assert: make assert.fail less affected by prototype tampering

PR-URL: #42918 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
nodejs · May 10, 2022 · e74a8da · e74a8da
1 parent 88692d8
commit e74a8da
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/lib/internal/assert/assertion_error.js b/lib/internal/assert/assertion_error.js
@@ -441,6 +441,7 @@ class AssertionError extends Error {
 
     this.generatedMessage = !message;
     ObjectDefineProperty(this, 'name', {
+      __proto__: null,
       value: 'AssertionError [ERR_ASSERTION]',
       enumerable: false,
       writable: true,

diff --git a/test/parallel/test-assert-fail.js b/test/parallel/test-assert-fail.js
@@ -1,6 +1,6 @@
 'use strict';
 
-require('../common');
+const common = require('../common');
 const assert = require('assert');
 
 // No args
@@ -38,3 +38,7 @@ assert.throws(() => {
   name: 'TypeError',
   message: 'custom message'
 });
+
+Object.prototype.get = common.mustNotCall();
+assert.throws(() => assert.fail(''), { code: 'ERR_ASSERTION' });
+delete Object.prototype.get;