Skip to content

"deserializer.readDouble()" results in an abort #37978

Closed
@zyscoder

Description

@zyscoder

What steps will reproduce the bug?

Setup a node instance,

» node

and run the following javascript code.

new v8.Deserializer(new v8.Serializer().releaseBuffer()).readDouble()

Then an abort occurs.

How often does it reproduce? Is there a required condition?

This abort can always be triggered following the steps above.

What is the expected behavior?

If any error occurs, an exception or other similar error-reporting stuff should be thrown. There is no reason to abort the whole node process.

What do you see instead?

» node
> new v8.Deserializer(new v8.Serializer().releaseBuffer()).readDouble()
[1]    452627 segmentation fault (core dumped)  /path/to/node-v14.14.0/node
                                                                                                                                                                                                                                                 

Additional information

Metadata

Metadata

Assignees

No one assigned

    Labels

    confirmed-bugIssues with confirmed bugs.v8 moduleIssues and PRs related to the "v8" subsystem.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions