René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"OOB read in `Buffer.prototype.indexOf`","articleBody":"From @deepview-autofix:\n\u003cimg width=\"1170\" height=\"190\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/6af411cf-2a11-488c-9ec7-8f9b58a31a5b\" /\u003e\n\nNot a vuln because this is not in any release yet\n\nTo reproduce (you need a pre-release or main):\n```\nWelcome to Node.js v26.0.0-nightly20260421eb54e709c7.\nType \".help\" for more information.\n\u003e Buffer.alloc(1).indexOf(1,0,-10)\n4\n\u003e Buffer.alloc(1).indexOf(2,0,-10)\n65\n\u003e Buffer.alloc(1).indexOf(255,0,-10)\n292\n\u003e Buffer.alloc(65).indexOf(1,0,-1)\n104\n\u003e Buffer.alloc(65).indexOf(1,0,-1)\n664\n\u003e Buffer.alloc(65).indexOf(1,0,-1)\n14656\n\u003e Buffer.alloc(2048).indexOf(145,0,-1)\n189041\n```\n\nCode involved:\nhttps://github.com/nodejs/node/blob/b2248fd37020cbffc7415e01f89d44171e4963d9/src/node_buffer.cc#L1187-L1188\n\nNothing validates limits on that, either in native side or in JS.\n\nRegression since https://github.com/nodejs/node/pull/62390\n\n\n","author":{"url":"https://github.com/ChALkeR","@type":"Person","name":"ChALkeR"},"datePublished":"2026-04-21T15:15:02.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/62873/node/issues/62873"}