Package: nodejs / 10.15.2~dfsg-2

Metadata

Package Version Patches format
nodejs 10.15.2~dfsg-2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
dfhs_module_path_arch_triplet.patch | (download)

configure.py | 20 20 + 0 - 0 !
lib/internal/modules/cjs/loader.js | 13 12 + 1 - 0 !
test/parallel/test-module-loading-globalpaths.js | 4 2 + 2 - 0 !
3 files changed, 34 insertions(+), 3 deletions(-)

 multiarch search path, arch triplet, dfhs path for modules
ssl/acb73518b7274bacdfc133fd121e91dfd6ba460b.patch | (download)

doc/api/errors.md | 11 11 + 0 - 0 !
doc/api/tls.md | 17 14 + 3 - 0 !
lib/_tls_common.js | 39 31 + 8 - 0 !
lib/_tls_wrap.js | 4 4 + 0 - 0 !
lib/https.js | 8 8 + 0 - 0 !
lib/internal/errors.js | 4 4 + 0 - 0 !
lib/tls.js | 4 4 + 0 - 0 !
src/node_constants.cc | 4 4 + 0 - 0 !
src/node_crypto.cc | 13 10 + 3 - 0 !
test/fixtures/tls-connect.js | 69 43 + 26 - 0 !
test/parallel/test-https-agent-getname.js | 4 2 + 2 - 0 !
11 files changed, 135 insertions(+), 42 deletions(-)

 [patch] tls: add min/max protocol version options

The existing secureProtocol option only allows setting the allowed
protocol to a specific version, or setting it to "all supported
versions". It also used obscure strings based on OpenSSL C API
functions. Directly setting the min or max is easier to use and explain.

Backport-PR-URL: https://github.com/nodejs/node/pull/24676
PR-URL: https://github.com/nodejs/node/pull/24405
ssl/e5b03b82f72e6915bd24c7ef1481abd1842b84fe.patch | (download)

src/node_crypto.cc | 18 17 + 1 - 0 !
1 file changed, 17 insertions(+), 1 deletion(-)

 [patch] tls: make ossl 1.1.1 cipher list throw error

Make OpenSSL 1.1.1 error during cipher list setting if it would have
errored with OpenSSL 1.1.0.

Can be dropped after our OpenSSL fixes this upstream.

See: https://github.com/openssl/openssl/pull/7759

ssl/8fad350619e8cccb9f43f4d56f4ca743f5d069c2.patch | (download)

src/tls_wrap.cc | 5 4 + 1 - 0 !
1 file changed, 4 insertions(+), 1 deletion(-)

 [patch] tls: workaround handshakedone in renegotiation

`SSL_CB_HANDSHAKE_START` and `SSL_CB_HANDSHAKE_DONE` are called
sending HelloRequest in OpenSSL-1.1.1.
We need to check whether this is in a renegotiation state or not.

ssl/5703c7f9a657b361e8ea5f8b6eb1174fe5598a64.patch | (download)

BUILDING.md | 19 14 + 5 - 0 !
1 file changed, 14 insertions(+), 5 deletions(-)

 [patch] doc: fix assembler requirement for openssl-1.1.1

Add new requirements of assembler version for AVX-512 support
in OpenSSL-1.1.1.

use_system_node_gyp.patch | (download)

Makefile | 8 4 + 4 - 0 !
1 file changed, 4 insertions(+), 4 deletions(-)

 use system-installed node-gyp for building test modules
privacy_breach.patch | (download)

doc/template.html | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 remove google font from template.html, and link to local
make doc.patch | (download)

Makefile | 43 13 + 30 - 0 !
tools/doc/addon-verify.js | 30 10 + 20 - 0 !
tools/doc/allhtml.js | 2 1 + 1 - 0 !
tools/doc/common.js | 6 1 + 5 - 0 !
tools/doc/generate.js | 65 21 + 44 - 0 !
tools/doc/html.js | 372 154 + 218 - 0 !
tools/doc/json.js | 714 418 + 296 - 0 !
tools/doc/package.json | 4 1 + 3 - 0 !
8 files changed, 619 insertions(+), 617 deletions(-)

 build doc using marked and js-yaml
 While waiting for unified/remarked/rehyped modules to be available in debian
1005_restore_sh_javascript_nonminified.patch | (download)

doc/api_assets/sh_javascript.min.js | 348 348 + 0 - 0 !
1 file changed, 348 insertions(+)

 restore original version of dfsg-excluded file
2017_mips_configure_fpu.patch | (download)

deps/v8/src/base/cpu.cc | 21 5 + 16 - 0 !
1 file changed, 5 insertions(+), 16 deletions(-)

 use configuration directive to set mips fpu mode
test_ci_buildd.patch | (download)

Makefile | 2 1 + 1 - 0 !
test/common/index.js | 1 1 + 0 - 0 !
test/parallel/parallel.status | 33 33 + 0 - 0 !
test/sequential/sequential.status | 5 5 + 0 - 0 !
tools/test.py | 5 1 + 4 - 0 !
5 files changed, 41 insertions(+), 5 deletions(-)

 adapt test-ci build target for buildd
 * run tests with ./node
 * remove addons from test-ci suite, because it creates a dependency loop
   nodejs -> node-gyp -> nodejs which is painful to manage.
 * disabled because it requires stdin:
   + test-stdout-close-unref
   + test-regress-GH-746
 * test-tick-processor fails on ppc64 and s390x, currently investigated
   https://github.com/nodejs/node/issues/2471
 * test-cluster-disconnect sometimes fails on busy buildd, forwarded upstream
   https://github.com/nodejs/node/issues/3383
 * test-fs-watch is flaky, might be related to https://github.com/nodejs/node/issues/4082
 * huge timeout value for all platforms, buildd could be busy
 * test-npm-install must fail, debian package dfsg-repacked npm out
 * ability to override CI_NATIVE_SUITES, CI_JS_SUITES
 * disable tests failing because DNS is disabled
 * sequential/test-http2-session-timeout is flaky https://github.com/nodejs/node/issues/20628
fix_disable_cctest.patch | (download)

Makefile | 6 5 + 1 - 0 !
1 file changed, 5 insertions(+), 1 deletion(-)

 do not build cctest, build broken on debian
benchmark_without_alice.patch | (download)

benchmark/buffers/buffer-indexof-number.js | 2 1 + 1 - 0 !
benchmark/buffers/buffer-indexof.js | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

 a test uses a benchmark that read alice.html, dfsg excluded
temporarily_silence_buffer_deprecations.patch | (download)

lib/buffer.js | 3 1 + 2 - 0 !
test/parallel/parallel.status | 5 5 + 0 - 0 !
2 files changed, 6 insertions(+), 2 deletions(-)

 only emit buffer dep0005 warning if --pending-deprecation is set