This is a backport PR for branch 44-x-y
![trop[bot]](https://avatars.githubusercontent.com/in/9879?v=4)
#55176: fix: validate asar header and entry sizes against the archive length
Merged
Backport of #55171
See that PR for details.
Notes: Fixed handling of malformed asar archives whose size fields do not match the file length.
Backport Information
Original PR Author
MarshallOfSoundOriginal PR Status
Merged
Original PR Merged At
Oct 21, 2026, 2:15:06 PM
Original PR Link
View on GitHubSemver Impact
Major
Breaking changes
Minor
New features
Patch
Bug fixes
None
Docs, tests, etc.
Semantic Versioning helps users understand the impact of updates:
- Major (X.y.z): Breaking changes that may require code modifications
- Minor (x.Y.z): New features that maintain backward compatibility
- Patch (x.y.Z): Bug fixes that don't change the API
- None: Changes that don't affect using facing parts of Electron