r***y
发帖数: 4379 | 1 iojs 才3.3.1
按理说 node 是 redhat, iojs 才是fedora 啊.
js社区真感觉是一锅腊八粥. | l**********n
发帖数: 8443 | 2 what is fixed?
【在 r***y 的大作中提到】
: iojs 才3.3.1
: 按理说 node 是 redhat, iojs 才是fedora 啊.
: js社区真感觉是一锅腊八粥.
| r***y
发帖数: 4379 | 3 Notable changes
buffer: Fixed a bug introduced in v4.1.0 where allocating a new zero-
length buffer can result in the next allocation of a TypedArray in
JavaScript not being zero-filled. In certain circumstances this could result
in data leakage via reuse of memory space in TypedArrays, breaking the
normally safe assumption that TypedArrays should be always zero-filled. (
Trevor Norris) #2931.
http: Guard against response-splitting of HTTP trailing headers added
via response.addTrailers() by removing new-line ([rn]) characters from
values. Note that standard header values are already stripped of new-line
characters. The expected security impact is low because trailing headers are
rarely used. (Ben Noordhuis) #2945.
npm: Upgrade to npm 2.14.4 from 2.14.3, see release notes for full
details (Kat Marchán) #2958
Upgrades graceful-fs on multiple dependencies to no longer rely on
monkey-patching fs
Fix npm link for pre-release / RC builds of Node
v8: Update post-mortem metadata to allow post-mortem debugging tools to
find and inspect:
JavaScript objects that use dictionary properties (Julien Gilli) #
2959
ScopeInfo and thus closures (Julien Gilli) #2974
more on : https://github.com/nodejs/node/blob/v4.1.1/CHANGELOG.md
【在 l**********n 的大作中提到】
: what is fixed?
| e*******o
发帖数: 4654 | | n*****t
发帖数: 22014 | 5 Peter fired
【在 l**********n 的大作中提到】
: what is fixed?
|
|
