mirrors/bun.sh
1
0
Fork 0
mirror of https://github.com/oven-sh/bun synced 2026-02-10 19:08:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
9a2dfee3caa5ef616653929eab3ad112d380f752
bun.sh/src
History
Dylan Conway 9a2dfee3ca Fix env loader buffer overflow by using stack fallback allocator (#21416) 
## Summary
- Fixed buffer overflow in env_loader when parsing large environment
variables with escape sequences
- Replaced fixed 4096-byte buffer with a stack fallback allocator that
automatically switches to heap allocation for larger values
- Added comprehensive tests to prevent regression

## Background
The env_loader previously used a fixed threadlocal buffer that could
overflow when parsing environment variables containing escape sequences.
This caused crashes when the parsed value exceeded 4KB.

## Changes
- Replaced fixed buffer with `StackFallbackAllocator` that uses 4KB
stack buffer for common cases and falls back to heap for larger values
- Updated all env parsing functions to accept a reusable buffer
parameter
- Added proper memory cleanup with defer statements

## Test plan
- [x] Added test cases for large environment variables with escape
sequences
- [x] Added test for values larger than 4KB  
- [x] Added edge case tests (empty quotes, escape at EOF)
- [x] All existing env tests continue to pass

fixes #11627
fixes BAPI-1274

🤖 Generated with [Claude Code](https://claude.ai/code)

