lib: add TLSSocket default error handler

RafaelGSS · marco-ippolito · commit eb8e41f8dbe6 · 2026-01-07T16:39:59.000+01:00
This prevents the server from crashing due to an unhandled rejection when a TLSSocket connection is abruptly destroyed during initialization and the user has not attached an error handler to the socket. e.g: ```js const server = http2.createSecureServer({ ... }) server.on('secureConnection', socket => { socket.on('error', err => { console.log(err) }) }) ``` PR-URL: nodejs-private/node-private#797 Fixes: #44751 Refs: https://hackerone.com/bugs?subject=nodejs&report_id=3262404 Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net> CVE-ID: CVE-2025-59465
diff --git a/lib/_tls_wrap.js b/lib/_tls_wrap.js
@@ -1270,6 +1270,7 @@ function tlsConnectionListener(rawSocket) {
   socket[kErrorEmitted] = false;
   socket.on('close', onSocketClose);
   socket.on('_tlsError', onSocketTLSError);
+  socket.on('error', onSocketTLSError);
 }
 
 // AUTHENTICATION MODES

Original file line number	Diff line number	Diff line change
`@@ -1270,6 +1270,7 @@ function tlsConnectionListener(rawSocket) {`
`1270`	`1270`	`socket[kErrorEmitted] = false;`
`1271`	`1271`	`socket.on('close', onSocketClose);`
`1272`	`1272`	`socket.on('_tlsError', onSocketTLSError);`
	`1273`	`+ socket.on('error', onSocketTLSError);`
`1273`	`1274`	`}`
`1274`	`1275`
`1275`	`1276`	`// AUTHENTICATION MODES`