]> dgit.raspbian.org Git - nodejs.git/commit
src: fix error handling on async crypto operations
authorRafaelGSS <rafael.nunu@hotmail.com>
Mon, 12 May 2025 15:33:54 +0000 (12:33 -0300)
committerBastien Roucariès <rouca@debian.org>
Sun, 16 Aug 2026 17:34:06 +0000 (19:34 +0200)
commite6783c4f693e5cc740ba67d6bd56e7396cfdc871
tree1565eaf8639ea73c335596046971e669e19617da
parentadf22bacefabbcc33ba271267db9296824fc3ca6
src: fix error handling on async crypto operations

Fixes: https://hackerone.com/reports/2817648
Co-Authored-By: Filip Skokan <panva.ip@gmail.com>
Co-Authored-By: Tobias Nießen <tniessen@tnie.de>
Backport-PR-URL: https://github.com/nodejs-private/node-private/pull/688
CVE-ID: CVE-2025-23166
PR-URL: https://github.com/nodejs-private/node-private/pull/710

origin: backport, https://github.com/nodejs/node/commit/6c57465920cf1b981a63031e71b1e4a73bf9beaa

Gbp-Pq: Name CVE-2025-23166.patch
20 files changed:
src/crypto/crypto_dh.cc
src/crypto/crypto_dh.h
src/crypto/crypto_ec.cc
src/crypto/crypto_ec.h
src/crypto/crypto_hash.cc
src/crypto/crypto_hash.h
src/crypto/crypto_hkdf.cc
src/crypto/crypto_hkdf.h
src/crypto/crypto_hmac.cc
src/crypto/crypto_hmac.h
src/crypto/crypto_pbkdf2.cc
src/crypto/crypto_pbkdf2.h
src/crypto/crypto_random.cc
src/crypto/crypto_random.h
src/crypto/crypto_scrypt.cc
src/crypto/crypto_scrypt.h
src/crypto/crypto_sig.cc
src/crypto/crypto_sig.h
src/crypto/crypto_util.h
test/parallel/test-crypto-async-sign-verify.js