child_process: check array readability in spawn

Co-authored-by: Jake Yuesong Li <[email protected]>
nodejs · Jan 18, 2025 · e9296b7 · e9296b7
1 parent 99099d6
commit e9296b7
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/lib/internal/child_process.js b/lib/internal/child_process.js
@@ -247,6 +247,13 @@ function stdioStringToArray(stdio, channel) {
       throw new ERR_INVALID_ARG_VALUE('stdio', stdio);
   }
 
+  for (let i = 0; i < options.length; i++) {
+    const stream = options[i];
+    if (stream == null) {
+      throw new ERR_INVALID_ARG_VALUE('stdio', options);
+    }
+  }
+
   if (channel) ArrayPrototypePush(options, channel);
 
   return options;