node/lib
RafaelGSS 6cc8d58e6f src: fix HTTP2 mem leak on premature close and ERR_PROTO
This commit fixes a memory leak when the socket is
suddenly closed by the peer (without GOAWAY notification)
and when invalid header (by nghttp2) is identified and the
connection is terminated by peer.

Refs: https://hackerone.com/reports/2841362
PR-URL: https://github.com/nodejs-private/node-private/pull/650
Reviewed-By: James M Snell <jasnell@gmail.com>
CVE-ID: CVE-2025-23085
2025-01-20 14:49:43 -03:00
..
assert assert: add assert/strict alias module 2020-06-25 08:37:48 -07:00
dns dns: make promise API fully constructed from lib/internal/dns/promises 2022-07-12 07:41:35 +02:00
fs
internal src: fix HTTP2 mem leak on premature close and ERR_PROTO 2025-01-20 14:49:43 -03:00
path path: add path/posix and path/win32 alias modules 2020-10-20 14:27:31 +00:00
readline readline: use addAbortListener 2023-09-16 15:48:41 -04:00
stream stream: add pipeline() for webstreams 2023-04-02 21:37:49 -04:00
test test_runner: add junit reporter 2023-11-27 11:57:19 +01:00
timers fs: use kResistStopPropagation 2023-10-28 12:24:50 +02:00
util util: add util/types alias module 2020-10-21 01:26:34 +02:00
.eslintrc.yaml lib: enforce use of trailing commas 2023-04-10 22:18:20 -04:00
_http_agent.js lib: add trailing commas to more internal files 2023-04-10 20:55:01 -04:00
_http_client.js url: offload URLSearchParams initialization 2023-07-12 11:10:18 -04:00
_http_common.js http: null the joinDuplicateHeaders property on cleanup 2023-09-16 15:39:12 -04:00
_http_incoming.js lib: add trailing commas to more internal files 2023-04-10 20:55:01 -04:00
_http_outgoing.js http: handle multi-value content-disposition header 2024-07-19 03:15:33 +00:00
_http_server.js http: remove closeIdleConnections function while calling server close 2024-04-17 12:02:53 +00:00
_stream_duplex.js stream: do not use _stream_* anymore 2021-01-05 19:02:04 +01:00
_stream_passthrough.js stream: do not use _stream_* anymore 2021-01-05 19:02:04 +01:00
_stream_readable.js stream: do not use _stream_* anymore 2021-01-05 19:02:04 +01:00
_stream_transform.js stream: do not use _stream_* anymore 2021-01-05 19:02:04 +01:00
_stream_wrap.js
_stream_writable.js stream: do not use _stream_* anymore 2021-01-05 19:02:04 +01:00
_tls_common.js tools: report unsafe string and regex primordials as lint errors 2022-06-15 21:28:47 -04:00
_tls_wrap.js tls: add ALPNCallback server option for dynamic ALPN negotiation 2023-10-28 10:58:48 +02:00
assert.js src: bootstrap prepare stack trace callback in shadow realm 2023-11-10 14:21:05 +01:00
async_hooks.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
buffer.js bootstrap: lazy load non-essential modules 2023-11-10 09:46:18 +01:00
child_process.js typings: update JSDoc for cwd in child_process 2023-11-26 20:32:32 +01:00
cluster.js cluster: use ObjectPrototypeHasOwnProperty 2023-07-07 00:06:17 +03:00
console.js
constants.js
crypto.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
dgram.js dgram: socket add asyncDispose 2023-09-16 15:48:42 -04:00
diagnostics_channel.js diagnostics_channel: fix ref counting bug when reaching zero subscribers 2023-11-10 15:54:42 +01:00
dns.js dns: call ada::idna::to_ascii directly from c++ 2023-11-10 16:21:45 +01:00
domain.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
events.js events: fix bug listenerCount don't compare wrapped listener 2023-09-16 15:39:15 -04:00
fs.js fs: remove redundant nullCheck 2023-11-26 20:32:24 +01:00
http.js http: prevent writing to the body when not allowed by HTTP spec 2023-07-07 00:06:13 +03:00
http2.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
https.js https: fix connection checking interval not clearing on server close 2023-11-27 12:10:34 +01:00
inspector.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
module.js module: implement register utility 2023-11-23 10:43:08 +01:00
net.js net: fix setting of value in 'setDefaultAutoSelectFamilyAttemptTimeout' 2023-11-10 15:36:06 +01:00
os.js tools: fix jsdoc lint 2023-07-07 00:06:10 +03:00
path.js path: fix path traversal in normalize() on Windows 2025-01-16 10:21:27 -03:00
perf_hooks.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
process.js src: disambiguate terms used to refer to builtins and addons 2022-08-22 22:39:24 -04:00
punycode.js punycode: add pending deprecation 2023-04-05 12:52:20 -04:00
querystring.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
readline.js readline: use addAbortListener 2023-09-16 15:48:41 -04:00
repl.js vm: use internal versions of compileFunction and Script 2024-03-15 17:56:06 +00:00
stream.js stream: add setter & getter for default highWaterMark (#46929) 2023-07-06 11:09:37 -04:00
string_decoder.js tools: fix jsdoc lint 2023-07-07 00:06:10 +03:00
sys.js
test.js test_runner: add initial draft for fakeTimers 2023-10-28 12:24:49 +02:00
timers.js timers: support Symbol.dispose 2023-09-16 15:48:44 -04:00
tls.js tls: add trailing commas in source files 2023-04-05 12:52:22 -04:00
trace_events.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
tty.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
url.js url: validate pathToFileURL(path) argument as string 2023-11-27 11:57:14 +01:00
util.js bootstrap: lazy load non-essential modules 2023-11-10 09:46:18 +01:00
v8.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
vm.js vm: use internal versions of compileFunction and Script 2024-03-15 17:56:06 +00:00
wasi.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
worker_threads.js lib: add trailing commas to all public core modules 2023-04-10 22:18:20 -04:00
zlib.js zlib: pause stream if outgoing buffer is full 2024-02-12 16:19:03 +01:00