vm: freeze dependencySpecifiers array

PR-URL: #49720 Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Marco Ippolito <[email protected]> Reviewed-By: Chengzhong Wu <[email protected]>
nodejs · Oct 8, 2023 · 4038cf0 · 4038cf0
1 parent 54bb691
commit 4038cf0
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/lib/internal/vm/module.js b/lib/internal/vm/module.js
@@ -7,6 +7,7 @@ const {
   ArrayPrototypeIndexOf,
   ArrayPrototypeSome,
   ObjectDefineProperty,
+  ObjectFreeze,
   ObjectGetPrototypeOf,
   ObjectSetPrototypeOf,
   ReflectApply,
@@ -340,9 +341,7 @@ class SourceTextModule extends Module {
     if (this[kWrap] === undefined) {
       throw new ERR_VM_MODULE_NOT_MODULE();
     }
-    if (this[kDependencySpecifiers] === undefined) {
-      this[kDependencySpecifiers] = this[kWrap].getStaticDependencySpecifiers();
-    }
+    this[kDependencySpecifiers] ??= ObjectFreeze(this[kWrap].getStaticDependencySpecifiers());
     return this[kDependencySpecifiers];
   }