'use strict'; const common = require('../common'); const assert = require('assert'); const outsideBounds = common.expectsError({ code: 'ERR_BUFFER_OUT_OF_BOUNDS', type: RangeError, message: 'Attempt to write outside buffer bounds' }, 2); assert.throws(() => Buffer.alloc(9).write('foo', -1), outsideBounds); assert.throws(() => Buffer.alloc(9).write('foo', 10), outsideBounds); const resultMap = new Map([ ['utf8', Buffer.from([102, 111, 111, 0, 0, 0, 0, 0, 0])], ['ucs2', Buffer.from([102, 0, 111, 0, 111, 0, 0, 0, 0])], ['ascii', Buffer.from([102, 111, 111, 0, 0, 0, 0, 0, 0])], ['latin1', Buffer.from([102, 111, 111, 0, 0, 0, 0, 0, 0])], ['binary', Buffer.from([102, 111, 111, 0, 0, 0, 0, 0, 0])], ['utf16le', Buffer.from([102, 0, 111, 0, 111, 0, 0, 0, 0])], ['base64', Buffer.from([102, 111, 111, 0, 0, 0, 0, 0, 0])], ['hex', Buffer.from([102, 111, 111, 0, 0, 0, 0, 0, 0])] ]); // utf8, ucs2, ascii, latin1, utf16le const encodings = ['utf8', 'utf-8', 'ucs2', 'ucs-2', 'ascii', 'latin1', 'binary', 'utf16le', 'utf-16le']; encodings .reduce((es, e) => es.concat(e, e.toUpperCase()), []) .forEach((encoding) => { const buf = Buffer.alloc(9); const len = Buffer.byteLength('foo', encoding); assert.strictEqual(buf.write('foo', 0, len, encoding), len); if (encoding.includes('-')) encoding = encoding.replace('-', ''); assert.deepStrictEqual(buf, resultMap.get(encoding.toLowerCase())); }); // base64 ['base64', 'BASE64'].forEach((encoding) => { const buf = Buffer.alloc(9); const len = Buffer.byteLength('Zm9v', encoding); assert.strictEqual(buf.write('Zm9v', 0, len, encoding), len); assert.deepStrictEqual(buf, resultMap.get(encoding.toLowerCase())); }); // hex ['hex', 'HEX'].forEach((encoding) => { const buf = Buffer.alloc(9); const len = Buffer.byteLength('666f6f', encoding); assert.strictEqual(buf.write('666f6f', 0, len, encoding), len); assert.deepStrictEqual(buf, resultMap.get(encoding.toLowerCase())); }); // Invalid encodings for (let i = 1; i < 10; i++) { const encoding = String(i).repeat(i); const error = common.expectsError({ code: 'ERR_UNKNOWN_ENCODING', type: TypeError, message: `Unknown encoding: ${encoding}` }); assert.ok(!Buffer.isEncoding(encoding)); assert.throws(() => Buffer.alloc(9).write('foo', encoding), error); } // UCS-2 overflow CVE-2018-12115 for (let i = 1; i < 4; i++) { // Allocate two Buffers sequentially off the pool. Run more than once in case // we hit the end of the pool and don't get sequential allocations const x = Buffer.allocUnsafe(4).fill(0); const y = Buffer.allocUnsafe(4).fill(1); // Should not write anything, pos 3 doesn't have enough room for a 16-bit char assert.strictEqual(x.write('ыыыыыы', 3, 'ucs2'), 0); // CVE-2018-12115 experienced via buffer overrun to next block in the pool assert.strictEqual(Buffer.compare(y, Buffer.alloc(4, 1)), 0); } // Should not write any data when there is no space for 16-bit chars const z = Buffer.alloc(4, 0); assert.strictEqual(z.write('\u0001', 3, 'ucs2'), 0); assert.strictEqual(Buffer.compare(z, Buffer.alloc(4, 0)), 0); // Large overrun could corrupt the process assert.strictEqual(Buffer.alloc(4) .write('ыыыыыы'.repeat(100), 3, 'utf16le'), 0);