You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Assertion failed: w_target_len == 0, file c:\ws\deps\uv\src\idna.c, line 408
How often does it reproduce? Is there a required condition?
I think this might be windows only based on the libuv source
What is the expected behavior? Why is that the expected behavior?
Throw an error/call the actual callback with the error.
What do you see instead?
The entire program crashes
Additional information
I discovered this by performing a fuzz test on my remix.js site which uses express.js which uses fs.stat.
This can take down a production server no matter their routes with just a HTTP GET request as long as they have express.static or similar behaviour for static file serving.
juanarbol
added
windows
Issues and PRs related to the Windows platform.
libuv
Issues and PRs related to the libuv dependency or the uv binding.
labels
Nov 19, 2024
uv_wtf8_length_as_utf16() checks if codepoints are > 0xFFFF (to see if
it should be encoded as a surrogate pair), therefore uv_wtf8_to_utf16()
should too. Instead it checked > 0x1000. Harmonize the checks.
Fixes: nodejs/node#55914
Version
v22.2.0
Platform
Subsystem
No response
What steps will reproduce the bug?
This will crash the entire program not even recoverable with a
try
statementlogs:
How often does it reproduce? Is there a required condition?
I think this might be windows only based on the libuv source
What is the expected behavior? Why is that the expected behavior?
Throw an error/call the actual callback with the error.
What do you see instead?
The entire program crashes
Additional information
I discovered this by performing a fuzz test on my remix.js site which uses express.js which uses fs.stat.
This can take down a production server no matter their routes with just a HTTP GET request as long as they have express.static or similar behaviour for static file serving.
See remix-run/remix#10241
The text was updated successfully, but these errors were encountered: