Skip to content

[v26.x backport] http2: avoid uaf while receiving and sending rst_stream #10888

[v26.x backport] http2: avoid uaf while receiving and sending rst_stream

[v26.x backport] http2: avoid uaf while receiving and sending rst_stream #10888

Triggered via pull request August 13, 2026 13:06
Status Cancelled
Total duration 2h 7m 11s
Artifacts 2

test-shared.yml

on: pull_request
Build slim tarball
1m 15s
Build slim tarball
aarch64-linux: Cache V8 build
1h 8m
aarch64-linux: Cache V8 build
Matrix: build
Matrix: build-openssl
Fit to window
Zoom out
Zoom in

Annotations

17 errors
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-dh-constructor.js#L11
--- stderr --- node:internal/crypto/diffiehellman:133 this[kHandle] = new _DiffieHellman(sizeOrKey, generator); ^ TypeError: Invalid DH parameters at new DiffieHellman (node:internal/crypto/diffiehellman:133:19) at Object.createDiffieHellman (node:crypto:158:10) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-dh-constructor.js:11:20) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5) at node:internal/main/run_main_module:33:47 { code: 'ERR_INVALID_ARG_VALUE' } Node.js v26.7.1-pre Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-dh-constructor.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-dh.js#L15
--- stderr --- node:internal/crypto/diffiehellman:133 this[kHandle] = new _DiffieHellman(sizeOrKey, generator); ^ TypeError: Invalid DH parameters at new DiffieHellman (node:internal/crypto/diffiehellman:133:19) at Object.createDiffieHellman (node:crypto:158:10) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-dh.js:15:22) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5) at node:internal/main/run_main_module:33:47 { code: 'ERR_INVALID_ARG_VALUE' } Node.js v26.7.1-pre Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-dh.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-classes.js#L29
--- stderr --- node:internal/crypto/diffiehellman:133 this[kHandle] = new _DiffieHellman(sizeOrKey, generator); ^ TypeError: Invalid DH parameters at new DiffieHellman (node:internal/crypto/diffiehellman:133:19) at Object.createDiffieHellman (node:crypto:158:10) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-classes.js:29:34) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5) at node:internal/main/run_main_module:33:47 { code: 'ERR_INVALID_ARG_VALUE' } Node.js v26.7.1-pre Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-classes.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-certificate.js#L45
--- stderr --- node:internal/assert/utils:146 throw error; ^ AssertionError [ERR_ASSERTION]: Expected values to be strictly equal: false !== true at checkMethods (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-certificate.js:45:12) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-certificate.js:98:3) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5) at node:internal/main/run_main_module:33:47 { generatedMessage: true, code: 'ERR_ASSERTION', actual: false, expected: true, operator: 'strictEqual', diff: 'simple' } Node.js v26.7.1-pre Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-certificate.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-authenticated-stream.js#L33
--- stderr --- node:internal/crypto/cipher:121 this[kHandle] = new CipherBase(isEncrypt, cipher, credential, iv, authTagLength); ^ Error: CCM encryption not supported in FIPS mode at Decipheriv.createCipherBase (node:internal/crypto/cipher:121:19) at Decipheriv.createCipherWithIV (node:internal/crypto/cipher:132:3) at new Decipheriv (node:internal/crypto/cipher:251:3) at Object.createDecipheriv (node:crypto:154:10) at direct (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-authenticated-stream.js:33:20) at test (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-authenticated-stream.js:123:3) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-authenticated-stream.js:130:1) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) { code: 'ERR_CRYPTO_UNSUPPORTED_OPERATION' } Node.js v26.7.1-pre Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-authenticated-stream.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-authenticated.js#L562
