gitroo-admin/node
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
node/test/cctest
History
Exact
Filip Skokan 9e4dfc7bba
 crypto: guard WebCrypto cipher output length 
Reject WebCrypto cipher operations whose computed output length would
exceed INT_MAX before passing the length to OpenSSL.

This avoids signed overflow in the AES and ChaCha20-Poly1305 one-shot
cipher paths and turns oversized inputs into a clean operation failure.

Refs: https://hackerone.com/reports/3760016
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/878
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
CVE-ID: CVE-2026-48933
2026-06-17 20:02:06 +02:00
..
inspector test: fix small compile warning in test_network_requests_buffer.cc 2025-11-07 18:11:36 +01:00
node_test_fixture.cc build: fix pointer compression builds 2025-05-31 13:23:23 +02:00
node_test_fixture.h src,test: unregister the isolate after disposal and before freeing 2025-05-02 17:07:18 -03:00
test_aliased_buffer.cc src: move AliasedBuffer implementation to -inl.h 2023-03-01 17:45:02 +01:00
test_base64.cc src, deps: add nbytes library 2024-06-21 07:38:37 -07:00
test_base_object_ptr.cc src: add BaseObjectPtr nullptr operations 2025-05-02 17:06:16 -03:00
test_cppgc.cc src,test: unregister the isolate after disposal and before freeing 2025-05-02 17:07:18 -03:00
test_crypto_clienthello.cc
test_dataqueue.cc src, lib: fixup lint and format issues for DataQueue/Blob 2023-02-19 16:26:59 -08:00
test_diagnostics_channel.cc src: add C++ support for diagnostics channels 2026-04-10 14:52:13 +02:00
test_environment.cc src: add initial support for ESM in embedder API 2026-02-22 23:16:14 +01:00
test_inspector_socket.cc src: prefer data accessor of string and vector 2023-05-03 14:09:23 +00:00
test_inspector_socket_server.cc src: use ranges library (C++20) more systematically 2025-07-03 10:50:12 +02:00
test_json_utils.cc
test_linked_binding.cc node-api: use Node-API in comments 2026-01-27 22:52:26 +01:00
test_lru_cache.cc sqlite: add tagged template 2025-09-24 09:03:39 +02:00
test_node_api.cc test: make IsolateData per-isolate in cctest 2023-06-25 05:41:19 +00:00
test_node_crypto.cc crypto: guard WebCrypto cipher output length 2026-06-17 20:02:06 +02:00
test_node_crypto_env.cc src: update ECDASSigPointer implementation in ncrypto 2025-01-14 23:54:39 +00:00
test_node_postmortem_metadata.cc src: make AsyncWrap subclass internal field counts explicit 2026-04-10 15:54:18 +02:00
test_node_task_runner.cc src: fix positional args in task runner 2024-05-08 11:37:07 +00:00
test_path.cc path,win: fix bug in resolve and normalize 2024-11-05 23:21:54 +00:00
test_per_process.cc src: build v8 tick processor as built-in source text modules 2026-04-08 23:52:58 +02:00
test_platform.cc src,test: unregister the isolate after disposal and before freeing 2025-05-02 17:07:18 -03:00
test_quic_arena.cc quic: use arena allocation for packets 2026-05-07 17:32:44 +02:00
test_quic_cid.cc quic: move quic behind compile time flag 2026-05-07 17:32:44 +02:00
test_quic_error.cc quic: move quic behind compile time flag 2026-05-07 17:32:44 +02:00
test_quic_preferredaddress.cc quic: move quic behind compile time flag 2026-05-07 17:32:44 +02:00
test_quic_tokens.cc quic: move quic behind compile time flag 2026-05-07 17:32:44 +02:00
test_report.cc test: make IsolateData per-isolate in cctest 2023-06-25 05:41:19 +00:00
test_sockaddr.cc src: use spaceship operator in SocketAddress 2024-12-03 07:15:14 -08:00
test_string_bytes.cc src: migrate WriteOneByte to WriteOneByteV2 2025-09-04 10:15:14 +02:00
test_traced_value.cc src: internalize v8::ConvertableToTraceFormat in traces 2025-08-21 19:01:01 +02:00
test_util.cc test: update test_util.cc for coverage 2024-10-14 06:41:27 +00:00