]> dgit.raspbian.org Git - nodejs.git/commit
src,lib: refactor unsafe buffer creation to remove zero-fill toggle
authorChALkeR Nikita Skovoroda <chalkerx@gmail.com>
Mon, 6 Apr 2026 14:13:34 +0000 (16:13 +0200)
committerBastien Roucariès <rouca@debian.org>
Sun, 16 Aug 2026 17:34:06 +0000 (19:34 +0200)
commit8cdfbe18e326dbc9f3adb4f69d3ab08173165a14
tree1166c64377aed26745abb5f98657aa99c35c393b
parent4942c0aac147ac9de4ac2b31b330eeb0dee97a3e
src,lib: refactor unsafe buffer creation to remove zero-fill toggle

This removes the zero-fill toggle mechanism that allowed JavaScript
to control ArrayBuffer initialization via shared memory. Instead,
unsafe buffer creation now uses a dedicated C++ API.

Refs: https://hackerone.com/reports/3405778
Co-Authored-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Co-Authored-By: Joyee Cheung <joyeec9h3@gmail.com>
Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/759
Backport-PR-URL: https://github.com/nodejs-private/node-private/pull/799
CVE-ID: CVE-2025-55131

origin: backport, https://github.com/nodejs/node/commit/51f4de4b4a52b5b0eb2c63ecbb4126577e05f636

Gbp-Pq: Name CVE-2025-55131.patch
deps/v8/include/v8-array-buffer.h
deps/v8/src/api/api.cc
lib/internal/buffer.js
lib/internal/process/pre_execution.js
src/api/environment.cc
src/node_buffer.cc