Tobias Nießen 43cc6bc9f3 crypto: prevent Sign::SignFinal from crashing ...

The validation logic could be tricked into assuming an option was
valid using malicious getters, leading to an invalid value being
passed to the C++ layer, thus crashing the process.

PR-URL: https://github.com/nodejs/node/pull/21815
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Tiancheng "Timothy" Gu <timothygu99@gmail.com>
Reviewed-By: Ujjwal Sharma <usharma1998@gmail.com>

2018-07-18 00:34:54 +02:00

..

certificate.js

lib: always show ERR_INVALID_ARG_TYPE received part

2018-03-25 01:45:37 +01:00

cipher.js

string_decoder: lazy loaded

2018-05-18 15:25:38 +02:00

diffiehellman.js

crypto: simplify diffiehellman getFormat function

2018-04-26 07:23:15 +02:00

hash.js

lib: always show ERR_INVALID_ARG_TYPE received part

2018-03-25 01:45:37 +01:00

pbkdf2.js

lib: rename checkIsArrayBufferView()

2018-06-13 15:59:08 +02:00

random.js

lib: consolidate redundant require() calls

2018-07-09 22:50:37 -04:00

scrypt.js

lib: rename checkIsArrayBufferView()

2018-06-13 15:59:08 +02:00

sig.js

crypto: prevent Sign::SignFinal from crashing

2018-07-18 00:34:54 +02:00

util.js

lib: rename checkIsArrayBufferView()

2018-06-13 15:59:08 +02:00