forked from boostorg/beast
Vinnie Falco
749e54f31b
This resolves a medium vulnerability described in the Beast Hybrid Assessment Report by Bishop Fox, where masks generated for use with outgoing WebSocket client frames use an insufficient source of entropy and a non-cryptographically secure pseudo-random number generator. By default, all newly constructed WebSocket streams will use a uniquely seeded secure PRNG (ChaCha20 in counter mode). As this may result in increased CPU resource consumption, the function websocket::stream::secure_prng() may be used to select a faster but less secure PRNG, for the case where the caller knows that the secure generator is not necessary. On some systems, std::random_device may produce insufficient entropy to securely seed the PRNG. As this condition cannot be detected by Beast, callers may use the function websocket::seed_prng() called once at startup to provide at least 256 bits of entropy which will be used to uniquely seed all subsequent PRNGs.
97 lines
3.5 KiB
YAML
97 lines
3.5 KiB
YAML
# Copyright 2016 Peter Dimov
|
|
# Distributed under the Boost Software License, Version 1.0.
|
|
# (See accompanying file LICENSE_1_0.txt or copy at http://boost.org/LICENSE_1_0.txt)
|
|
|
|
#version: 1.0.{build}-{branch}
|
|
version: "{branch} (#{build})"
|
|
|
|
shallow_clone: true
|
|
|
|
platform:
|
|
#- x86
|
|
- x64
|
|
|
|
configuration:
|
|
#- Debug
|
|
- Release
|
|
|
|
install:
|
|
- SET BOOST_BRANCH=develop
|
|
- IF "%APPVEYOR_REPO_BRANCH%" == "master" SET BOOST_BRANCH=master
|
|
- CD ..
|
|
- git clone -b %BOOST_BRANCH% --depth 1 https://github.com/boostorg/boost.git boost-root
|
|
- cd boost-root
|
|
- git submodule update --init tools/build
|
|
- git submodule update --init tools/boostdep
|
|
- git submodule update --init libs/align
|
|
- git submodule update --init libs/asio
|
|
- git submodule update --init libs/assert
|
|
- git submodule update --init libs/config
|
|
- git submodule update --init libs/core
|
|
- git submodule update --init libs/endian
|
|
- git submodule update --init libs/filesystem
|
|
- git submodule update --init libs/intrusive
|
|
- git submodule update --init libs/locale
|
|
- git submodule update --init libs/optional
|
|
- git submodule update --init libs/smart_ptr
|
|
- git submodule update --init libs/static_assert
|
|
- git submodule update --init libs/system
|
|
- git submodule update --init libs/throw_exception
|
|
- git submodule update --init libs/type_traits
|
|
- git submodule update --init libs/utility
|
|
- git submodule update --init libs/winapi
|
|
|
|
- git submodule update --init libs/algorithm
|
|
- git submodule update --init libs/array
|
|
- git submodule update --init libs/atomic
|
|
- git submodule update --init libs/bind
|
|
- git submodule update --init libs/chrono
|
|
- git submodule update --init libs/concept_check
|
|
- git submodule update --init libs/container
|
|
- git submodule update --init libs/container_hash
|
|
- git submodule update --init libs/context
|
|
- git submodule update --init libs/conversion
|
|
- git submodule update --init libs/coroutine
|
|
- git submodule update --init libs/date_time
|
|
- git submodule update --init libs/detail
|
|
- git submodule update --init libs/exception
|
|
- git submodule update --init libs/function
|
|
- git submodule update --init libs/function_types
|
|
- git submodule update --init libs/functional
|
|
- git submodule update --init libs/fusion
|
|
- git submodule update --init libs/integer
|
|
- git submodule update --init libs/io
|
|
- git submodule update --init libs/iterator
|
|
- git submodule update --init libs/lambda
|
|
- git submodule update --init libs/lexical_cast
|
|
- git submodule update --init libs/logic
|
|
- git submodule update --init libs/math
|
|
- git submodule update --init libs/move
|
|
- git submodule update --init libs/mpl
|
|
- git submodule update --init libs/numeric/conversion
|
|
- git submodule update --init libs/pool
|
|
- git submodule update --init libs/predef
|
|
- git submodule update --init libs/preprocessor
|
|
- git submodule update --init libs/random
|
|
- git submodule update --init libs/range
|
|
- git submodule update --init libs/ratio
|
|
- git submodule update --init libs/rational
|
|
- git submodule update --init libs/serialization
|
|
- git submodule update --init libs/thread
|
|
- git submodule update --init libs/tokenizer
|
|
- git submodule update --init libs/tuple
|
|
- git submodule update --init libs/type_index
|
|
- git submodule update --init libs/typeof
|
|
- git submodule update --init libs/unordered
|
|
- rm -rf libs\beast
|
|
- MKDIR libs\beast
|
|
- XCOPY /s /e /q %APPVEYOR_BUILD_FOLDER% libs\beast\
|
|
- CMD /c bootstrap
|
|
- b2 headers
|
|
|
|
build: off
|
|
|
|
test_script:
|
|
- b2 libs/beast/example toolset=msvc-14.0 cxxflags=/permissive-
|
|
- b2 libs/beast/test toolset=msvc-14.0 cxxflags=/permissive-
|