[v24.x] http2: avoid UAF while receiving and sending RST_STREAM - #65093

Open

mcollina wants to merge 103 commits into

nodejs:v24.x-stagingfrom

mcollina:backport-64166-to-v24.x

Commits on Aug 27, 2026

fs: fix close listener leak in FileHandle streams

Y1D7NG
authored and
aduh95
committed
071d46d
build: pass target architecture to small-icu genccode

ulofiai
authored and
aduh95
committed
a2a91dc
test: avoid timer race in event loop delay test

trivikr
authored and
aduh95
committed
8667c00
deps: update googletest to 49495eacfdbda3f4b6ba219923fedbb2e3f99376

nodejs-github-bot
authored and
aduh95
committed
45e8e4a
doc: add missing return types in buffer.md

inoway46
authored and
aduh95
committed
e9eacdf
doc: add missing return types in fs.md

chasetonco
authored and
aduh95
committed
0f4ab49
doc: document setRawMode write access on Windows

edemaine
authored and
aduh95
committed
6384318
doc: clarify copyFile symlink behavior

cookesan
authored and
aduh95
committed
62e84c3
doc: update security release prepare command

RafaelGSS
authored and
aduh95
committed
6c29b84
doc: clarify how fs.Dirent file types are determined

soreavis
authored and
aduh95
committed
19dbd0d
string_decoder: decode UTF-8 via StringBytes::Encode

codebytere
authored and
aduh95
committed
687d0af
stream: reject pull on signal abort during flush

trivikr
authored and
aduh95
committed
b532ba1
Revert "fs: fix close listener leak in FileHandle streams"

MikeMcC399
authored and
aduh95
committed
312f155
sqlite: prevent reentrant session.close()

trivikr
authored and
aduh95
committed
eb165dd
module: cache nearest parent package.json per directory

codebytere
authored and
aduh95
committed
a4ff337
buffer: prevent string write offset overflow

mcollina
authored and
aduh95
committed
d00c4ad
test_runner: fix junit report on empty diagnostic

lazerg
authored and
aduh95
committed
dfaa058
doc: clarify that ipv4 mapped to ipv6 are classified as ipv6

gamemaker1
authored and
aduh95
committed
0a033d4
diagnostics_channel: validate before channel activation

trivikr
authored and
aduh95
committed
cfd7209
stream: decouple transform backpressure changes

mcollina
authored and
aduh95
committed
b80af36
quic: do not destroy incoming streams that have a consumer

trivenay
authored and
aduh95
committed
28be104
fs: treat `std::errc::permission_denied` as `EPERM` error

PickBas
authored and
aduh95
committed
4730757
build,win: add PGO workload scripts

StefanStojanovic
authored and
aduh95
committed
07c0921
quic: write desired size needs update on maxstream

martenrichter
authored and
aduh95
committed
5bf60c7
tools: make env variables consistent in cron jobs
aduh95
committed
a0ed3b5
test_runner: add classname hierarchy for JUnit reporter

mag123c
authored and
aduh95
committed
90c1323
deps: update simdjson to 4.6.7

nodejs-github-bot
authored and
aduh95
committed
1c24cef
deps: update zlib to 1.3.2.1-motley-8002e91

nodejs-github-bot
authored and
aduh95
committed
0eac2fa
module: report unreadable package.json

bitpshr
authored and
aduh95
committed
8f26eb3
crypto: fix missing error checks on ASN1_STRING_to_UTF8()

ndossche
authored and
aduh95
committed
3151bf5
fs: fix out-of-bounds write in mkdtemp for long prefixes

frandle331-yh
authored and
aduh95
committed
d67925f
tools: bump brace-expansion in `/tools/clang-format`

dependabot[bot]
authored and
aduh95
committed
93ead3a
dns: validate address type in lookupService

lazerg
authored and
aduh95
committed
3d6041c
child_process: keep SIGWINCH from killing on Win

PickBas
authored and
aduh95
committed
26ad6b0
test: fix Linux debug skip in SEA test guard

guhyunwoo
authored and
aduh95
committed
2114baa
doc: update outdated nodejs.org guide links

HoonDongKang
authored and
aduh95
committed
c2e533b
doc: clarify socket destroyed behavior

dayun6530
authored and
aduh95
committed
35007d1
test: use common/child_process spawnSync helpers

ganjanggejang
authored and
aduh95
committed
114df48
tools: fix max body length handler in `create-release-proposal.sh`
aduh95
committed
5bb18e1
doc: fix broken TLS security level example

soreavis
authored and
aduh95
committed
8612cc0
meta: move targos to emeritus

targos
authored and
aduh95
committed
0894468
doc: document that an empty OPENSSL_CONF skips config loading

authored and
aduh95
committed
5a0edb0
test_runner: mock dual-package with conditional exports

maruthang
authored and
aduh95
committed
a59febb
test_runner: use run options with isolation="none"

inukshuk
authored and
aduh95
committed
4baafe3
net: handle undefined parent in _unrefTimer and _destroy

Shivay-98
authored and
aduh95
committed
9ad61b8
test: deflake test-net-listen-ipv6only

Han5991
authored and
aduh95
committed
f143c70
doc: fix broken GYP link in n-api.md

HoonDongKang
authored and
aduh95
committed
ed69a21
util: fix formatting of functions returned from getters

gibson042
authored and
aduh95
committed
8689612
doc: remove outdated WASI version fallback

hyemimi
authored and
aduh95
committed
66b9902
tools: improve commit queue failure comment

panva
authored and
aduh95
committed
44defdc
benchmark: add test-only and mock timers cases

luanmuniz
authored and
aduh95
committed
41c81a2
http: cache maxHeaderPairs per header section

