gitroo-admin/node
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
node/test/cctest
History
Exact
Filip Skokan 38b4c5ed51
 crypto: guard WebCrypto cipher output length 
Reject WebCrypto cipher operations whose computed output length would
exceed INT_MAX before passing the length to OpenSSL.

This avoids signed overflow in the AES and ChaCha20-Poly1305 one-shot
cipher paths and turns oversized inputs into a clean operation failure.

Refs: https://hackerone.com/reports/3760016
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
Backport-PR-URL: https://github.com/nodejs-private/node-private/pull/879
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/878
CVE-ID: CVE-2026-48933
2026-06-17 19:52:20 +02:00
..
inspector test: fix small compile warning in test_network_requests_buffer.cc 2026-02-19 18:46:21 +01:00
node_test_fixture.cc build: fix pointer compression builds 2025-06-10 14:52:17 +02:00
node_test_fixture.h test: make IsolateData per-isolate in cctest 2023-06-25 05:41:19 +00:00
test_aliased_buffer.cc src: move AliasedBuffer implementation to -inl.h 2023-03-01 17:45:02 +01:00
test_base64.cc src, deps: add nbytes library 2024-06-25 10:52:38 +02:00
test_base_object_ptr.cc src: add BaseObjectPtr nullptr operations 2025-05-19 12:14:08 +02:00
test_cppgc.cc src: use effective cppgc wrapper id to deduce non-cppgc id 2023-07-21 16:44:23 +02:00
test_crypto_clienthello.cc test: use CHECK instead of EXPECT where necessary 2022-10-14 14:10:48 -04:00
test_dataqueue.cc src, lib: fixup lint and format issues for DataQueue/Blob 2023-02-19 16:26:59 -08:00
test_environment.cc src: lock the isolate properly in IsolateData destructor 2025-04-17 10:50:55 -03:00
test_inspector_socket.cc src: prefer data accessor of string and vector 2023-05-03 14:09:23 +00:00
test_inspector_socket_server.cc test: fix coverity warning in test 2022-07-12 15:50:56 -04:00
test_json_utils.cc src: fix json utils escapes for U+000B 2022-06-14 11:56:00 +08:00
test_linked_binding.cc node-api: use Node-API in comments 2026-02-24 08:38:56 +01:00
test_node_api.cc test: make IsolateData per-isolate in cctest 2023-06-25 05:41:19 +00:00
test_node_crypto.cc crypto: guard WebCrypto cipher output length 2026-06-17 19:52:20 +02:00
test_node_crypto_env.cc src: update ECDASSigPointer implementation in ncrypto 2025-02-03 20:10:01 +01:00
test_node_postmortem_metadata.cc test: fix DebugSymbolsTest.ReqWrapList on PPC64LE 2022-09-06 10:06:42 +02:00
test_node_task_runner.cc src: fix positional args in task runner 2024-05-11 18:55:47 +02:00
test_path.cc path,win: fix bug in resolve and normalize 2025-09-17 12:34:17 +00:00
test_per_process.cc src: make BuiltinLoader threadsafe and non-global 2023-01-18 22:03:00 +00:00
test_platform.cc src: lock the isolate properly in IsolateData destructor 2025-04-17 10:50:55 -03:00
test_quic_cid.cc quic: rework TLSContext, additional cleanups 2024-04-29 22:46:27 +02:00
test_quic_error.cc quic: rework TLSContext, additional cleanups 2024-04-29 22:46:27 +02:00
test_quic_tokens.cc quic: rework TLSContext, additional cleanups 2024-04-29 22:46:27 +02:00
test_report.cc test: make IsolateData per-isolate in cctest 2023-06-25 05:41:19 +00:00
test_sockaddr.cc src: use spaceship operator in SocketAddress 2025-01-05 12:57:33 -05:00
test_traced_value.cc src: internalize v8::ConvertableToTraceFormat in traces 2025-09-20 03:33:24 +00:00
test_util.cc test: update test_util.cc for coverage 2024-11-27 01:23:15 -05:00