You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We appreciate the research and the report. There are, however, a few issues here.
First, based on the stack trace, this appears to be an issue with our dependencies v8 and ICU, not with Node.js itself. Node.js does not provide the implementation of DateTimeFormat and has no control over that code path. This issue likely needs to be reported to either v8 and/or ICU for investigation.
Thirdly, and most importantly, this kind of issue can very likely be a security concern. By reporting it here, in the public repo, you potentially put deployments at risk. For reporting these kinds of issues, please see our SECURITY policy https://github.com/nodejs/node/blob/main/SECURITY.md. We use HackerOne for this purpose.
@jasnell
We are really sorry that we didn't report this issue according to your security policy; hopefully, that was not the exploitable one.
The good news is that unicode-org/icu#2248 pull request was accepted and stack buffer overflow error in ICU was fixed. So the only thing left to do is to update the ICU version in nodejs.
Hi! We've been fuzzing nodejs using
sydr-fuzz
and targets for https://github.com/ispras/oss-sydr-fuzz/tree/master/projects/nodejs made by @stasos24.We have updated nodejs to
main
branch and the bug from #45284 wasn't reproduced, but we discovered the new one with the same input, so we open a new issue.Work environment
OS: Ubuntu 20.04
nodejs version: main 86088ab
Bug description
Stack buffer overflow in
deps/icu-small/source/common/uresbund.cpp:205:9
.Steps to reproduce
Build docker container from https://github.com/ispras/oss-sydr-fuzz/tree/master/projects/nodejs:
Run docker container:
Execute sanitizers built target with input that leads to crash ():
You will see the following ouput:
The text was updated successfully, but these errors were encountered: