|
Ran
|
Jobs
1
|
Files
714
|
Run time
2min
|
Badge
README BADGES
|
push
github
chore(deps): bump ws from 8.19.0 to 8.20.1 in /internal/acceptance/ws-server (#6359) Bumps [ws](https://github.com/websockets/ws) from 8.19.0 to 8.20.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/websockets/ws/releases">ws's releases</a>.</em></p> <blockquote> <h2>8.20.1</h2> <h1>Bug fixes</h1> <ul> <li>Fixed an uninitialized memory disclosure issue in <code>websocket.close()</code> (c0327ec1).</li> </ul> <p>Providing a <code>TypedArray</code> (e.g. <code>Float32Array</code>) as the <code>reason</code> argument for <code>websocket.close()</code>, rather than the supported string or <code>Buffer</code> types, caused uninitialized memory to be disclosed to the remote peer.</p> <pre lang="js"><code>import { deepStrictEqual } from 'node:assert'; import { WebSocket, WebSocketServer } from 'ws'; <p>const wss = new WebSocketServer( { port: 0, skipUTF8Validation: true }, function () { const { port } = wss.address(); const ws = new WebSocket(<code>ws://localhost:${port}</code>, { skipUTF8Validation: true });</p> <pre><code>ws.on('close', function (code, reason) { deepStrictEqual(reason, Buffer.alloc(80)); }); </code></pre> <p>} );</p> <p>wss.on('connection', function (ws) { ws.close(1000, new Float32Array(20)); }); </code></pre></p> <p>The issue was privately reported by <a href="https://github.com/ChALkeR">Nikita Skovoroda</a>.</p> <h2>8.20.0</h2> <h1>Features</h1> <ul> <li>Added exports for the <code>PerMessageDeflate</code> class and utilities for the <code>Sec-WebSocket-Extensions</code> and <code>Sec-WebSocket-Protocol</code> headers (d3503c1f).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/websockets/ws/commit/5d9b31623"><code>5d9b316</code></a> [dist] 8.20.1</li> <li><a href="https://github.com/websockets/ws/commit/c0327ec15"><code>c0327ec</code></a> [security] Fix uninitialized ... (continued)
36609 of 79878 relevant lines covered (45.83%)
305.72 hits per line
| Lines | Coverage | ∆ | File |
|---|---|---|---|
| 13 |
85.64 |
-6.44% | config/config_source.go |
| 2 |
69.83 |
-0.3% | internal/databroker/server_backend.go |
| 2 |
48.3 |
0.18% | internal/databroker/server_clustered_follower.go |
| 2 |
89.19 |
-5.41% | pkg/fanout/fanout.go |
| 2 |
90.91 |
-3.64% | pkg/fanout/receive.go |
| 2 |
88.52 |
-0.44% | pkg/storage/postgres/postgres.go |
| ID | Job ID | Ran | Files | Coverage | |
|---|---|---|---|---|---|
| 1 | 26168538077.1 | 714 |
45.83 |
GitHub Action Run |
| Coverage | ∆ | File | Lines | Relevant | Covered | Missed | Hits/Line |
|---|