From: Chris Duncan <chris@codecow.com>
Date: Mon, 10 Aug 2026 04:17:23 +0000 (-0700)
Subject: Zero transfered buffers from worker on data parsing failure.
X-Git-Url: https://git.codecow.com/?a=commitdiff_plain;h=d4c6a2fbfdc59c388223e320c32ef6454f038563;p=libnemo.git

Zero transfered buffers from worker on data parsing failure.
---

diff --git a/src/lib/vault/vault-worker.ts b/src/lib/vault/vault-worker.ts
index 576f7d6..e326e7a 100644
--- a/src/lib/vault/vault-worker.ts
+++ b/src/lib/vault/vault-worker.ts
@@ -44,8 +44,12 @@ const listener = (event: MessageEvent<any>): void => {
 		iv = parseIv(action, data)
 		parsed = parseData(action, data)
 	} catch (err) {
-		BROWSER: self.postMessage({ taskUrl, taskId, error: new Error('Failed to process Vault request', { cause: err }) })
-		NODE: parentPort?.postMessage({ data: { taskUrl, taskId, error: new Error('Failed to process Vault request', { cause: err }) } })
+		BROWSER: self.postMessage({ taskUrl, taskId, error: new Error('Failed to parse Vault request data', { cause: err }) })
+		NODE: parentPort?.postMessage({ data: { taskUrl, taskId, error: new Error('Failed to parse Vault request data', { cause: err }) } })
+		for (const [k, v] of Object.entries(data)) {
+			if (v instanceof ArrayBuffer) new Uint8Array(v).fill(0)
+			delete data[k]
+		}
 		return
 	}
 	const { seed, mnemonicPhrase, mnemonicSalt, index, encrypted, message, timeout } = parsed