lib: harden kKeyOps lookup with null prototype

panva · aduh95 · commit 25d2e999de4e · 2026-05-07T15:41:45.000+02:00
Signed-off-by: Filip Skokan <panva.ip@gmail.com> PR-URL: #62877 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Jordan Harband <ljharb@gmail.com> Reviewed-By: Tobias Nießen <tniessen@tnie.de>
diff --git a/lib/internal/crypto/util.js b/lib/internal/crypto/util.js
@@ -752,6 +752,7 @@ function getDigestSizeInBytes(name) {
 }
 
 const kKeyOps = {
+  __proto__: null,
   sign: 1,
   verify: 2,
   encrypt: 3,
diff --git a/test/parallel/test-webcrypto-util.js b/test/parallel/test-webcrypto-util.js
@@ -9,6 +9,7 @@ const assert = require('assert');
 
 const {
   normalizeAlgorithm,
+  validateKeyOps,
 } = require('internal/crypto/util');
 
 {
@@ -49,3 +50,12 @@ const {
   assert.strictEqual(normalized.name, 'ECDSA');
   assert.strictEqual(nameReadCount, 1);
 }
+
+{
+  for (const ops of [
+    ['sign', 'toString', 'constructor'],
+    ['sign', '__proto__', 'constructor'],
+  ]) {
+    validateKeyOps(ops);
+  }
+}

Original file line number	Diff line number	Diff line change
`@@ -752,6 +752,7 @@ function getDigestSizeInBytes(name) {`
`752`	`752`	`}`
`753`	`753`
`754`	`754`	`const kKeyOps = {`
	`755`	`+ __proto__: null,`
`755`	`756`	`sign: 1,`
`756`	`757`	`verify: 2,`
`757`	`758`	`encrypt: 3,`