blob: 494adbb9e2bc7ca062738a0898f19f968e375dd8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
'use strict';
const common = require('../common');
const assert = require('assert');
const fs = require('fs').promises;
const { MessageChannel } = require('worker_threads');
const { once } = require('events');
// Test that overriding the internal kTransfer method of a JSTransferable does
// not enable loading arbitrary code from the disk.
module.exports = {
NotARealClass: common.mustNotCall()
};
(async function() {
const fh = await fs.open(__filename);
assert.strictEqual(fh.constructor.name, 'FileHandle');
const kTransfer = Object.getOwnPropertySymbols(Object.getPrototypeOf(fh))
.filter((symbol) => symbol.description === 'messaging_transfer_symbol')[0];
assert.strictEqual(typeof kTransfer, 'symbol');
fh[kTransfer] = () => {
return {
data: '✨',
deserializeInfo: `${__filename}:NotARealClass`
};
};
const { port1, port2 } = new MessageChannel();
port1.postMessage(fh, [ fh ]);
port2.on('message', common.mustNotCall());
const [ exception ] = await once(port2, 'messageerror');
assert.match(exception.message, /Missing internal module/);
port2.close();
})().then(common.mustCall());
|
