node/lib/internal
RafaelGSS 6cc8d58e6f src: fix HTTP2 mem leak on premature close and ERR_PROTO
This commit fixes a memory leak when the socket is
suddenly closed by the peer (without GOAWAY notification)
and when invalid header (by nghttp2) is identified and the
connection is terminated by peer.

Refs: https://hackerone.com/reports/2841362
PR-URL: https://github.com/nodejs-private/node-private/pull/650
Reviewed-By: James M Snell <jasnell@gmail.com>
CVE-ID: CVE-2025-23085
2025-01-20 14:49:43 -03:00
..
assert
bootstrap lib: add api to detect whether source-maps are enabled 2023-11-15 10:34:11 +01:00
child_process
cluster
console bootstrap: lazy load non-essential modules 2023-11-10 09:46:18 +01:00
crypto crypto: ensure invalid SubtleCrypto JWK data import results in DataError 2024-11-02 18:50:26 +01:00
debugger doc: add description for --port flag of node inspect 2023-11-26 20:32:32 +01:00
dns module, esm: jsdoc for modules files 2023-11-23 10:51:02 +01:00
fs fs: introduce dirent.parentPath 2024-03-18 16:55:24 +00:00
http2 src: fix HTTP2 mem leak on premature close and ERR_PROTO 2025-01-20 14:49:43 -03:00
legacy
main test_runner,test: fix flaky test-runner-cli-concurrency.js 2023-11-27 11:57:21 +01:00
modules esm: fix broken assertion in legacyMainResolve 2024-11-07 17:51:24 +01:00
per_context
perf
policy
process vm: use internal versions of compileFunction and Script 2024-03-15 17:56:06 +00:00
readline readline: add paste bracket mode 2023-11-26 20:32:33 +01:00
repl
source_map bootstrap: simplify initialization of source map handlers 2023-11-10 16:21:46 +01:00
streams stream: do not defer construction by one microtick 2024-03-23 18:42:18 +00:00
test
test_runner test_runner: add test location for FileTests 2023-11-27 11:57:21 +01:00
tls tls: fix order of setting cipher before setting cert and key 2024-03-19 16:12:59 +00:00
util src: bootstrap prepare stack trace callback in shadow realm 2023-11-10 14:21:05 +01:00
v8
vm module: use symbol in WeakMap to manage host defined options 2024-03-15 17:55:29 +00:00
watch_mode
webstreams stream: use Buffer.from when constructor is a Buffer 2023-11-26 20:32:40 +01:00
worker worker: protect against user mutating well-known prototypes 2023-11-26 20:32:38 +01:00
abort_controller.js
assert.js
async_hooks.js bootstrap: lazy load non-essential modules 2023-11-10 09:46:18 +01:00
blob.js
blocklist.js
buffer.js
child_process.js
cli_table.js
constants.js
dgram.js
dtrace.js
encoding.js
error_serdes.js
errors.js esm: fix hook name in error message 2024-11-02 18:42:15 +01:00
event_target.js events: remove weak listener for event target 2023-11-26 20:32:33 +01:00
file.js
fixed_queue.js
freelist.js
freeze_intrinsics.js
heap_utils.js
histogram.js
http.js
idna.js
inspector_async_hook.js
js_stream_socket.js net: use asserts in JS Socket Stream to catch races in future 2023-11-27 11:57:14 +01:00
linkedlist.js
mime.js
net.js
options.js
priority_queue.js
promise_hooks.js
querystring.js
readme.md
repl.js
socket_list.js
socketaddress.js
stream_base_commons.js
structured_clone.js
timers.js
trace_events_async_hooks.js
tty.js
url.js url: validate pathToFileURL(path) argument as string 2023-11-27 11:57:14 +01:00
util.js util: add getCwdSafe internal util fn 2023-11-23 10:52:03 +01:00
v8_prof_polyfill.js
v8_prof_processor.js
validators.js
vm.js vm: reject in importModuleDynamically without --experimental-vm-modules 2024-03-15 17:56:10 +00:00
wasm_web_api.js
watchdog.js
webidl.js
worker.js esm: move hook execution to separate thread 2023-11-23 10:19:07 +01:00

Internal Modules

The modules in lib/internal are intended for internal use in Node.js core only, and are not accessible with require() from user modules. These modules can be changed at any time. Reliance on these modules outside of core is not supported in any way.