src: fix error handling on async crypto operations
authorRafaelGSS <rafael.nunu@hotmail.com>
Mon, 12 May 2025 15:33:54 +0000 (12:33 -0300)
committerBastien Roucariès <rouca@debian.org>
Mon, 6 Apr 2026 14:18:52 +0000 (16:18 +0200)
commit13f31e41787c00adde37f709cbbf676e37a2688b
treea260e657af2a0774369e4b56b9bd200687623279
parentf0a859821d55f9afbdb7250c5945b9b93be67715
src: fix error handling on async crypto operations

Fixes: https://hackerone.com/reports/2817648
Co-Authored-By: Filip Skokan <panva.ip@gmail.com>
Co-Authored-By: Tobias Nießen <tniessen@tnie.de>
Backport-PR-URL: https://github.com/nodejs-private/node-private/pull/688
CVE-ID: CVE-2025-23166
PR-URL: https://github.com/nodejs-private/node-private/pull/710

origin: backport, https://github.com/nodejs/node/commit/6c57465920cf1b981a63031e71b1e4a73bf9beaa

Gbp-Pq: Name CVE-2025-23166.patch
20 files changed:
src/crypto/crypto_dh.cc
src/crypto/crypto_dh.h
src/crypto/crypto_ec.cc
src/crypto/crypto_ec.h
src/crypto/crypto_hash.cc
src/crypto/crypto_hash.h
src/crypto/crypto_hkdf.cc
src/crypto/crypto_hkdf.h
src/crypto/crypto_hmac.cc
src/crypto/crypto_hmac.h
src/crypto/crypto_pbkdf2.cc
src/crypto/crypto_pbkdf2.h
src/crypto/crypto_random.cc
src/crypto/crypto_random.h
src/crypto/crypto_scrypt.cc
src/crypto/crypto_scrypt.h
src/crypto/crypto_sig.cc
src/crypto/crypto_sig.h
src/crypto/crypto_util.h
test/parallel/test-crypto-async-sign-verify.js