3rd-Eden / memcached

A fully featured Memcached client build on top of Node.js. Build with scaling in mind so it will support Memcached clusters and consistent hashing.
MIT License
1.31k stars 276 forks source link

insecure Buffer allocation #344

Open kevinburkenotion opened 5 years ago

kevinburkenotion commented 5 years ago

The line tmp = new Buffer(buf.length) is considered insecure, instead you should use Buffer.alloc to avoid the possibility of leaking unzeroed memory.

(I know it's overwritten on the next line, but this could change in a later version of the code)