Commit Graph

11 Commits

Author SHA1 Message Date
sthen
ae18481c37 update to libevent 2.0.22, various fixes including CVE-2014-6272 (integer
overflow in evbuffer_add() and related functions).
2015-01-06 21:28:05 +00:00
landry
d2250507c8 Instead of shuffling things around after arc4random_addrandom() removal,
take a stronger stance and remove evutil_secure_rng_add_bytes() from
libevent's API. Nothing calls it anyway, and there's even a big scary
warning (tm) in libevent's header..

---
You should almost never need to call this function; it should be
sufficient to invoke evutil_secure_rng_init(), or let Libevent take
care of calling evutil_secure_rng_init() on its own.

If you call this function as a _replacement_ for the regular
entropy sources, then you need to be sure that your input
contains a fairly large amount of strong entropy.  Doing so is
notoriously hard: most people who try get it wrong.  Watch out!
---

Bump event_core major, and remove the now useless configure.in patch.

Discussed with/ok sthen@
2013-11-11 21:54:57 +00:00
jca
62b678fc7a Fixup after arc4random_addrandom/arc4random_stir removal.
If we can detect arc4random but not mentioned functions, then we don't
need to use them.  ok naddy@
2013-10-22 19:55:11 +00:00
ajacoutot
58f1a6f9f6 USE_LIBTOOL=Yes is the default now. 2013-03-21 08:45:11 +00:00
espie
bcf3856632 PERMIT_* / REGRESS->TEST sweep 2013-03-11 10:50:00 +00:00
dcoppa
70b24a11f9 Bugfix update to libevent-2.0.21
From David Hill
2012-12-11 11:59:31 +00:00
dcoppa
25049950c8 Bugfix update to 2.0.20
While here, add pthread to WANTLIB

Initial diff from David Hill
2012-09-26 07:36:09 +00:00
dcoppa
ac90a412d6 Bugfix update to 2.0.19. From dhill. 2012-05-13 13:50:17 +00:00
dcoppa
0c596b7764 Bugfix update to 2.0.18.
from dhill@
2012-04-05 14:07:44 +00:00
naddy
b793b565ac update to 2.0.17; based on a submission by Gonzalo L. R. 2012-03-17 21:09:01 +00:00
naddy
530c7ea2c9 Import libevent 2.0.13.
Libevent is a library for writing fast portable nonblocking IO.

This port omits all the libevent1 compatibility parts so it does
not clash with libevent1 from base.  Applications will link with
-levent_core (-levent_extra) and pkg-config is set up this way.

Verified that none of our libevent1-using ports pick this up by
accident.
2011-09-23 08:50:12 +00:00