mirror of
https://github.com/nodejs/node.git
synced 2024-11-21 21:19:50 +01:00
e1ad548cd4
This is much nicer than just treating exceptions as uncaught, and enables reporting of exceptions from the internal C++ deserialization machinery. PR-URL: https://github.com/nodejs/node/pull/33772 Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
34 lines
1.1 KiB
JavaScript
34 lines
1.1 KiB
JavaScript
'use strict';
|
|
const common = require('../common');
|
|
const assert = require('assert');
|
|
const fs = require('fs').promises;
|
|
const { MessageChannel } = require('worker_threads');
|
|
const { once } = require('events');
|
|
|
|
// Test that overriding the internal kTransfer method of a JSTransferable does
|
|
// not enable loading arbitrary code from internal Node.js core modules.
|
|
|
|
(async function() {
|
|
const fh = await fs.open(__filename);
|
|
assert.strictEqual(fh.constructor.name, 'FileHandle');
|
|
|
|
const kTransfer = Object.getOwnPropertySymbols(Object.getPrototypeOf(fh))
|
|
.filter((symbol) => symbol.description === 'messaging_transfer_symbol')[0];
|
|
assert.strictEqual(typeof kTransfer, 'symbol');
|
|
fh[kTransfer] = () => {
|
|
return {
|
|
data: '✨',
|
|
deserializeInfo: 'net:Socket'
|
|
};
|
|
};
|
|
|
|
const { port1, port2 } = new MessageChannel();
|
|
port1.postMessage(fh, [ fh ]);
|
|
port2.on('message', common.mustNotCall());
|
|
|
|
const [ exception ] = await once(port2, 'messageerror');
|
|
|
|
assert.strictEqual(exception.message, 'Unknown deserialize spec net:Socket');
|
|
port2.close();
|
|
})().then(common.mustCall());
|