1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-16 00:00:07 +01:00
libwebsockets/READMEs
Andy Green cbb8b1d3e9 LWS_WITH_ASAN
This lets you build using the runtime Address Sanitizer in gcc.

LWS is heavily tested with valgrind routinely during development.  But ASAN
did find some theoretical-only issues with shifting, strictly ~(1 << 31) is
a signed int, it should be ~(1u << 31).  Gcc does the same for both, but it's
good to have the ability to find these.
2018-11-03 14:47:48 +08:00
..
mainpage.md libwebsockets.h: split out into a dir of sub-includes included by libwebsockets.h 2018-09-11 18:27:59 +08:00
README-plugin-sshd-base.md Plugins: add ssh-base ssh server plugin 2017-10-16 16:59:57 +08:00
README.build.md mbedtls: wrapper: client: Force mbedTLS to attemp to verify cert 2018-04-06 10:38:03 +08:00
README.ci.md README.ci.md 2018-10-13 08:16:27 +08:00
README.coding.md LWS_WITH_ASAN 2018-11-03 14:47:48 +08:00
README.content-security-policy.md docs: CSP 2018-09-12 13:58:13 +08:00
README.contributing.md README.contributing.md 2018-10-13 08:16:27 +08:00
README.esp32.md esp32: map basic auth to nvs 2018-02-24 08:14:17 +08:00
README.generic-sessions.md clean up top level of project 2017-09-27 08:24:05 +08:00
README.generic-table.md clean up top level of project 2017-09-27 08:24:05 +08:00
README.lwsws.md openssl tls1.3: allow setting ciphersuites at context creation time 2018-10-27 08:05:21 +08:00
README.plugin-acme.md ACME client plugin 2017-12-01 11:37:35 +08:00
README.problems.md clean up top level of project 2017-09-27 08:24:05 +08:00
README.test-apps.md autobahn fixes 2018-04-22 06:45:46 +08:00
README.unix-domain-reverse-proxy.md http proxy: client: unix socket support 2018-09-12 13:58:13 +08:00
README.vulnerability-reporting.md README.vulnerability-reporting.md 2018-10-13 08:16:27 +08:00
release-checklist http: enlarge headers buffers since they may meet large headers from vhost config 2018-09-11 18:27:59 +08:00

Vulnerability Reporting

If you become aware of an issue with lws that has a security dimension for users, please contact andy@warmcat.com by direct email.

Procedure for announcing vulnerability fixes

The problem and fixed versions will be announced on the libwebsockets mailing list and a note added to the master README.md.