{
  "runtime_manifest_present": true,
  "runtime_backed": true,
  "test_method": "real_loopback_tcp_socket",
  "test_description": "A real Node.js TCP server is created using net.createServer with Driver.server({requireMasking:false}). A raw TCP client performs a draft-75 handshake (no Sec-WebSocket-* headers) so Server.http selects Draft75. The client then sends a positive-control text frame, a variant binary frame header (0x80 0x1E, valid length=30), and a sentinel text frame in a contiguous wire stream. All events (open/message/close/error) are recorded.",
  "vulnerable_version": {
    "package": "websocket-driver@0.7.4",
    "commit_sha": "5f711f089234a46f8d1e50054115ea169257eaa4",
    "result": {
      "sentinel_delivered": false,
      "corrupted_message_after_malicious": true,
      "close_after_malicious": false,
      "readyState_final": 1,
      "positive_count": 2,
      "events": [
        {"type": "open"},
        {"type": "message", "data": "POSITIVE-CTRL-OK"},
        {"type": "message", "data": "POSITIVE-CTRL-OK"}
      ]
    }
  },
  "fixed_version": {
    "package": "websocket-driver@0.7.5",
    "commit_sha": "5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f",
    "result": {
      "sentinel_delivered": false,
      "corrupted_message_after_malicious": true,
      "close_after_malicious": false,
      "readyState_final": 1,
      "positive_count": 2,
      "events": [
        {"type": "open"},
        {"type": "message", "data": "POSITIVE-CTRL-OK"},
        {"type": "message", "data": "POSITIVE-CTRL-OK"}
      ]
    }
  },
  "wire_bytes": {
    "positive_frame": "00504f5349544956452d4354524c2d4f4bff",
    "variant_header": "801e",
    "sentinel_frame": "0053454e54494e454c2d56554c4e2d58595a2d3132333435ff"
  },
  "variant_length": 30,
  "max_length": 67108863,
  "bypass_confirmed": true
}