Archkon de6eeece8f zlib: validate pledgedSrcSize as a safe integer ...

pledgedSrcSize represents an exact byte count. Reject values that are
not non-negative safe integers instead of silently ignoring or coercing
them through IntegerValue().

Apply the same validation to zlib/iter and retain a native validation
check for internal callers.

Signed-off-by: Archkon <180910180+Archkon@users.noreply.github.com>
PR-URL: https://github.com/nodejs/node/pull/64604
Fixes: https://github.com/nodejs/node/issues/64603
Reviewed-By: Ethan Arrowood <ethan@arrowood.dev>
Reviewed-By: Jan Martin <jan.krems@gmail.com>

2026-07-23 22:17:50 +00:00

..

addons.md

src: officially deprecate node::ObjectWrap

2026-06-13 23:12:14 +00:00

assert.md

doc: remove unnecessary <!-- eslint- magic comments

2026-05-10 15:06:35 +00:00

async_context.md

2026-05-07, Version 26.1.0 (Current)

2026-05-07 12:01:50 +02:00

async_hooks.md

async_hooks: add trackPromises option to createHook()

2026-01-28 11:25:24 +00:00

buffer.md

2026-07-08, Version 26.5.0 (Current)

2026-07-08 11:48:20 +00:00

child_process.md

doc: fix inconsistencies in CJS code snippets

2026-05-10 14:16:15 +00:00

cli.md

doc: note --env-file is not applied to --run

2026-07-19 21:06:20 +00:00

cluster.md

doc: fix inconsistencies in CJS code snippets

2026-05-10 14:16:15 +00:00

console.md

doc: remove unnecessary <!-- eslint- magic comments

2026-05-10 15:06:35 +00:00

crypto.md

doc: mention crypto.hash() for better perf

2026-07-21 07:33:36 +00:00

debugger.md

inspector: add --cond to node inspect probe mode

2026-07-13 17:00:51 +00:00

deprecations.md

tls: move _tls_* to end-of-life

2026-07-14 21:40:40 +00:00

dgram.md

dgram: skip dns.lookup() for literal IP addresses

2026-06-30 13:07:49 +00:00

diagnostics_channel.md

2026-07-08, Version 26.5.0 (Current)

2026-07-08 11:48:20 +00:00

dns.md

doc: fix dnsPromises.lookup verbatim default

2026-07-23 08:35:34 +00:00

documentation.md

doc: clarify release candidate stability index

2025-08-02 10:58:21 +00:00

domain.md

doc: domain.add() does not accept timer objects

2025-11-13 04:10:29 +00:00

dtls.md

src, lib: add stats to dtls

2026-05-21 14:13:05 -07:00

embedding.md

doc: fix typo in embedding.md

2026-07-18 10:18:51 +00:00

environment_variables.md

doc: fix small environment_variables typo

2026-03-18 15:48:15 +00:00

errors.md

repl: use inspector over vm

2026-07-18 12:59:37 -07:00

esm.md

esm: add --experimental-import-text flag

2026-06-26 13:50:21 +00:00

events.md

2026-02-24, Version 24.14.0 'Krypton' (LTS)

2026-02-24 10:20:06 -05:00

ffi.md

ffi: add getCurrentEventLoop

2026-07-08 13:24:50 +00:00

fs.md

doc,test: widen fsPromises.appendFile()'s data type, add missing tests

2026-07-14 15:49:57 +00:00

globals.md

doc: update a Dispatcher undici doc link

2026-07-13 17:01:04 +00:00

http2.md

http2: don't throw when destroying socket proxy

2026-07-18 12:27:51 +02:00

http.md

doc: clarify proxy threat model

2026-07-10 16:53:10 +00:00

https.md

crypto,https,tls: runtime-deprecate OpenSSL engine-based APIs (DEP0183)

