RafaelGSS 984f735e35 src: fix HTTP2 mem leak on premature close and ERR_PROTO ...

This commit fixes a memory leak when the socket is
suddenly closed by the peer (without GOAWAY notification)
and when invalid header (by nghttp2) is identified and the
connection is terminated by peer.

Refs: https://hackerone.com/reports/2841362
PR-URL: https://github.com/nodejs-private/node-private/pull/650
Reviewed-By: James M Snell <jasnell@gmail.com>
CVE-ID: CVE-2025-23085

2025-01-20 15:18:50 -03:00

..

assert

…

dns

…

fs

…

inspector

…

internal

src: fix HTTP2 mem leak on premature close and ERR_PROTO

2025-01-20 15:18:50 -03:00

path

…

readline

lib: move Symbol[Async]Dispose polyfills to internal/util

2024-09-14 00:20:34 +02:00

stream

…

test

test_runner: do not expose internal loader

2024-08-14 08:37:04 +02:00

timers

lib: remove unnecessary optional chaining

2024-11-27 11:03:33 -05:00

util

…

_http_agent.js

lib: remove startsWith/endsWith primordials for char checks

2024-11-27 11:03:39 -05:00

_http_client.js

http: add setDefaultHeaders option to http.request

2025-01-05 13:05:28 -05:00

_http_common.js

lib: prefer optional chaining

2024-10-04 10:20:24 +02:00

_http_incoming.js

lib: prefer optional chaining

2024-10-04 10:20:24 +02:00

_http_outgoing.js

http: don't emit error after destroy

2025-01-05 12:57:20 -05:00

_http_server.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

_stream_duplex.js

…

_stream_passthrough.js

…

_stream_readable.js

…

_stream_transform.js

…

_stream_wrap.js

…

_stream_writable.js

…

_tls_common.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

_tls_wrap.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

assert.js

assert: make Maps be partially compared in partialDeepStrictEqual

2025-01-05 13:05:27 -05:00

async_hooks.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

buffer.js

util: harden more built-in classes against prototype pollution

2025-01-05 13:05:32 -05:00

child_process.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

cluster.js

…

console.js

…

constants.js

…

crypto.js

…

dgram.js

dgram: support blocklist in udp

2025-01-05 13:05:31 -05:00

diagnostics_channel.js

diagnostics_channel: fix unsubscribe during publish

2024-11-27 01:23:18 -05:00

dns.js

dns: honor the order option

2024-11-27 01:37:53 -05:00

domain.js

lib: the REPL should survive deletion of Array.prototype methods

2024-10-04 10:20:04 +02:00

eslint.config_partial.mjs

lib: handle Float16Array in node:v8 serdes

2025-01-05 13:05:23 -05:00

events.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

fs.js

fs: make mutating options in Callback readdir() not affect results

2025-01-05 13:05:29 -05:00

http2.js

…

http.js

…

https.js

lib: move Symbol[Async]Dispose polyfills to internal/util

2024-09-14 00:20:34 +02:00

inspector.js

lib: move Symbol[Async]Dispose polyfills to internal/util

2024-09-14 00:20:34 +02:00

module.js

module: add module.stripTypeScriptTypes

2025-01-05 12:59:40 -05:00

net.js

net: support blocklist in net.connect

2025-01-05 12:57:36 -05:00

os.js

src: improve node:os userInfo performance

2024-11-27 11:03:34 -05:00

path.js

path: fix path traversal in normalize() on Windows

2025-01-15 18:09:20 -03:00

perf_hooks.js

…

process.js

…

punycode.js

…

querystring.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

readline.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

repl.js

lib: remove startsWith/endsWith primordials for char checks

2024-11-27 11:03:39 -05:00

sea.js

…

sqlite.js

lib,src,test,doc: add node:sqlite module

2024-07-16 12:01:19 +02:00

stream.js

stream: change stream to use index instead of for...of

2024-08-30 15:52:11 -03:00

string_decoder.js

…

sys.js

lib: add note about removing node:sys module

2024-09-12 11:06:42 +02:00

test.js

test_runner: mark snapshot testing as stable

2025-01-05 12:57:22 -05:00

timers.js

lib: prefer logical assignment

2024-11-27 11:03:39 -05:00

tls.js

…

trace_events.js

…

tty.js

tty: initialize winSize array with values

2024-08-14 08:36:58 +02:00

url.js

lib: remove redundant global regexps

2025-01-05 13:05:25 -05:00

util.js

util: add sourcemap support to getCallSites

2025-01-05 12:57:37 -05:00

v8.js

lib: handle Float16Array in node:v8 serdes

2025-01-05 13:05:23 -05:00

vm.js

lib: add validation for options in compileFunction

2025-01-05 12:57:36 -05:00

wasi.js

…

worker_threads.js

worker: add markAsUncloneable api

2024-10-05 12:35:23 +02:00

zlib.js

lib: prefer optional chaining

2024-10-04 10:20:24 +02:00