From 3d31d4526fa4d4e4f59b89cabe194fb671063cdb Mon Sep 17 00:00:00 2001 From: Feross Aboukhadijeh Date: Tue, 19 Jan 2016 04:54:24 +0100 Subject: [PATCH] Fix remote memory disclosure in multipart attachments --- lib/multipart.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/multipart.js b/lib/multipart.js index 03618588c..c12817261 100644 --- a/lib/multipart.js +++ b/lib/multipart.js @@ -68,6 +68,9 @@ Multipart.prototype.build = function (parts, chunked) { var body = chunked ? new CombinedStream() : [] function add (part) { + if (typeof part === 'number') { + part = part.toString() + } return chunked ? body.append(part) : body.push(new Buffer(part)) }