aboutsummaryrefslogtreecommitdiffstats
path: root/util/dependencies.lua
diff options
context:
space:
mode:
authorWaqas Hussain <waqas20@gmail.com>2011-11-22 02:13:42 +0500
committerWaqas Hussain <waqas20@gmail.com>2011-11-22 02:13:42 +0500
commit766d32e20c0e11395142dd950721845ed7a9e2da (patch)
tree7ab6086b158298816e22968aa27e323986e69325 /util/dependencies.lua
parentc789df45269398259083eb72b80c4ee04e8b2822 (diff)
downloadprosody-766d32e20c0e11395142dd950721845ed7a9e2da.tar.gz
prosody-766d32e20c0e11395142dd950721845ed7a9e2da.zip
util.dependencies, util.xmppstream: Move LuaExpat version checking to util.dependencies.
Diffstat (limited to 'util/dependencies.lua')
-rw-r--r--util/dependencies.lua8
1 files changed, 8 insertions, 0 deletions
diff --git a/util/dependencies.lua b/util/dependencies.lua
index 5baea942..53d2719d 100644
--- a/util/dependencies.lua
+++ b/util/dependencies.lua
@@ -136,6 +136,14 @@ function log_warnings()
log("error", "This version of LuaSec contains a known bug that causes disconnects, see http://prosody.im/doc/depends");
end
end
+ if lxp then
+ if not pcall(lxp.new, { StartDoctypeDecl = false }) then
+ log("error", "The version of LuaExpat on your system leaves Prosody "
+ .."vulnerable to denial-of-service attacks. You should upgrade to "
+ .."LuaExpat 1.1.1 or higher as soon as possible. See "
+ .."http://prosody.im/doc/depends#luaexpat for more information.");
+ end
+ end
end
return _M;