Skip to content

zlib: validate pledgedSrcSize for sync zstd#64601

Open
Archkon wants to merge 2 commits into
nodejs:mainfrom
Archkon:zlib2
Open

zlib: validate pledgedSrcSize for sync zstd#64601
Archkon wants to merge 2 commits into
nodejs:mainfrom
Archkon:zlib2

Conversation

@Archkon

@Archkon Archkon commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

Fixes: #64600

@nodejs-github-bot nodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. needs-ci PRs that need a full CI run. zlib Issues and PRs related to the zlib subsystem. labels Jul 19, 2026
@Archkon
Archkon force-pushed the zlib2 branch 2 times, most recently from 56b199b to ef6ad04 Compare July 19, 2026 15:17
@Archkon

Archkon commented Jul 19, 2026

Copy link
Copy Markdown
Contributor Author

It seems thta github action check failed due to flaky test,could some collaborator rerun this ? Thanks !

@codecov

codecov Bot commented Jul 19, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.12%. Comparing base (4f844f4) to head (ef6ad04).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #64601      +/-   ##
==========================================
- Coverage   90.13%   90.12%   -0.01%     
==========================================
  Files         741      741              
  Lines      241976   241993      +17     
  Branches    45543    45547       +4     
==========================================
- Hits       218116   218108       -8     
- Misses      15379    15412      +33     
+ Partials     8481     8473       -8     
Files with missing lines Coverage Δ
src/node_zlib.cc 78.82% <100.00%> (+0.32%) ⬆️

... and 28 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Zstd replaces a configured pledged source size with the input size when
the first call to ZSTD_compressStream2() uses ZSTD_e_end. Track consumed
input in Node and report ZSTD_error_srcSize_wrong when the completed
frame does not match the original pledge.

Signed-off-by: Archkon <180910180+Archkon@users.noreply.github.com>
@Archkon
Archkon force-pushed the zlib2 branch 2 times, most recently from 95703df to aa63d44 Compare July 20, 2026 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c++ Issues and PRs that require attention from people who are familiar with C++. needs-ci PRs that need a full CI run. zlib Issues and PRs related to the zlib subsystem.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

zlib: zstdCompressSync() does not validate pledgedSrcSize

3 participants