3 people d4d9f3915f src,lib: refactor unsafe buffer creation to remove zero-fill toggle ...

This removes the zero-fill toggle mechanism that allowed JavaScript
to control ArrayBuffer initialization via shared memory. Instead,
unsafe buffer creation now uses a dedicated C++ API.

Refs: https://hackerone.com/reports/3405778
Co-Authored-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Co-authored-by: Joyee Cheung <joyeec9h3@gmail.com>
Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/759
Backport-PR-URL: https://github.com/nodejs-private/node-private/pull/798
CVE-ID: CVE-2025-55131

2026-01-09 18:11:49 -03:00

..

assert

…

dns

…

fs

…

inspector

lib: revert to using default derived class constructors

2025-09-20 06:16:14 +00:00

internal

src,lib: refactor unsafe buffer creation to remove zero-fill toggle

2026-01-09 18:11:49 -03:00

path

…

readline

lib: revert to using default derived class constructors

2025-09-20 06:16:14 +00:00

stream

…

test

test_runner: do not expose internal loader

2024-08-14 08:37:04 +02:00

timers

lib: remove unnecessary optional chaining

2024-11-27 11:03:33 -05:00

util

…

_http_agent.js

cli: add --use-env-proxy

2025-10-18 20:35:56 +02:00

_http_client.js

http,https: add built-in proxy support in http/https.request and Agent

2025-10-18 12:07:57 +02:00

_http_common.js

http: optimize checkIsHttpToken for short strings

2025-10-07 17:29:36 +02:00

_http_incoming.js

lib: prefer optional chaining

2024-10-04 10:20:24 +02:00

_http_outgoing.js

http,https: give names to anonymous or misnamed functions

2025-06-10 14:52:13 +02:00

_http_server.js

http: improve writeEarlyHints by avoiding for-of loop

2025-10-22 23:44:05 +02:00

_stream_duplex.js

…

_stream_passthrough.js

…

_stream_readable.js

…

_stream_transform.js

…

_stream_wrap.js

…

_stream_writable.js

…

_tls_common.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

_tls_wrap.js

lib: add TLSSocket default error handler

2026-01-07 16:39:59 +01:00

assert.js

lib: restructure assert to become a class

2025-08-26 11:22:39 +02:00

async_hooks.js

lib: do not modify prototype deprecated asyncResource (encore)

2025-09-20 06:10:44 +00:00

buffer.js

util: harden more built-in classes against prototype pollution

2025-01-05 13:05:32 -05:00

child_process.js

child_process: remove unsafe array iteration

2025-09-20 03:33:57 +00:00

cluster.js

…

console.js

…

constants.js

…

crypto.js

tools: add lint rule to keep primordials in ASCII order

2024-04-29 22:46:28 +02:00

dgram.js

dgram: restore buffer optimization in fixBufferList

2025-10-07 17:29:41 +02:00

diagnostics_channel.js

diagnostics_channel: fix race condition with diagnostics_channel and GC

2025-10-07 17:29:40 +02:00

dns.js

dns: remove redundant code using common variable

2025-04-17 10:51:33 -03:00

domain.js

domain: remove deprecated API call

2025-08-26 11:22:39 +02:00

eslint.config_partial.mjs

lib,src: support DOMException ser-des

2025-07-27 20:28:14 +02:00

events.js

lib: prefer AsyncIteratorPrototype primordial

2025-08-26 11:22:35 +02:00

fs.js

lib,permission: require full read and write to symlink APIs

2026-01-07 16:38:01 +01:00

http2.js

…

http.js

http: expose websockets

2024-07-16 12:01:14 +02:00

https.js

cli: add --use-env-proxy

2025-10-18 20:35:56 +02:00

inspector.js

inspector: initial support for Network.loadNetworkResource

2025-08-04 12:25:23 +02:00

module.js

lib: allow skipping source maps in node_modules

2025-02-06 01:10:44 +01:00

net.js

lib: make ERM functions into wrappers returning undefined

2025-06-10 17:22:59 +02:00

os.js

os: fix netmask format check condition in getCIDR function

2025-05-19 12:14:00 +02:00

path.js

path: refactor path joining logic for clarity and performance

2025-09-20 06:17:29 +00:00

perf_hooks.js

…

process.js

…

punycode.js

punycode: limit deprecation warning

2025-02-06 01:10:36 +01:00

querystring.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

readline.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

repl.js

repl: add isValidParentheses check before wrap input

2025-10-07 16:07:13 +02:00

sea.js

sea: implement sea.getAssetKeys()

2025-09-20 06:16:51 +00:00

sqlite.js

sqlite: add DatabaseSync.prototype[Symbol.dispose]()

2025-04-17 10:51:46 -03:00

stream.js

stream: change stream to use index instead of for...of

2024-08-30 15:52:11 -03:00

string_decoder.js

…

sys.js

lib: add note about removing node:sys module

2024-09-12 11:06:42 +02:00

test.js

test_runner: add assert.register() API

2025-02-03 20:09:53 +01:00

timers.js

timers: optimize timer functions with improved argument handling

2025-04-17 10:51:54 -03:00

tls.js

tls: only do off-thread certificate loading on loading tls

2025-10-11 20:49:13 +02:00

trace_events.js

…

tty.js

tty: initialize winSize array with values

2024-08-14 08:36:58 +02:00

url.js

url: replaced slice with at

2025-10-07 17:29:36 +02:00

util.js

util: remove unnecessary template strings

2025-09-20 06:17:12 +00:00

v8.js

v8: add v8.getCppHeapStatistics() method

2025-04-17 10:51:20 -03:00

vm.js

lib: add validation for options in compileFunction

2025-01-05 12:57:36 -05:00

wasi.js

…

worker_threads.js

worker: add name for worker

2025-09-20 03:32:52 +00:00

zlib.js

zlib: add dictionary support to zstdCompress and zstdDecompress

2025-08-26 11:22:38 +02:00