safe-buffer [![travis][travis-image]][travis-url] [![npm][npm-image]][npm-url] [![downloads][downloads-image]][downloads-url] [![javascript style guide][standard-image]][standard-url]

Safer Node.js Buffer API

install

usage

api

Class Method: Buffer.from(array)

Class Method: Buffer.from(arrayBuffer[, byteOffset[, length]])

Class Method: Buffer.from(buffer)

Class Method: Buffer.from(str[, encoding])

Class Method: Buffer.alloc(size[, fill[, encoding]])

Class Method: Buffer.allocUnsafe(size)

Class Method: Buffer.allocUnsafeSlow(size)

All the Rest

Related links

Why is `Buffer` unsafe?

Remote Memory Disclosure

Would this ever be a problem in real code?

Which real-world packages were vulnerable?

`bittorrent-dht`

`ws`

What's the solution?

A new API: `Buffer.allocUnsafe(number)`

How do we fix node.js core?

What's the real long-term fix?

Update

Conclusion

links

credit

license