René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"localStorage: a malformed backing file aborts the process via CHECK","articleBody":"### Version\n\nv27.0.0-pre (`9f7ae86d8b5`)\n\n### Platform\n\n```text\nDarwin 25.6.0 arm64\n```\n\n### Subsystem\n\nwebstorage, sqlite\n\n### What steps will reproduce the bug?\n\n`src/node_webstorage.cc` asserts the SQLite type of every column it reads, but the backing file is a user-specified path. Node's own tables are `STRICT`, but the DDL is `CREATE TABLE IF NOT EXISTS`, so a file that already contains tables of those names is adopted as-is, `STRICT` or not.\n\n```js\n// craft.cjs\nconst { DatabaseSync } = require('node:sqlite');\nconst out = '/tmp/ws.db';\nfor (const s of ['', '-wal', '-shm']) require('node:fs').rmSync(out + s, { force: true });\n\n// Node's schema, minus STRICT. BLOB has no affinity, so a TEXT value stays TEXT.\nconst db = new DatabaseSync(out);\ndb.exec(`\n  CREATE TABLE nodejs_webstorage(\n    key BLOB NOT NULL, value BLOB NOT NULL, PRIMARY KEY(key));\n  CREATE TABLE nodejs_webstorage_state(\n    max_size INTEGER NOT NULL DEFAULT 10485760, total_size INTEGER NOT NULL,\n    schema_version INTEGER NOT NULL DEFAULT 1,\n    single_row_ INTEGER NOT NULL DEFAULT 1 CHECK(single_row_ = 1),\n    PRIMARY KEY(single_row_));\n`);\n// A real UTF-16LE key, so that lookups still match; only the value is TEXT.\ndb.prepare('INSERT INTO nodejs_webstorage (key, value) VALUES (?, ?)')\n  .run(Buffer.from('greeting', 'utf16le'), 'hello');\ndb.prepare('INSERT INTO nodejs_webstorage_state (total_size, schema_version)' +\n  ' VALUES (0, 1)').run();\ndb.close();\n```\n\n```console\n$ node craft.cjs\n$ node --localstorage-file=/tmp/ws.db -e \"localStorage.getItem('greeting')\"\n```\n\n### How often does it reproduce? Is there a required condition?\n\nThe only condition is that the file exists with the wrong stored type.\n\n### What is the expected behavior? Why is that the expected behavior?\n\nA thrown error.\n\n### What do you see instead?\n\n`SIGABRT`, exit 134:\n\n```\n#  node[96447]: MaybeLocal\u003cValue> node::webstorage::Storage::Load(Local\u003cName>)\n#     at ../src/node_webstorage.cc:354\n#  Assertion failed: sqlite3_column_type(stmt.get(), 0) == 4\n```\n\n### Additional information\n\nSeparately, line 187 re-runs `init_sql_v0` and overwrites the result of the `sqlite3_prepare_v2()` five lines above it, so prepare failures go unreported. Given a `nodejs_webstorage_state` table with no `schema_version` column, the real error is replaced by `Error: bad parameter or other API misuse`.","author":{"url":"https://github.com/TrevorBurnham","@type":"Person","name":"TrevorBurnham"},"datePublished":"2026-09-07T15:12:25Z","url":"https://github.com/nodejs/node/issues/65878"}