cjihrig 40a7beedda buffer: stop alloc() uninitialized memory return ...

CVE-2018-7166
Discovered by ChALkeR - Сковорода Никита Андреевич

Prevent Buffer.alloc(size, fill, number) from returning uninitialized memory.

Fixes: https://github.com/nodejs-private/security/issues/202
PR-URL: https://github.com/nodejs-private/node-private/pull/137
Reviewed-By: Rod Vagg <rod@vagg.org>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
Reviewed-By: Evan Lucas <evanlucas@me.com>
Reviewed-By: Сковорода Никита Андреевич <chalkerx@gmail.com>
Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>

2018-08-16 19:14:08 +10:00

..

internal

http2: emit timeout on compat request and response

2018-08-15 15:58:41 -07:00

_http_agent.js

http: fix request with option timeout and agent

2018-07-13 18:44:03 +02:00

_http_client.js

http: fix request with option timeout and agent

2018-07-13 18:44:03 +02:00

_http_common.js

http: name anonymous function in _http_common.js

2018-07-18 04:50:27 -07:00

_http_incoming.js

http: added aborted property to request

2018-04-26 19:38:27 +02:00

_http_outgoing.js

lib: extract validateString validator

2018-08-07 10:51:27 -04:00

_http_server.js

http: fix res emit close before user finish

2018-05-24 13:23:57 -04:00

_stream_duplex.js

stream: only check options once in Duplex ctor

2018-04-28 17:13:55 +02:00

_stream_passthrough.js

…

_stream_readable.js

stream: fix readable behavior for highWaterMark === 0

2018-08-10 17:16:59 +02:00

_stream_transform.js

stream: make virtual methods errors consistent

2018-03-12 14:24:34 +01:00

_stream_wrap.js

…

_stream_writable.js

stream: name anonymous function in _stream_writable.js

2018-07-18 17:18:29 +02:00

_tls_common.js

http,tls: name anonymous callbacks

2018-08-04 17:09:58 -04:00

_tls_wrap.js

lib: extract validateString validator

2018-08-07 10:51:27 -04:00

.eslintrc.yaml

tools: stricter eslint rule for globals

2018-05-18 15:27:29 +02:00

assert.js

assert: improve simple assert

2018-07-16 11:30:55 +02:00

async_hooks.js

lib: extract validateString validator

2018-08-07 10:51:27 -04:00

buffer.js

buffer: stop alloc() uninitialized memory return

2018-08-16 19:14:08 +10:00

child_process.js

lib: remove unused exec param

2018-08-15 12:54:20 -04:00

cluster.js

…

console.js

util: improve display of iterators and weak entries

2018-07-18 17:21:14 +02:00

constants.js

constants: freeze the constants object

2018-05-07 14:26:11 +02:00

crypto.js

crypto: move createCipher to runtime deprecation

2018-08-05 23:17:20 +02:00

dgram.js

lib: extract validateNumber validator

2018-08-14 11:34:34 -04:00

dns.js

lib: extract validateString validator

2018-08-07 10:51:27 -04:00

domain.js

domain: converted anonymous to named function

2018-04-17 23:44:14 -07:00

events.js

events: optimize condition for optimal scenario

2018-05-03 14:45:09 +02:00

fs.js

fs: readdir optionally returning type information

2018-08-13 19:18:45 -07:00

http2.js

…

http.js

http: allow url and options to be passed to http*.request and http*.get

2018-07-13 14:09:39 +01:00

https.js

https: allow url and options to be passed to https.request

2018-07-31 22:53:25 -07:00

inspector.js

lib: extract validateString validator

2018-08-07 10:51:27 -04:00

module.js

lib: add back lib/module.js redirection

2018-03-15 20:50:35 +08:00

net.js

src: move process.binding('uv') to internalBinding

2018-08-09 13:47:31 -07:00

os.js

lib: remove unnecessary assignment of exports

2018-04-22 11:39:16 +02:00

path.js

lib: always show ERR_INVALID_ARG_TYPE received part

2018-03-25 01:45:37 +01:00

perf_hooks.js

src: move process.binding('performance') to internalBinding

2018-08-09 07:30:58 -07:00

process.js

…

punycode.js

lib: update punycode to 2.1.1

2018-07-16 15:55:15 -07:00

querystring.js

tools: add 'spaced-comment' into eslint rules

2018-04-01 22:33:13 +08:00

readline.js

readline,zlib: named anonymous functions

2018-08-01 21:39:07 -07:00

repl.js

lib: remove unused filterInternalStackFrames param

2018-08-14 11:52:46 -04:00

stream.js

stream: add pipeline and finished

2018-04-16 16:02:12 +02:00

string_decoder.js

lib: always show ERR_INVALID_ARG_TYPE received part

2018-03-25 01:45:37 +01:00

sys.js

…

timers.js

lib,src: replace all C++ promises with JS promises

2018-07-16 16:45:48 +02:00

tls.js

tls: remove SLAB_BUFFER_SIZE

2018-08-12 10:22:10 -07:00

trace_events.js

trace_events: move trace_events to internalBinding

2018-08-09 11:12:35 -07:00

tty.js

readline: lazy loaded

2018-05-18 15:25:40 +02:00

url.js

lib: remove unnecessary require

2018-05-18 15:32:05 +02:00

util.js

util: improve empty typed array inspection

2018-08-15 17:52:36 +02:00

v8.js

v8: move serdes to internalBinding

2018-08-08 17:25:14 -05:00

vm.js

src: remove unused env->vm_parsing_context_symbol

2018-08-04 15:32:35 -04:00

worker_threads.js

worker: rename to worker_threads

2018-06-06 19:44:15 +02:00

zlib.js

zlib: remove unused parameters

2018-08-07 10:49:10 -07:00