Buf Buffer Noassert Write

The application is using Buffer API methods with the `noAssert` parameter set to `true` for the write buffer methods. This disables the bounds checking and could result in writing beyond the end of the buffer, leading to potential memory corruption and security vulnerabilities. When `noAssert` is set to `true`, the methods do not perform bounds checking, all

IndexedPublic repositoryMediumHigh confidenceVerifiedMITjavascript
greprules fetch gitlab-sast-javascript-buf-rule-buffer-noassert-write --engine opengrep

Description

The application is using Buffer API methods with the `noAssert` parameter set to `true` for the write buffer methods. This disables the bounds checking and could result in writing beyond the end of the buffer, leading to potential memory corruption and security vulnerabilities. When `noAssert` is set to `true`, the methods do not perform bounds checking, all

Detection target

Not provided

Recommended fix

Not provided

False-positive notes

Not provided

Community feedback

Sign in to report false positives, mark this rule useful, or suggest metadata improvements.