This is a backport PR for branch 43-x-y
#55179: fix: validate asar header and entry sizes against the archive length (43-x-y)
Merged
Created: Oct 21, 2026, 2:44:38 PM
Merged: Oct 21, 2026, 4:09:21 PM
1 comments
Target: 43-x-y
Backport of #55171
See that PR for details.
The spec is adapted for this branch: 43-x-y does not have the asar internals suite from main, so the new cases carry their own small archive-writing helper.
Notes: Fixed handling of malformed asar archives whose size fields do not match the file length.
Backport Information
Original PR Author
MarshallOfSoundOriginal PR Status
Merged
Original PR Merged At
Oct 21, 2026, 2:15:06 PM
Original PR Link
View on GitHubSemver Impact
Major
Breaking changes
Minor
New features
Patch
Bug fixes
None
Docs, tests, etc.
Semantic Versioning helps users understand the impact of updates:
- Major (X.y.z): Breaking changes that may require code modifications
- Minor (x.Y.z): New features that maintain backward compatibility
- Patch (x.y.Z): Bug fixes that don't change the API
- None: Changes that don't affect using facing parts of Electron