure before setting GYP_MSVS_VERSION,
so SelectVisualStudioVersion (tools\gyp\pylib\gyp\MSVSVersion.py)
defaults to 'auto' and selects VS 2005.

vcbuild sets the environment in the current shell, so this issue
would manifest itself only on the first invocation of the script
in any given shell windows.

Reviewed-By: Julien Gilli <jgilli@fastmail.fm>
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: c0c0d732
PR-URL: https://github.com/joyent/node/pull/20109

2ce14755

build: remove lint from test-ci on windows · 8e1134c0

Johan Bergström authored Jun 18, 2015

PR-URL: https://github.com/nodejs/io.js/pull/2004
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: c5353d7c


Reviewed-By: Rod Vagg <rod@vagg.org>
Reviewed-By: Alexis Campailla <alexis@janeasystems.com>

8e1134c0

build: don't run lint from test-ci · e52e9908

Johan Bergström authored Jun 13, 2015

Since we will run linting before compiling or testing there's no
need to run it as part of the ci testing.

PR-URL: https://github.com/nodejs/io.js/pull/1965
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: 8d8a26e8


Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Revewied-By: Evan Lucas <evanlucas@me.com>

e52e9908

build: simplify execution of built binary · c5d1ec7f

Johan Bergström authored Jun 12, 2015

Since we aleady have a variable with path to the newly built
binary, use that instead of prefixing path. This also allows us
to pass a different path through the environment (NODE=)

PR-URL: https://github.com/nodejs/io.js/pull/1955
PORT-PR-URL: https://github.com/nodejs/io.js/pull/2101
PORT-FROM: 1ec53c04


Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Rod Vagg <rod@vagg.org>

c5d1ec7f

Jun 13, 2015

deps: update UPGRADING.md doc to openssl-1.0.2c · a9712552

Shigeki Ohtsu authored Jun 12, 2015

PR-URL: https://github.com/nodejs/io.js/pull/1958


Reviewed-By: Fedor Indutny <fedor@indutny.com>

a9712552

deps: replace all headers in openssl · 0e2d068e

Shigeki Ohtsu authored Jun 13, 2015

Change all openssl/include/openssl/*.h to include resolved symbolic
links and openssl/crypto/opensslconf.h to refer config/opensslconf.h

PR-URL: https://github.com/nodejs/io.js/pull/1958


Reviewed-By: Fedor Indutny <fedor@indutny.com>

0e2d068e

deps: add -no_rand_screen to openssl s_client · 310b8d11

Shigeki Ohtsu authored May 27, 2015

In openssl s_client on Windows, RAND_screen() is invoked to initialize
random state but it takes several seconds in each connection.
This added -no_rand_screen to openssl s_client on Windows to skip
RAND_screen() and gets a better performance in the unit test of
test-tls-server-verify.
Do not enable this except to use in the unit test.

Fixes: https://github.com/nodejs/io.js/issues/1461
PR-URL: https://github.com/nodejs/io.js/pull/1836


Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

310b8d11

openssl: fix keypress requirement in apps on win32 · 5c29c0c5

Shigeki Ohtsu authored Feb 17, 2015

Reapply b9106137 .

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

5c29c0c5

deps: fix asm build error of openssl in x86_win32 · a4729467

Shigeki Ohtsu authored Feb 13, 2015

See
https://mta.openssl.org/pipermail/openssl-dev/2015-February/000651.html

iojs needs to stop using masm and move to nasm or yasm on Win32.

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

a4729467

deps: fix openssl assembly error on ia32 win32 · b2467e3e

Fedor Indutny authored Jan 08, 2014

`x86masm.pl` was mistakenly using .486 instruction set, why `cpuid` (and
perhaps others) are requiring .686 .

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>

b2467e3e

deps: upgrade openssl sources to 1.0.2c · e548abb8

Shigeki Ohtsu authored Jun 13, 2015

This just replaces all sources of openssl-1.0.2c.tar.gz
into deps/openssl/openssl

PR-URL: https://github.com/nodejs/io.js/pull/1958


Reviewed-By: Fedor Indutny <fedor@indutny.com>

e548abb8

Jun 12, 2015

tls: make server not use DHE in less than 1024bits · c65484a7

Shigeki Ohtsu authored May 20, 2015

DHE key lengths less than 1024bits is already weaken as pointed out in
https://weakdh.org/ . 1024bits will not be safe in near future. We
will extend this up to 2048bits somedays later.

PR-URL: https://github.com/nodejs/io.js/pull/1739


Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Fedor Indutny <fedor@indutny.com>

c65484a7

deps: update asm files for openssl-1.0.2b · 1feaa68e

Shigeki Ohtsu authored Jun 12, 2015

asm files are generated as
  - In `deps/openssl/asm/`, make with CC=gcc and ASM=nasm
  - In `deps/openssl/asm_obsolute/`, make with no envs for compilers

Fixes: https://github.com/nodejs/io.js/issues/1921
PR-URL: https://github.com/nodejs/io.js/pull/1950


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

1feaa68e

deps: replace all headers in openssl · 151720fa

Shigeki Ohtsu authored Jun 12, 2015

Change all openssl/include/openssl/*.h to include resolved symbolic
links and openssl/crypto/opensslconf.h to refer config/opensslconf.h

Fixes: https://github.com/nodejs/io.js/issues/1921
PR-URL: https://github.com/nodejs/io.js/pull/1950


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

151720fa

deps: add -no_rand_screen to openssl s_client · 139da6a0

Shigeki Ohtsu authored May 27, 2015

In openssl s_client on Windows, RAND_screen() is invoked to initialize
random state but it takes several seconds in each connection.
This added -no_rand_screen to openssl s_client on Windows to skip
RAND_screen() and gets a better performance in the unit test of
test-tls-server-verify.
Do not enable this except to use in the unit test.

Fixes: https://github.com/nodejs/io.js/issues/1461
PR-URL: https://github.com/nodejs/io.js/pull/1836


Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

139da6a0

openssl: fix keypress requirement in apps on win32 · 2cd7f73d

Shigeki Ohtsu authored Feb 17, 2015

Reapply b9106137 .

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

2cd7f73d

deps: fix asm build error of openssl in x86_win32 · 28364282

Shigeki Ohtsu authored Feb 13, 2015

See
https://mta.openssl.org/pipermail/openssl-dev/2015-February/000651.html

iojs needs to stop using masm and move to nasm or yasm on Win32.

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

28364282

deps: fix openssl assembly error on ia32 win32 · d593b552

Fedor Indutny authored Jan 08, 2014

`x86masm.pl` was mistakenly using .486 instruction set, why `cpuid` (and
perhaps others) are requiring .686 .

Fixes: https://github.com/iojs/io.js/issues/589
PR-URL: https://github.com/iojs/io.js/pull/1389


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>

d593b552

deps: upgrade openssl sources to 1.0.2b · 2a3367a4

Shigeki Ohtsu authored Jun 12, 2015

This just replaces all sources of openssl-1.0.2b.tar.gz
into deps/openssl/openssl

Fixes: https://github.com/nodejs/io.js/issues/1921
PR-URL: https://github.com/nodejs/io.js/pull/1950


Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

2a3367a4

May 19, 2015

win,node-gyp: make delay-load hook C89 compliant · 77f51840

Sharat M R authored Apr 27, 2015

This fixes building compiled addons with Visual Studio 2010.

PR-URL: https://github.com/TooTallNate/node-gyp/pull/616


Reviewed-By: Bert Belder <bertbelder@gmail.com>

77f51840

May 18, 2015

Working on v1.8.3 · 1e758e06
Rod Vagg authored May 17, 2015

1e758e06

2015-05-17 io.js v1.8.2 Release · ca63d684

Rod Vagg authored May 17, 2015

Maintenance release

Notable Changes:

* crypto: significantly reduced memory usage for TLS (Fedor Indutny &
  Сковорода Никита Андреевич) #1529
* npm: Upgrade npm to 2.9.0. See the v2.8.4 and v2.9.0 release notes for
  details.

ca63d684

May 14, 2015

test: extend timeouts for ARMv6 · 32a6dbcf

Rod Vagg authored Apr 29, 2015

Based on tests running on original Raspberry Pi

PR-URL: https://github.com/iojs/io.js/pull/1554
PORT-PR-URL: https://github.com/iojs/io.js/pull/1560
PORT-FROM: v2.x / f9b226c1


Reviewed-By: Roman Reiss <me@silverwind.io>

32a6dbcf

fs: validate fd on fs.write · 4030545a

Julian Duque authored Apr 28, 2015

PR-URL: #1553
PORT-PR-URL: https://github.com/iojs/io.js/pull/1560
PORT-FROM: v2.x / f9c681cf


Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

4030545a

string_decoder: don't cache Buffer.isEncoding · 898d4238

Brian White authored Apr 28, 2015

Some modules are monkey-patching Buffer.isEncoding, so without this
they cannot do that.

Fixes: https://github.com/iojs/io.js/issues/1547
PR-URL: https://github.com/iojs/io.js/pull/1548
PORT-PR-URL: https://github.com/iojs/io.js/pull/1560
PORT-FROM: v2.x / 0fa6c4a6


Reviewed-By: Evan Lucas <evanlucas@me.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

898d4238

build: remove -J from test-ci · 65dd10e9

Rod Vagg authored Apr 28, 2015

parallel tests still not working on most build slaves

PR-URL: https://github.com/iojs/io.js/pull/1544
PORT-PR-URL: https://github.com/iojs/io.js/pull/1560
PORT-FROM: v2.x / 2a3c8c18


Reviewed-By: Johan Bergström <bugs@bergstroem.nu>

65dd10e9

test: adjust Makefile/test-ci, add to vcbuild.bat · 5896fe5c

Rod Vagg authored Apr 26, 2015

PR-URL: https://github.com/iojs/io.js/pull/1530
PORT-PR-URL: https://github.com/iojs/io.js/pull/1560
PORT-FROM: v2.x / 54721391


Reviewed-By: Johan Bergström <bugs@bergstroem.nu>

5896fe5c

tls_wrap: use localhost if options.host is empty · 71274b02

Guilherme Souza authored Apr 21, 2015

tls.connect(options) with no options.host should accept a certificate
with CN: 'localhost'. Fix Error: Hostname/IP doesn't match
certificate's altnames: "Host: undefined. is not cert's CN: localhost"

'localhost' is not added directly to defaults because that is not
always desired (for example, when using options.socket)

PR-URL: https://github.com/iojs/io.js/pull/1493
PORT-PR-URL: https://github.com/iojs/io.js/pull/1560
PORT-FROM: v2.x / a7d74633
Fixes: https://github.com/iojs/io.js/issues/1489


Reviewed-By: Brendan Ashworth <brendan.ashworth@me.com>
Reviewed-By: Roman Reiss <me@silverwind.io>

71274b02