diff options
| author | Ben Noordhuis <info@bnoordhuis.nl> | 2016-09-08 21:52:20 +0200 |
|---|---|---|
| committer | Rod Vagg <rod@vagg.org> | 2016-09-28 11:19:18 +1000 |
| commit | 6023ba114ae2d777452e7a835c57c5b0b0ff1c2c (patch) | |
| tree | 2dcea60b51988156009b96d4bb142862e7395ad4 /deps | |
| parent | ca5f8f80e31784fc2883b352d0c22d4b74200e7e (diff) | |
| download | android-node-v8-6023ba114ae2d777452e7a835c57c5b0b0ff1c2c.tar.gz android-node-v8-6023ba114ae2d777452e7a835c57c5b0b0ff1c2c.tar.bz2 android-node-v8-6023ba114ae2d777452e7a835c57c5b0b0ff1c2c.zip | |
crypto: don't build hardware engines
Compile out hardware engines. Most are stubs that dynamically load
the real driver but that poses a security liability when an attacker
is able to create a malicious DLL in one of the default search paths.
PR-URL: https://github.com/nodejs/node-private/pull/73
Reviewed-By: Rod Vagg <rod@vagg.org>
Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
Diffstat (limited to 'deps')
| -rw-r--r-- | deps/openssl/openssl.gypi | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/deps/openssl/openssl.gypi b/deps/openssl/openssl.gypi index 3620e45c41..871cec0c7e 100644 --- a/deps/openssl/openssl.gypi +++ b/deps/openssl/openssl.gypi @@ -1263,6 +1263,11 @@ # Microsoft's IIS, which seems to be ignoring whole ClientHello after # seeing this extension. 'OPENSSL_NO_HEARTBEATS', + + # Compile out hardware engines. Most are stubs that dynamically load + # the real driver but that poses a security liability when an attacker + # is able to create a malicious DLL in one of the default search paths. + 'OPENSSL_NO_HW', ], 'openssl_default_defines_win': [ 'MK1MF_BUILD', |