GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — IPC “advanced” mode length parsing allows malformed frames to crash parent process · Issue #61312 · nodejs/node Closed DescriptionVersion24.11.1 PlatformSubsystemchild_process What steps will reproduce the bug?run: node parent.js parent.js child.js How often does it reproduce? Is there a required condition?Reproduces 100% with this PoC. What is the expected behavior? Why is that the expected behavior?The parent process should not crash. It should reject or ignore malformed IPC frames and continue or fail gracefully. What do you see instead?The parent process crashes at deserializer.readHeader(). Additional informationProblematic code section (internal/child_process/serialization.js): The signed 32‑bit length parse allows negative sizes; the check is bypassed and deserialization of a truncated buffer throws. Activity
MetadataMetadataAssigneesLabelsNo labels TypeProjectsMilestoneRelationshipsDevelopmentIssue actions |
| You are visitor 01402520 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |