From fb076f0e97d984cc9ddf8f7fa3b15661c2e25cea Mon Sep 17 00:00:00 2001
From: Benjamin Barenblat <bbaren@mit.edu>
Date: Mon, 3 Aug 2015 09:21:54 -0400
Subject: Add note about library (un-)safety

---
 DO_NOT_USE_THIS_LIBRARY.txt | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 DO_NOT_USE_THIS_LIBRARY.txt

diff --git a/DO_NOT_USE_THIS_LIBRARY.txt b/DO_NOT_USE_THIS_LIBRARY.txt
new file mode 100644
index 0000000..c814f0b
--- /dev/null
+++ b/DO_NOT_USE_THIS_LIBRARY.txt
@@ -0,0 +1,7 @@
+DO NOT USE THIS LIBRARY!
+
+This library assumes a thread-safe OpenSSL API.  Currently, Ur/Web binaries
+do _not_ use thread-safe OpenSSL, which means linking this library _will_
+introduce a potentially security-relevant race condition in your application.
+
+Upstream bug: http://www.impredicative.com/mantis/view.php?id=206
-- 
cgit v1.2.3