[Snyk] Fix for 1 vulnerabilities #1962
Annotations
4 errors and 2 warnings
test-asan:
test/parallel/test-https-selfsigned-no-keycertsign-no-crash.js#L1
--- stderr ---
node:assert:171
throw err;
^
AssertionError [ERR_ASSERTION]: function should not have been called at /home/runner/work/alisco-node/alisco-node/test/parallel/test-https-selfsigned-no-keycertsign-no-crash.js:61
called with arguments: Error: certificate has expired
at TLSSocket.onConnectSecure (node:_tls_wrap:1530:34)
at TLSSocket.emit (node:events:394:28)
at TLSSocket._finishInit (node:_tls_wrap:944:8)
at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:725:12) {
code: 'CERT_HAS_EXPIRED'
}
at ClientRequest.mustNotCall (/home/runner/work/alisco-node/alisco-node/test/common/index.js:470:12)
at ClientRequest.emit (node:events:394:28)
at TLSSocket.socketErrorListener (node:_http_client:448:9)
at TLSSocket.emit (node:events:394:28)
at emitErrorNT (node:internal/streams/destroy:194:8)
at emitErrorCloseNT (node:internal/streams/destroy:159:3)
at processTicksAndRejections (node:internal/process/task_queues:83:21) {
generatedMessage: false,
code: 'ERR_ASSERTION',
actual: undefined,
expected: undefined,
operator: 'fail'
}
Command: out/Release/node /home/runner/work/alisco-node/alisco-node/test/parallel/test-https-selfsigned-no-keycertsign-no-crash.js
|
test-asan:
test/parallel/test-worker-cleanexit-with-moduleload.js#L1
--- stderr ---
=================================================================
==110879==ERROR: AddressSanitizer: heap-use-after-free on address 0x611000219690 at pc 0x55f34e1ee0c1 bp 0x7f808919d970 sp 0x7f808919d968
WRITE of size 8 at 0x611000219690 thread T9
#0 0x55f34e1ee0c0 in uv__async_io /home/runner/work/alisco-node/alisco-node/out/../deps/uv/src/unix/async.c:155:5
#1 0x55f34e222ef2 in uv__io_poll /home/runner/work/alisco-node/alisco-node/out/../deps/uv/src/unix/linux-core.c:462:11
#2 0x55f34e1eef37 in uv_run /home/runner/work/alisco-node/alisco-node/out/../deps/uv/src/unix/core.c:385:5
#3 0x55f34bef3104 in node::SpinEventLoop(node::Environment*) (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x10f3104) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#4 0x55f34c3aacbe in node::worker::Worker::Run() (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x15aacbe) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#5 0x55f34c3b71e0 in node::worker::Worker::StartThread(v8::FunctionCallbackInfo<v8::Value> const&)::$_3::__invoke(void*) node_worker.cc
#6 0x7f8098c94ac2 (/lib/x86_64-linux-gnu/libc.so.6+0x94ac2) (BuildId: 490fef8403240c91833978d494d39e537409b92e)
#7 0x7f8098d2684f (/lib/x86_64-linux-gnu/libc.so.6+0x12684f) (BuildId: 490fef8403240c91833978d494d39e537409b92e)
0x611000219690 is located 208 bytes inside of 240-byte region [0x6110002195c0,0x6110002196b0)
freed by thread T9 here:
#0 0x55f34beea86d in operator delete(void*) (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x10ea86d) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#1 0x55f34c229ab7 in std::vector<node::BaseObjectPtrImpl<node::BaseObject, false>, std::allocator<node::BaseObjectPtrImpl<node::BaseObject, false> > >::~vector() (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x1429ab7) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#2 0x55f34c20fc7f in node::worker::Message::Deserialize(node::Environment*, v8::Local<v8::Context>, v8::Local<v8::Value>*) (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x140fc7f) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#3 0x55f34c218499 in node::worker::MessagePort::ReceiveMessage(v8::Local<v8::Context>, node::worker::MessagePort::MessageProcessingMode, v8::Local<v8::Value>*) (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x1418499) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#4 0x55f34c218e46 in node::worker::MessagePort::OnMessage(node::worker::MessagePort::MessageProcessingMode) (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x1418e46) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#5 0x55f34e1edff8 in uv__async_io /home/runner/work/alisco-node/alisco-node/out/../deps/uv/src/unix/async.c:163:5
#6 0x55f34e222ef2 in uv__io_poll /home/runner/work/alisco-node/alisco-node/out/../deps/uv/src/unix/linux-core.c:462:11
#7 0x55f34e1eef37 in uv_run /home/runner/work/alisco-node/alisco-node/out/../deps/uv/src/unix/core.c:385:5
#8 0x55f34bef3104 in node::SpinEventLoop(node::Environment*) (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x10f3104) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#9 0x55f34c3aacbe in node::worker::Worker::Run() (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x15aacbe) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#10 0x55f34c3b71e0 in node::worker::Worker::StartThread(v8::FunctionCallbackInfo<v8::Value> const&)::$_3::__invoke(void*) node_worker.cc
#11 0x7f8098c94ac2 (/lib/x86_64-linux-gnu/libc.so.6+0x94ac2) (BuildId: 490fef8403240c91833978d494d39e537409b92e)
previously allocated by thread T9 here:
#0 0x55f34beea00d in operator new(unsigned long) (/home/runner/work/alisco-node/alisco-node/out/Release/node+0x10ea00d) (BuildId: 07e7e41fcf31376647ccabf8b643d05bbe4b463b)
#1 0x55f34c217881 in node::worker::MessagePort::New(node::Environment*, v8::Local<v8::Context>, std::unique_ptr<node::worker::MessagePortData, std::default_delete<node::worker::MessagePortData>
|
test-asan:
test/abort/test-signal-handler.js#L22
--- stderr ---
/home/runner/work/alisco-node/alisco-node/out/Release/node[139202]: ../src/node_process_methods.cc:86:void node::Chdir(const FunctionCallbackInfo<v8::Value> &): Assertion `(args.Length()) == (1)' failed.
1: 0x558aa5f85688 node::DumpBacktrace(_IO_FILE*) [/home/runner/work/alisco-node/alisco-node/out/Release/node]
2: 0x558aa6141276 node::Abort() [/home/runner/work/alisco-node/alisco-node/out/Release/node]
3: 0x558aa6140cbc node::Assert(node::AssertionInfo const&) [/home/runner/work/alisco-node/alisco-node/out/Release/node]
4: 0x558aa62d02a8 [/home/runner/work/alisco-node/alisco-node/out/Release/node]
5: 0x7ffc56f06ab0
node:assert:412
throw err;
^
AssertionError [ERR_ASSERTION]: child.signal = SIGABRT
at Object.<anonymous> (/home/runner/work/alisco-node/alisco-node/test/abort/test-signal-handler.js:22:3)
at Module._compile (node:internal/modules/cjs/loader:1095:14)
at Object.Module._extensions..js (node:internal/modules/cjs/loader:1124:10)
at Module.load (node:internal/modules/cjs/loader:975:32)
at Function.Module._load (node:internal/modules/cjs/loader:816:12)
at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:79:12)
at node:internal/main/run_main_module:17:47 {
generatedMessage: false,
code: 'ERR_ASSERTION',
actual: false,
expected: true,
operator: '=='
}
Command: out/Release/node /home/runner/work/alisco-node/alisco-node/test/abort/test-signal-handler.js
|
test-asan
Process completed with exit code 2.
|
test-asan
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v2, actions/setup-python@v2. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
test-asan
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2, actions/setup-python@v2. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|