{"push_id":1098560734,"size":5,"distinct_size":5,"ref":"refs/heads/master","head":"a4f94b427170bdef44a4c4ba45ff36664fab6597","before":"330ea769efe83d4a117c86f482998a9613d51230","commits":[{"sha":"e6b35f4a86e788659d8ba2dada815492480a1382","author":{"email":"59bd0a3ff43b32849b319e645d4798d8a5d1e889@bnoordhuis.nl","name":"Ben Noordhuis"},"message":"crypto: disable ssl compression at build time\n\nSSL compression was first disabled at runtime in March 2011 in commit\ne83c6959 (\"Disable compression with OpenSSL.\") for performance reasons\nand was later shown to be vulnerable to information leakage (CRIME.)\nLet's stop compiling it in altogether.\n\nThis commit removes a broken CHECK from src/node_crypto.cc; broken\nbecause sk_SSL_COMP_num() returns -1 for a NULL stack, not 0.  As a\nresult, node.js would abort when linked to an OPENSSL_NO_COMP build\nof openssl.\n\nPR-URL: https://github.com/nodejs/node/pull/6582\nReviewed-By: Anna Henningsen <anna@addaleax.net>\nReviewed-By: Fedor Indutny <fedor.indutny@gmail.com>\nReviewed-By: James M Snell <jasnell@gmail.com>","distinct":true,"url":"https://api.github.com/repos/Trott/io.js/commits/e6b35f4a86e788659d8ba2dada815492480a1382"},{"sha":"b261178a5204ca38183af9fe6c32720e46d84b51","author":{"email":"59bd0a3ff43b32849b319e645d4798d8a5d1e889@bnoordhuis.nl","name":"Ben Noordhuis"},"message":"src: remove pre-openssl 1.0 legacy code\n\nSSL_CIPHER and SSL_METHOD are always const with the version of openssl\nthat we support, no need to check OPENSSL_VERSION_NUMBER first.\n\nPR-URL: https://github.com/nodejs/node/pull/6582\nReviewed-By: Anna Henningsen <anna@addaleax.net>\nReviewed-By: Fedor Indutny <fedor.indutny@gmail.com>\nReviewed-By: James M Snell <jasnell@gmail.com>","distinct":true,"url":"https://api.github.com/repos/Trott/io.js/commits/b261178a5204ca38183af9fe6c32720e46d84b51"},{"sha":"6db772d648d2f2a79a4426e6b06fe1de298cd80c","author":{"email":"59bd0a3ff43b32849b319e645d4798d8a5d1e889@bnoordhuis.nl","name":"Ben Noordhuis"},"message":"src: remove unused #include statement\n\nstrcasecmp() is not used in src/node_http_parser.cc so there is no need\nto include its header file.\n\nPR-URL: https://github.com/nodejs/node/pull/6582\nReviewed-By: Anna Henningsen <anna@addaleax.net>\nReviewed-By: Fedor Indutny <fedor.indutny@gmail.com>\nReviewed-By: James M Snell <jasnell@gmail.com>","distinct":true,"url":"https://api.github.com/repos/Trott/io.js/commits/6db772d648d2f2a79a4426e6b06fe1de298cd80c"},{"sha":"f6940dfa4627301bbd1a24530ac3f4fe3fe8494c","author":{"email":"59bd0a3ff43b32849b319e645d4798d8a5d1e889@bnoordhuis.nl","name":"Ben Noordhuis"},"message":"src: don't use locale-sensitive strcasecmp()\n\nstrcasecmp() is affected by the current locale as configured through\ne.g. the LC_ALL environment variable and the setlocale() libc function.\n\nIt can result in unpredictable results across systems so replace it with\na function that isn't susceptible to that.\n\nPR-URL: https://github.com/nodejs/node/pull/6582\nReviewed-By: Anna Henningsen <anna@addaleax.net>\nReviewed-By: Fedor Indutny <fedor.indutny@gmail.com>\nReviewed-By: James M Snell <jasnell@gmail.com>","distinct":true,"url":"https://api.github.com/repos/Trott/io.js/commits/f6940dfa4627301bbd1a24530ac3f4fe3fe8494c"},{"sha":"a4f94b427170bdef44a4c4ba45ff36664fab6597","author":{"email":"59bd0a3ff43b32849b319e645d4798d8a5d1e889@bnoordhuis.nl","name":"Ben Noordhuis"},"message":"deps: update comment about PURIFY define\n\nPURIFY makes OpenSSL zero out some buffers.  It also stops RAND_bytes()\nfrom using the existing contents of the destination buffer as a source\nof entropy, which according to some papers, is a possible attack vector\nfor reducing the overall entropy.\n\nPR-URL: https://github.com/nodejs/node/pull/6582\nReviewed-By: Anna Henningsen <anna@addaleax.net>\nReviewed-By: Fedor Indutny <fedor.indutny@gmail.com>\nReviewed-By: James M Snell <jasnell@gmail.com>","distinct":true,"url":"https://api.github.com/repos/Trott/io.js/commits/a4f94b427170bdef44a4c4ba45ff36664fab6597"}]}