Nulltap Replay

Node.js decoder writes past its buffer

Malformed Brotli input makes a decoder keep writing past a small buffer. Trace untrusted decompression and verify that a fixed Node.js runtime is actually in service.

Replay3:17 Narrated visual walkthrough
Trace the incoming data
Treat a format error as more input
Replace the running application

Continue watching

Explore all Replays →