GetThatCookie
authored and
aduh95
committed
e3ae114
src: fix out-of-bounds write when transcoding odd-length ucs2

Nashit-h
authored and
aduh95
committed
0266498
fs: allocate FSReqPromise stat arrays lazily

MarshallOfSound
authored and
aduh95
committed
893e160
fs: pass symlink type in cp when filter is provided

shulaoda
authored and
aduh95
committed
adabc08
url: speed up URLSearchParams

anonrig
authored and
aduh95
committed
c383449
test_runner: print coverage and diagnostic info with dot reporter

mag123c
authored and
aduh95
committed
2632929
esm: avoid super-linear data URL MIME regex

skdas20
authored and
aduh95
committed
e3b6582
test: add Headers coverage and benchmark

anonrig
authored and
aduh95
committed
acc9716
stream: avoid duplicated endReadableNT scheduling

mcollina
authored and
aduh95
committed
70e41cd
quic: reset rejected HTTP/3 request streams with H3_REQUEST_REJECTED

trivenay
authored and
aduh95
committed
b4040c4
dgram: don't swallow bind errors when callback is provided

armanmikoyan
authored and
aduh95
committed
cba9901
lib: use bracket notation instead of startsWith/endsWith for single char

kimtaejin3
authored and
aduh95
committed
66f5d82
url: speed up WHATWG URL parsing

anonrig
authored and
aduh95
committed
5227981
url: skip unused href reuse comparison

anonrig
authored and
aduh95
committed
ef6bb9a
quic: mark drain promise handled

jasnell
authored and
aduh95
committed
647c8dd
fs: fix glob early return skipping sibling entries

authored and
aduh95
committed
d834d65
quic: changes for nghttp3_conn_close_stream2

martenrichter
authored and
aduh95
committed
6d260ac
test: simplify test-timers-interval-promisified.js

HoonDongKang
authored and
aduh95
committed
5d8194a
doc: fix broken links in cli.md

HoonDongKang
authored and
aduh95
committed
d647949
test: remove test-debugger-run-after-quit-restart as flaky on macOS

inoway46
authored and
aduh95
committed
ab79cfc
test: use spawnSyncAndAssert in windowsHide test

ganjanggejang
authored and
aduh95
committed
170e563
test: convert forEach to for of test-messageevent-brandcheck file

nachiketap11
authored and
aduh95
committed
6842e76
stream: reuse unexposed managed read buffers

GetThatCookie
authored and
aduh95
committed
43c83fa
test_runner: match dotfiles in default coverage exclude

semimikoh
authored and
aduh95
committed
01177a6
tty: add raw-vt and io raw modes

samuel-williams-shopify
authored and
aduh95
committed
2d7e3f6
repl: keep entries added while history file is loading

mhayk
authored and
aduh95
committed
67ca879
doc: fix property names in os.networkInterfaces() example

hanityx
authored and
aduh95
committed
fbb5a1e
stream: drain pending writes before broadcast end

trivikr
authored and
aduh95
committed
32dbd80
perf_hooks: add statistical hypothesis testing to histogram

jasnell
authored and
aduh95
committed
8076683
benchmark: add --analyze mode to compare.js

jasnell
authored and
aduh95
committed
6a04f7d
src: fix heap value deduplication in embedder graph

IlyasShabi
authored and
aduh95
committed
0212fe0
stream: prevent share from eagerly draining source

trivikr
authored and
aduh95
committed
02acadb
util: fix OSC 8 hyperlink stripping in stripVTControlCharacters

authored and
aduh95
committed
0714ed5
fs: fix realpath of namespaced drive paths

jazelly
authored and
aduh95
committed
87156be
fs: use sized reads for large files in readFileUtf8

codebytere
authored and
aduh95
committed
cf32bed
http: improve performance with known-length calls to end()

pimterry
authored and
aduh95
committed
5b13d30
permission: enforce addon permission in GetLinkedBinding

RafaelGSS
authored and
aduh95
committed
b85ff96
tls: throw on invalid ALPNProtocols instead of aborting

sankalpsthakur
authored and
aduh95
committed
810b8e2
util: allow single-line format when break length is infinite

hamidrezaghavami
authored and
aduh95
committed
7434261
doc: update AHAFS reference link

ChocoChip0519
authored and
aduh95
committed
51c757c
stream: encode whole chunks in TextEncoderStream

mcollina
authored and
aduh95
committed
ad21f90
crypto: update root certificates to NSS 3.126

nodejs-github-bot
authored and
aduh95
committed
e8cec4d
stream: normalize fused stateless transform results

trivikr
authored and
aduh95
committed
463bfae
events: inline createEvent hybrid dispatch closure

slagiewka
authored and
aduh95
committed
00b338a
events: inline iterationCondition hybrid dispatch closure

slagiewka
authored and
aduh95
committed
067d305

Commits on Sep 3, 2026

deps: upgrade openssl sources to openssl-3.5.8

nodejs-github-bot
authored and
aduh95
committed
7219978
deps: update archs files for openssl-3.5.8

nodejs-github-bot
authored and
aduh95
committed
0fc67c6
test: account for varied OpenSSL CCM final behaviours

panva
authored and
aduh95
committed
a37601c

Commits on Sep 4, 2026

test: fix link-local dgram scope assertion

panva
authored and
aduh95
committed
0848730

Commits on Sep 7, 2026

deps: update undici to 7.29.1
nodejs-github-bot
authored
6906bec
deps: update corepack to 0.36.0

nodejs-github-bot
authored and
aduh95
committed
1ee0cf0
http2: adapt receive deferral for Node.js 24

mcollina
authored and
aduh95
committed
b53cfdb