6cc8d58e6f
This commit fixes a memory leak when the socket is suddenly closed by the peer (without GOAWAY notification) and when invalid header (by nghttp2) is identified and the connection is terminated by peer. Refs: https://hackerone.com/reports/2841362 PR-URL: https://github.com/nodejs-private/node-private/pull/650 Reviewed-By: James M Snell <jasnell@gmail.com> CVE-ID: CVE-2025-23085 |
||
|---|---|---|
| .. | ||
| assert | ||
| dns | ||
| fs | ||
| internal | ||
| path | ||
| readline | ||
| stream | ||
| test | ||
| timers | ||
| util | ||
| .eslintrc.yaml | ||
| _http_agent.js | ||
| _http_client.js | ||
| _http_common.js | ||
| _http_incoming.js | ||
| _http_outgoing.js | ||
| _http_server.js | ||
| _stream_duplex.js | ||
| _stream_passthrough.js | ||
| _stream_readable.js | ||
| _stream_transform.js | ||
| _stream_wrap.js | ||
| _stream_writable.js | ||
| _tls_common.js | ||
| _tls_wrap.js | ||
| assert.js | ||
| async_hooks.js | ||
| buffer.js | ||
| child_process.js | ||
| cluster.js | ||
| console.js | ||
| constants.js | ||
| crypto.js | ||
| dgram.js | ||
| diagnostics_channel.js | ||
| dns.js | ||
| domain.js | ||
| events.js | ||
| fs.js | ||
| http.js | ||
| http2.js | ||
| https.js | ||
| inspector.js | ||
| module.js | ||
| net.js | ||
| os.js | ||
| path.js | ||
| perf_hooks.js | ||
| process.js | ||
| punycode.js | ||
| querystring.js | ||
| readline.js | ||
| repl.js | ||
| stream.js | ||
| string_decoder.js | ||
| sys.js | ||
| test.js | ||
| timers.js | ||
| tls.js | ||
| trace_events.js | ||
| tty.js | ||
| url.js | ||
| util.js | ||
| v8.js | ||
| vm.js | ||
| wasi.js | ||
| worker_threads.js | ||
| zlib.js | ||