René's URL Explorer Experiment


Title: zlib: fix use-after-free when reset() is called during write by mcollina · Pull Request #62325 · nodejs/node · GitHub

Open Graph Title: zlib: fix use-after-free when reset() is called during write by mcollina · Pull Request #62325 · nodejs/node

X Title: zlib: fix use-after-free when reset() is called during write by mcollina · Pull Request #62325 · nodejs/node

Description: The Reset() method did not check the write_in_progress_ flag before resetting the compression stream. This allowed reset() to free the compression library's internal state while a worker thread was still using it during an async write, causing a use-after-free. Add a write_in_progress_ guard to Reset() that throws an error if a write is in progress, matching the existing pattern used by Close() and Write(). This does not fall within a threat model because it cannot be exploited from the outside. Refs: https://hackerone.com/reports/3609132

Open Graph Description: The Reset() method did not check the write_in_progress_ flag before resetting the compression stream. This allowed reset() to free the compression library's internal state while a worker thread...

X Description: The Reset() method did not check the write_in_progress_ flag before resetting the compression stream. This allowed reset() to free the compression library's internal state while a worker th...

Opengraph URL: https://github.com/nodejs/node/pull/62325

X: @github

direct link

Domain: redirect.github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:1f44edf0-d086-b89f-68e8-f831d371048f
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8CA2:2F06B1:2DF3481:40C1C35:6A4C0980
html-safe-nonce75f56dd6b418ab12b5193a4141cb17a901e539093bf63a2eb1a46131bd32b34a
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4Q0EyOjJGMDZCMToyREYzNDgxOjQwQzFDMzU6NkE0QzA5ODAiLCJ2aXNpdG9yX2lkIjoiODExNDQ1NDMyOTQwNDY4ODc2OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac09470f09843e792c2f8a4742041b0e98578e3265fe0820bc53d4ed4b33adc504
hovercard-subject-tagpull_request:3416481578
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/nodejs/node/pull/62325/files
twitter:imagehttps://avatars.githubusercontent.com/u/52195?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/52195?s=400&v=4
og:image:altThe Reset() method did not check the write_in_progress_ flag before resetting the compression stream. This allowed reset() to free the compression library's internal state while a worker thread...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None940b0dbb4d0fe72558ee760b2ff0f25a504383fdfe404f3a7691ec853b8dc17f
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/nodejs/node git https://github.com/nodejs/node.git
octolytics-dimension-user_id9950313
octolytics-dimension-user_loginnodejs
octolytics-dimension-repository_id27193779
octolytics-dimension-repository_nwonodejs/node
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id27193779
octolytics-dimension-repository_network_root_nwonodejs/node
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releaseb0267d17ea43e55446153a7e2c60bb6ac3cffd6b
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://redirect.github.com/nodejs/node/pull/62325/files#start-of-content
https://redirect.github.com/
Sign in https://redirect.github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F62325%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://redirect.github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F62325%2Ffiles
Sign up https://redirect.github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=nodejs%2Fnode
Reloadhttps://redirect.github.com/nodejs/node/pull/62325/files
Reloadhttps://redirect.github.com/nodejs/node/pull/62325/files
Reloadhttps://redirect.github.com/nodejs/node/pull/62325/files
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/62325/files
nodejs https://redirect.github.com/nodejs
nodehttps://redirect.github.com/nodejs/node
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/62325/files
Notifications https://redirect.github.com/login?return_to=%2Fnodejs%2Fnode
Fork 36k https://redirect.github.com/login?return_to=%2Fnodejs%2Fnode
Star 118k https://redirect.github.com/login?return_to=%2Fnodejs%2Fnode
Code https://redirect.github.com/nodejs/node
Issues 1.4k https://redirect.github.com/nodejs/node/issues
Pull requests 967 https://redirect.github.com/nodejs/node/pulls
Actions https://redirect.github.com/nodejs/node/actions
Projects https://redirect.github.com/nodejs/node/projects
Security and quality 0 https://redirect.github.com/nodejs/node/security
Insights https://redirect.github.com/nodejs/node/pulse
Code https://redirect.github.com/nodejs/node
Issues https://redirect.github.com/nodejs/node/issues
Pull requests https://redirect.github.com/nodejs/node/pulls
Actions https://redirect.github.com/nodejs/node/actions
Projects https://redirect.github.com/nodejs/node/projects
Security and quality https://redirect.github.com/nodejs/node/security
Insights https://redirect.github.com/nodejs/node/pulse
Sign up for GitHub https://redirect.github.com/signup?return_to=%2Fnodejs%2Fnode%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://redirect.github.com/login?return_to=%2Fnodejs%2Fnode%2Fissues%2Fnew%2Fchoose
nodejs-github-bothttps://redirect.github.com/nodejs-github-bot
nodejs:mainhttps://redirect.github.com/nodejs/node/tree/main
mcollina:fix-use-after-free-zlibhttps://redirect.github.com/mcollina/node/tree/fix-use-after-free-zlib
Conversation 6 https://redirect.github.com/nodejs/node/pull/62325
Commits 1 https://redirect.github.com/nodejs/node/pull/62325/commits
Checks 55 https://redirect.github.com/nodejs/node/pull/62325/checks
Files changed 2 https://redirect.github.com/nodejs/node/pull/62325/files
zlib: fix use-after-free when reset() is called during write https://redirect.github.com/nodejs/node/pull/62325/files#top
Show all changes 1 commit https://redirect.github.com/nodejs/node/pull/62325/files
41f9937 zlib: fix use-after-free when reset() is called during write mcollina Mar 18, 2026 https://redirect.github.com/nodejs/node/pull/62325/commits/41f99375e60bababdbb9413caa9e148ae2fe7df2
Clear filters https://redirect.github.com/nodejs/node/pull/62325/files
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/62325/files
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/62325/files
node_zlib.cc https://redirect.github.com/nodejs/node/pull/62325/files#diff-55807528c167d8a7fc7f345ce23dc5c5e4d4e2635caaf21b90f6153044b4aa39
test-zlib-reset-during-write.js https://redirect.github.com/nodejs/node/pull/62325/files#diff-81ba11728ddcc81a36150a1fd9d418812b93f981692907e6b26485937d349f0e
src/node_zlib.cchttps://redirect.github.com/nodejs/node/pull/62325/files#diff-55807528c167d8a7fc7f345ce23dc5c5e4d4e2635caaf21b90f6153044b4aa39
View file https://redirect.github.com/mcollina/node/blob/41f99375e60bababdbb9413caa9e148ae2fe7df2/src/node_zlib.cc
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://redirect.github.com/nodejs/node/pull/62325/{{ revealButtonHref }}
https://redirect.github.com/nodejs/node/pull/62325/files#diff-55807528c167d8a7fc7f345ce23dc5c5e4d4e2635caaf21b90f6153044b4aa39
https://redirect.github.com/nodejs/node/pull/62325/files#diff-55807528c167d8a7fc7f345ce23dc5c5e4d4e2635caaf21b90f6153044b4aa39
test/parallel/test-zlib-reset-during-write.jshttps://redirect.github.com/nodejs/node/pull/62325/files#diff-81ba11728ddcc81a36150a1fd9d418812b93f981692907e6b26485937d349f0e
View file https://redirect.github.com/mcollina/node/blob/41f99375e60bababdbb9413caa9e148ae2fe7df2/test/parallel/test-zlib-reset-during-write.js
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://redirect.github.com/nodejs/node/pull/62325/{{ revealButtonHref }}
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/62325/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.