Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: fix CVE #132

Merged
merged 1 commit into from Jul 3, 2022
Merged

chore: fix CVE #132

merged 1 commit into from Jul 3, 2022

Conversation

vladfrangu
Copy link
Member

Please describe the changes this PR makes and why it should be merged:

Closes #131 and #49

Semantic versioning classification:

  • This PR changes the library's interface (methods or parameters added)
    • This PR includes breaking changes (methods removed or renamed, parameters moved or removed)
  • This PR only includes non-code changes, like changes to documentation, README, etc.

@vladfrangu vladfrangu added the bug Something isn't working label Jun 21, 2022
@vladfrangu vladfrangu requested a review from iCrawl June 21, 2022 09:35
@vladfrangu vladfrangu changed the title chore: fix CVE and add more prebuilds chore: fix CVE Jun 21, 2022
Comment on lines +91 to +92
Napi::TypeError::New(env, "Provided input needs to be a buffer").ThrowAsJavaScriptException();
return env.Null();
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we not use the NAPI_THROW macro?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also, is a return value needed? This method doesn't have a return at the end.

@iCrawl iCrawl merged commit 406249f into main Jul 3, 2022
@iCrawl iCrawl deleted the chore/fix-cve branch July 3, 2022 15:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[SECURITY] DoS in @discordjs/opus due to invalid encoders/buffers (CVE-2022-25345)
3 participants