Filip Skokan 8c44e38dc6 crypto: reset random caches across snapshots ...

Startup snapshots retain unused randomInt() and UUID cache entries,
causing deserialized processes to replay the same random values.

Clear the caches after user serialization callbacks and before user
deserialization callbacks. The latter also handles caches refilled by
microtasks, next ticks, or exit handlers after serialization callbacks.

Refs: https://hackerone.com/reports/4059814
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
Assisted-by: Codex
PR-URL: https://github.com/nodejs-private/node-private/pull/987
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Ruy Adorno <ruy@vlt.sh>
CVE-ID: CVE-2026-106074

2026-10-21 12:57:43 +02:00

..

cpu_profiler.js

lib: add lint rule to enforce use of kEmptyObject

2026-06-10 10:56:56 +00:00

heap_profile.js

lib: add lint rule to enforce use of kEmptyObject

2026-06-10 10:56:56 +00:00

startup_snapshot.js

crypto: reset random caches across snapshots

2026-10-21 12:57:43 +02:00