aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBenjamin Barenblat <bbaren@mit.edu>2015-08-03 09:21:54 -0400
committerBenjamin Barenblat <bbaren@mit.edu>2015-08-03 09:21:54 -0400
commitfb076f0e97d984cc9ddf8f7fa3b15661c2e25cea (patch)
treeac69e700c3faa45feb6c2c5897d878d36831ceae
parent67aa9d138c9f8b966015d480fc77351c6fd77b68 (diff)
Add note about library (un-)safety
-rw-r--r--DO_NOT_USE_THIS_LIBRARY.txt7
1 files changed, 7 insertions, 0 deletions
diff --git a/DO_NOT_USE_THIS_LIBRARY.txt b/DO_NOT_USE_THIS_LIBRARY.txt
new file mode 100644
index 0000000..c814f0b
--- /dev/null
+++ b/DO_NOT_USE_THIS_LIBRARY.txt
@@ -0,0 +1,7 @@
+DO NOT USE THIS LIBRARY!
+
+This library assumes a thread-safe OpenSSL API. Currently, Ur/Web binaries
+do _not_ use thread-safe OpenSSL, which means linking this library _will_
+introduce a potentially security-relevant race condition in your application.
+
+Upstream bug: http://www.impredicative.com/mantis/view.php?id=206