---------

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-07-28 00:13:17 -07:00
..
allocators
Add safety checks to MultiArrayList and BabyList (#21063)
2025-07-25 18:12:21 -07:00
analytics
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
api
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
ast
Auto reduce banned word count (#20929)
2025-07-25 18:13:43 -07:00
async
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
bake
fix import.meta.url in hmr (#21386)
2025-07-26 20:31:45 -07:00
base64
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
bun.js
Fix env loader buffer overflow by using stack fallback allocator (#21416)
2025-07-28 00:13:17 -07:00
bundler
Fix bundler cyclic imports with async dependencies (#21423)
2025-07-28 00:09:16 -07:00
cli
Fix env loader buffer overflow by using stack fallback allocator (#21416)
2025-07-28 00:13:17 -07:00
codegen
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
collections
Add safety checks to MultiArrayList and BabyList (#21063)
2025-07-25 18:12:21 -07:00
create
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
css
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
deps
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
errno
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
fs
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
glob
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
http
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
init
bun bake templates: --source-map -> --sourcemap (#21130)
2025-07-17 03:13:48 -07:00
install
Fix env loader buffer overflow by using stack fallback allocator (#21416)
2025-07-28 00:13:17 -07:00
interchange
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
io
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
js
Fix running bun test on multiple node:test tests (#19354)
2025-07-24 11:48:55 -07:00
js_lexer
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
libarchive
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
napi
[STAB-861] Suppress known-benign core dumps in CI (#21321)
2025-07-25 16:22:04 -07:00
node-fallbacks
Add export default to more node polyfills (#20747)
2025-06-30 23:02:52 -07:00
paths
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
ptr
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
resolver
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
s3
zig: delete deprecated some bun.jsc apis (#21309)
2025-07-23 17:10:58 -07:00
semver
zig: delete deprecated some bun.jsc apis (#21309)
2025-07-23 17:10:58 -07:00
shell
Fix shell lexer error message handling (#21419)
2025-07-27 23:32:06 -07:00
sourcemap
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
sql
Fix PostgreSQL index out of bounds crash during batch inserts (#21311) (#21316)
2025-07-25 12:53:49 -07:00
string
[STAB-861] Suppress known-benign core dumps in CI (#21321)
2025-07-25 16:22:04 -07:00
test
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
threading
Optimize WaitGroup implementation (#21260)
2025-07-25 18:12:12 -07:00
valkey
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
vm
Add support for node:vm.SyntheticModule (#19878)
2025-06-04 19:41:26 -07:00
watcher
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
.clang-format
…
allocators.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
analytics.zig
Give us way to know if crashing inside exit handler (#21401)
2025-07-27 16:55:55 -07:00
asan-config.c
Fix Linux ASan debug builds (#19657)
2025-05-14 18:42:42 -07:00
ast.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
bake.bind.ts
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
bake.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
bits.zig
remove all usingnamespace in css (#19067)
2025-04-17 14:17:08 -07:00
boringssl.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
brotli.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
btjs.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
bun.exe.manifest
Enable Windows long path support (#21244)
2025-07-20 23:04:17 -07:00
bun.ico
…
bun.js.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
bun.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
bunfig.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
c-headers-for-zig.h
node:zlib: add zstd (#20313)
2025-06-12 14:20:28 -07:00
cache.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
ci_info.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
cli.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
collections.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
compile_target.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
comptime_string_map.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
copy_file.zig
Revert "Fix beforeAll hooks running for unmatched describe blocks when using test filters" (#21292)
2025-07-22 12:53:53 -07:00
crash_handler.zig
[STAB-861] Suppress known-benign core dumps in CI (#21321)
2025-07-25 16:22:04 -07:00
csrf.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
css_scanner.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
darwin.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
defines-table.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
defines.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
dir.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
dns.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
env_loader.zig
Fix env loader buffer overflow by using stack fallback allocator (#21416)
2025-07-28 00:13:17 -07:00
env.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
fallback-backend.html
Fix formatters not running in CI + delete unnecessary files (#19433)
2025-05-08 23:22:16 -07:00
fallback.html
Fix formatters not running in CI + delete unnecessary files (#19433)
2025-05-08 23:22:16 -07:00
fallback.ts
…
favicon.png
…
fd.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
feature_flags.zig
[STAB-861] Suppress known-benign core dumps in CI (#21321)
2025-07-25 16:22:04 -07:00
fixtures_example.com.html
Fix formatters not running in CI + delete unnecessary files (#19433)
2025-05-08 23:22:16 -07:00
fmt.bind.ts
…
fmt.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
fs.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
generated_perf_trace_events.zig
Use macOS signpost api for tracing (#14871)
2025-03-31 04:13:11 -07:00
generated_versions_list.zig
…
glob.zig
Revert "add support for "workspaces.nohoist" and "workspaces.hoistingLimits" (#20124)"
2025-06-03 23:51:03 -07:00
Global.zig
Give us way to know if crashing inside exit handler (#21401)
2025-07-27 16:55:55 -07:00
heap_breakdown.zig
Add safety checks to MultiArrayList and BabyList (#21063)
2025-07-25 18:12:21 -07:00
highway.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
hmac.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
HTMLScanner.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
http.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
identity_context.zig
implement "nodeLinker": "isolated" in bun install (#20440)
2025-07-09 00:19:57 -07:00
import_record.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
ini.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
interchange.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
js_lexer_tables.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
js_lexer.zig
Fix bounds check in lexer for single # character (#21341)
2025-07-25 13:59:33 -07:00
js_parser.zig
Add safety checks to MultiArrayList and BabyList (#21063)
2025-07-25 18:12:21 -07:00
js_printer.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
jsc_stub.zig
…
linear_fifo.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
linker.lds
…
linker.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
linux.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
logger.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
logo.svg
…
macho.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
main_test.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
main_wasm.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
main.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
meta.zig
Add safety checks to MultiArrayList and BabyList (#21063)
2025-07-25 18:12:21 -07:00
node_fallbacks.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
open.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
options.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
output.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
OutputFile.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
patch.zig
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
paths.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
pe.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
perf.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
pool.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
Progress.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
ptr.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
renamer.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
result.zig
…
router.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
runtime.bun.js
…
runtime.js
Fix NODE_PATH for bun build (#20576)
2025-06-22 20:51:45 -07:00
runtime.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
semver.zig
…
sha.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
StandaloneModuleGraph.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
StaticHashMap.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
string.zig
Remove ZigString.Slice.clone(...) (#21410)
2025-07-27 16:54:39 -07:00
symbols.def
Implement more v8::Array::New overloads, v8::Object::{Get,Set}, v8::Value::StrictEquals, v8::Array::Iterate (#20737)
2025-07-13 04:27:43 -07:00
symbols.dyn
Implement more v8::Array::New overloads, v8::Object::{Get,Set}, v8::Value::StrictEquals, v8::Array::Iterate (#20737)
2025-07-13 04:27:43 -07:00
symbols.txt
Implement more v8::Array::New overloads, v8::Object::{Get,Set}, v8::Value::StrictEquals, v8::Array::Iterate (#20737)
2025-07-13 04:27:43 -07:00
sys_uv.zig
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
sys.zig
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
system_timer.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
threading.zig
fix(install): isolated install aliased dependency name fix (#21138)
2025-07-19 01:59:52 -07:00
tmp.zig
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
tracy.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
trait.zig
…
transpiler.zig
Fix env loader buffer overflow by using stack fallback allocator (#21416)
2025-07-28 00:13:17 -07:00
tsconfig.json
Fix formatters not running in CI + delete unnecessary files (#19433)
2025-05-08 23:22:16 -07:00
unit_test.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
url.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
util.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
walker_skippable.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
Watcher.zig
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
which_npm_client.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
which.zig
[PKG-513, ENG-19757] bun install: fix non-ascii edge case and simplify task lifetimes (#21320)
2025-07-23 19:23:54 -07:00
windows-app-info.rc
Enable Windows long path support (#21244)
2025-07-20 23:04:17 -07:00
windows.zig
zig: delete deprecated bun.jsc.Maybe (#21327)
2025-07-25 12:38:06 -07:00
work_pool.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
workaround_missing_symbols.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00
wyhash.zig
Sort imports in all files (#21119)
2025-07-21 13:26:47 -07:00
zlib.test.gz
…
zlib.test.txt
…
zlib.zig
Refactor Zig imports and file structure (part 1) (#21270)
2025-07-22 17:51:38 -07:00