robobun b51e993bc2 fix: reject null bytes in spawn args, env, and shell arguments (#25698) ...

## Summary

- Reject null bytes in command-line arguments passed to `Bun.spawn` and
`Bun.spawnSync`
- Reject null bytes in environment variable keys and values
- Reject null bytes in shell (`$`) template literal arguments

This prevents null byte injection attacks (CWE-158) where null bytes in
strings could cause unintended truncation when passed to the OS,
potentially allowing attackers to bypass file extension validation or
create files with unexpected names.

## Test plan

- [x] Added tests in `test/js/bun/spawn/null-byte-injection.test.ts`
- [x] Tests pass with debug build: `bun bd test
test/js/bun/spawn/null-byte-injection.test.ts`
- [x] Tests fail with system Bun (confirming the fix works)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Bot <claude-bot@bun.sh>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Jarred Sumner <jarred@jarredsumner.com>

2025-12-26 23:39:37 -08:00

..

fixtures

make sure ipc with json serialization still works when bun is parent and not the child (#14756)

2025-01-11 19:18:28 -08:00

bad-fixture.js

…

bash-echo.sh

…

bun-ipc-child-respond.js

…

bun-ipc-child.js

…

bun-ipc-inherit.test.ts

test: dont overwrite root package.json when running bun-ipc-inherit.test.ts (#15126)

2024-11-13 00:14:57 -08:00

bun-spawn-test.js

…

does-not-hang.js

rid nearly all use of ExceptionRef in zig (#15100)

2024-11-13 15:23:52 -08:00

empty.js

…

exit-code-0.js

…

exit-code-1.js

…

exit-code-await-throw-1.js

…

exit-code-unhandled-throw.js

…

exit-code.test.ts

…

exit.js

…

job-object-bug.test.ts

Use ReadableStream.prototype.* in tests instead of new Response(...).* (#20937)

2025-07-14 00:47:53 -07:00

job-object-bug.ts

…

null-byte-injection.test.ts

fix: reject null bytes in spawn args, env, and shell arguments (#25698)

2025-12-26 23:39:37 -08:00

readablestream-helpers.test.ts

ReadableStream .text(), .json(), .arrayBuffer(), .bytes() (#20694)

2025-06-28 00:27:57 -07:00

spawn_waiter_thread-fixture.js

…

spawn_waiter_thread.test.ts

…

spawn-empty-arrayBufferOrBlob.test.ts

Use ReadableStream.prototype.* in tests instead of new Response(...).* (#20937)

2025-07-14 00:47:53 -07:00

spawn-env.test.ts

Fix formatters not running in CI + delete unnecessary files (#19433)

2025-05-08 23:22:16 -07:00

spawn-kill-signal.test.ts

…

spawn-maxbuf.test.ts

node child process maxbuf support (#18293)

2025-04-03 17:03:26 -07:00

spawn-noread-leak.test.ts

fix memory leak when pipe Bun.spawn stdio is never read repeatedly (#20102)

2025-05-31 11:16:49 -07:00

spawn-path.test.ts

Use ReadableStream.prototype.* in tests instead of new Response(...).* (#20937)

2025-07-14 00:47:53 -07:00

spawn-pipe-leak.test.ts

Deflake test/js/bun/spawn/spawn-pipe-leak.test.ts

2025-10-17 21:38:49 -07:00

spawn-signal.test.ts

Implement isolated event loop for spawnSync (#24436)

2025-11-07 05:28:33 -08:00

spawn-stdin-destroy.test.ts

…

spawn-stdin-readable-stream-edge-cases.test.ts

Use ReadableStream.prototype.* in tests instead of new Response(...).* (#20937)

2025-07-14 00:47:53 -07:00

spawn-stdin-readable-stream-integration.test.ts

Use ReadableStream.prototype.* in tests instead of new Response(...).* (#20937)

2025-07-14 00:47:53 -07:00

spawn-stdin-readable-stream-sync.test.ts

Enable ReadableStream as stdin for Bun.spawn (#20582)

2025-06-27 19:42:03 -07:00

spawn-stdin-readable-stream.test.ts

fix(windows): prevent data loss in pipe reads after libuv 1.51.0 upgrade (#23340)

2025-10-07 18:33:34 -07:00

spawn-stream-http-fixture.js

…

spawn-stream-serve.test.ts

…

spawn-streaming-stdin.test.ts

Unskip some tests (#22116)

2025-08-27 06:39:11 -07:00

spawn-streaming-stdout-repro.js

…

spawn-streaming-stdout.test.ts

…

spawn-stress.test.ts

…

spawn.ipc.bun-node.test.ts

Fix formatters not running in CI + delete unnecessary files (#19433)

2025-05-08 23:22:16 -07:00

spawn.ipc.node-bun.test.ts

Fix formatters not running in CI + delete unnecessary files (#19433)

2025-05-08 23:22:16 -07:00

spawn.ipc.test.ts

…

spawn.test.ts

Document & cover some missing spawn/spawnSync options (#24417)

2025-11-06 14:37:26 -08:00

spawnSync-counters-fixture.ts

Reduce CPU usage when using Bun.spawnSync with inherit (#19105)

2025-05-03 20:33:57 -07:00

spawnsync-isolated-event-loop.test.ts

Implement isolated event loop for spawnSync (#24436)

2025-11-07 05:28:33 -08:00

spawnSync-memfd-fixture.ts

Reduce CPU usage when using Bun.spawnSync with inherit (#19105)

2025-05-03 20:33:57 -07:00

spawnSync.test.ts

Fix formatters not running in CI + delete unnecessary files (#19433)

2025-05-08 23:22:16 -07:00

stdin-repro.js

…