--- stderr --- node:internal/crypto/cipher:121 this[kHandle] = new CipherBase(isEncrypt, cipher, credential, iv, authTagLength); ^ Error: CCM encryption not supported in FIPS mode at Decipheriv.createCipherBase (node:internal/crypto/cipher:121:19) at Decipheriv.createCipherWithIV (node:internal/crypto/cipher:132:3) at new Decipheriv (node:internal/crypto/cipher:251:3) at Object.createDecipheriv (node:crypto:154:10) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-authenticated.js:562:29) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) { code: 'ERR_CRYPTO_UNSUPPORTED_OPERATION' } Node.js v26.7.1-pre --- stdout --- 1..0 # Skipped: IV len < 12 bytes unsupported in FIPS mode 1..0 # Skipped: IV len < 12 bytes unsupported in FIPS mode 1..0 # Skipped: IV len < 12 bytes unsupported in FIPS mode 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported aes-128-ocb test 1..0 # Skipped: unsupported chacha20-poly1305 test 1..0 # Skipped: unsupported chacha20-poly1305 test 1..0 # Skipped: unsupported aes-256-ocb test 1..0 # Skipped: unsupported aes-256-ocb test 1..0 # Skipped: unsupported chacha20-poly1305 test Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-authenticated.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-async-sign-verify.js#L44
--- stderr --- node:internal/crypto/sig:207 throw err; ^ Error: error:03000096:digital envelope routines::operation not supported for this keytype at Object.signOneShot [as sign] (node:internal/crypto/sig:205:42) at test (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-async-sign-verify.js:44:27) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-async-sign-verify.js:97:3) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5) at node:internal/main/run_main_module:33:47 { library: 'digital envelope routines', reason: 'operation not supported for this keytype', code: 'ERR_OSSL_EVP_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE' } Node.js v26.7.1-pre Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-async-sign-verify.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-argon2-job.js#L43
--- stderr --- node:internal/assert/utils:146 throw error; ^ AssertionError [ERR_ASSERTION]: Expected values to be strictly equal: + actual - expected + 'ERR_OSSL_EVP_UNSUPPORTED' - 'ERR_OSSL_INVALID_THREAD_POOL_SIZE' ^ at assertError (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-argon2-job.js:43:10) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-argon2-job.js:56:5) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5) at node:internal/main/run_main_module:33:47 { generatedMessage: true, code: 'ERR_ASSERTION', actual: 'ERR_OSSL_EVP_UNSUPPORTED', expected: 'ERR_OSSL_INVALID_THREAD_POOL_SIZE', operator: 'strictEqual', diff: 'simple' } Node.js v26.7.1-pre Command: out/Release/node --expose-internals --no-warnings /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-argon2-job.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto-argon2.js#L15
--- stderr --- node:internal/crypto/argon2:120 throw err; ^ Error: Argon2 derivation failed at Object.argon2Sync (node:internal/crypto/argon2:117:37) at runArgon2 (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-argon2.js:15:29) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-argon2.js:107:19) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5) at node:internal/main/run_main_module:33:47 { opensslErrorStack: [ 'error:0308010C:digital envelope routines::unsupported' ], library: 'digital envelope routines', reason: 'unsupported', code: 'ERR_OSSL_EVP_UNSUPPORTED' } Node.js v26.7.1-pre Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto-argon2.js
aarch64-linux: with shared openssl-fips-3.5.5 / build: test/parallel/test-crypto.js#L57
--- stderr --- node:internal/tls/secure-context:326 context.loadPKCS12(toBuf(pfx), toBuf(passphrase)); ^ Error: Unsupported PKCS12 PFX data at configSecureContext (node:internal/tls/secure-context:326:15) at Object.createSecureContext (node:internal/tls/common:114:3) at Object.<anonymous> (/home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto.js:57:5) at Module._compile (node:internal/modules/cjs/loader:1934:14) at Object..js (node:internal/modules/cjs/loader:2074:10) at Module.load (node:internal/modules/cjs/loader:1656:32) at Module._load (node:internal/modules/cjs/loader:1448:12) at wrapModuleLoad (node:internal/modules/cjs/loader:261:19) at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5) at node:internal/main/run_main_module:33:47 { code: 'ERR_CRYPTO_UNSUPPORTED_OPERATION' } Node.js v26.7.1-pre Command: out/Release/node /home/runner/work/_temp/node-v26.7.1-nightly2026-08-1307f81f578f-slim/test/parallel/test-crypto.js
x86_64-linux: with shared libraries and perfetto / build
The run was canceled by @aduh95.
x86_64-linux: with shared libraries and perfetto / build
The operation was canceled.
Test Shared libraries
The run was canceled by @aduh95.
Test Shared libraries
The run was canceled by @aduh95.
Test Shared libraries
The run was canceled by @aduh95.
x86_64-darwin: with shared libraries / build
The run was canceled by @aduh95.
x86_64-darwin: with shared libraries / build
The operation was canceled.

Artifacts

Produced during runtime
Name Size Digest
libv8-aarch64-linux.nar
32.6 MB
sha256:608484eac71b452066b1b8a643dc98d5b65a9fff095f9f678003b3b7c989eefe
node-v26.7.1-nightly2026-08-1307f81f578f-slim.tar.gz
46.8 MB
sha256:44813eb3407530f4f113d4115a650d230c3399b5191fbdb0804e005f2c3b259e