2026-06-19 18:03:51 +02:00

index.md

vfs: add minimal node:vfs subsystem

2026-05-23 18:43:31 +00:00

inspector.md

inspector: fix inspector.close() documented behavior

2026-06-20 04:04:20 +00:00

intl.md

doc: update MDN links

2025-12-16 20:31:28 +00:00

module.md

doc: fix a/an article typos in module, util, and dns

2026-06-08 14:42:21 +00:00

modules.md

lib,tools: add node-core/func-name-matching lint rule

2026-07-14 15:30:56 +02:00

n-api.md

doc: fix typos in documentation

2026-07-13 12:34:05 +02:00

net.md

doc: fix socket.readyState state descriptions

2026-07-20 21:51:40 +00:00

os.md

doc: remove unnecessary <!-- eslint- magic comments

2026-05-10 15:06:35 +00:00

packages.md

2026-06-24, Version 26.4.0 (Current)

2026-06-25 01:20:15 +02:00

path.md

2025-09-24, Version 22.20.0 'Jod' (LTS)

2025-09-24 13:04:16 +00:00

perf_hooks.md

2026-07-08, Version 26.5.0 (Current)

2026-07-08 11:48:20 +00:00

permissions.md

lib,permission: add permission.drop

2026-05-26 13:40:14 +00:00

process.md

2026-06-01, Version 26.3.0 (Current)

2026-06-01 15:01:03 +02:00

punycode.md

doc: fix typed list formatting

2025-07-15 17:18:42 +00:00

querystring.md

doc: get rid of unnecessary eslint-skip comments

2023-11-22 19:03:33 +00:00

quic.md

quic: defer server session emit until TLS ClientHello is processed

2026-07-23 13:44:46 +00:00

readline.md

doc: document error event on readline InterfaceConstructor

2025-12-27 16:52:40 +00:00

repl.md

repl: use inspector over vm

2026-07-18 12:59:37 -07:00

report.md

tools: fix small inconsistencies in JSON doc output

2026-02-09 22:58:43 +00:00

single-executable-applications.md

doc: update sea example by fixing wrong code example

2026-07-21 06:37:30 +00:00

sqlite.md

doc: clarify filter option of sqlite.database.applyChangeset

2026-05-26 13:41:13 +00:00

stream_iter.md

stream, quic: update iterable streams backpressure

2026-07-23 05:19:45 -07:00

stream.md

doc: fix typos in documentation

2026-07-13 12:34:05 +02:00

string_decoder.md

doc: add esm examples to node:string_decoder

2024-10-26 20:36:25 +00:00

synopsis.md

tools: fix small inconsistencies in JSON doc output

2026-02-09 22:58:43 +00:00

test.md

doc: fix broken links and clean up type map

2026-07-22 13:18:57 +00:00

timers.md

2025-06-09, Version 24.2.0 (Current)

2025-06-09 23:45:29 +02:00

tls.md

doc: document TLS alpnProtocol and servername fields

2026-07-17 09:35:56 +00:00

tracing.md

doc: fix inconsistencies in CJS code snippets

2026-05-10 14:16:15 +00:00

tty.md

doc: clarify tty raw mode applies to input processing only

2026-06-02 22:57:15 +00:00

typescript.md

2026-05-05, Version 26.0.0 (Current)

2026-05-05 11:17:12 -03:00

url.md

doc: include url.resolve() in DEP0169 application deprecation

2026-03-02 23:03:53 +00:00

util.md

doc: fix typo in util.md

2026-06-20 16:14:30 +09:00

v8.md

lib: insert argv[0] at argv[1] in setDeserializeMainFunction

2026-06-10 11:36:03 +09:00

vfs.md

doc: remove duplicate VirtualProvider description

2026-07-12 07:13:19 +00:00

vm.md

doc: fix import.meta example for vm.SourceTextModule

2026-07-21 07:33:45 +00:00

wasi.md

doc: fix inconsistencies in CJS code snippets

2026-05-10 14:16:15 +00:00

webcrypto.md

doc: replace large tables in crypto.md and webcrypto.md with lists

2026-07-20 18:25:05 +00:00

webstreams.md

2026-07-08, Version 26.5.0 (Current)

2026-07-08 11:48:20 +00:00

worker_threads.md

net: make TCP Server and Socket transferable across worker threads

2026-07-12 15:11:28 +00:00

zlib.md

zlib: validate pledgedSrcSize as a safe integer

2026-07-23 22:17:50 +00:00