domain: fix vm promise tracking while keeping isolation

Author: Qard

lib/domain.js

@@ -39,6 +39,7 @@ const {
   Promise,
   ReflectApply,
   SafeMap,
+  SafeWeakMap,
   Symbol,
 } = primordials;
 
@@ -69,6 +70,7 @@ ObjectDefineProperty(process, 'domain', {
   }
 });
 
+const vmPromises = new SafeWeakMap();
 const pairing = new SafeMap();
 const asyncHook = createHook({
   init(asyncId, type, triggerAsyncId, resource) {
@@ -85,6 +87,11 @@ const asyncHook = createHook({
           value: process.domain,
           writable: true
         });
+      // Because promises from other contexts don't get a domain field,
+      // the domain needs to be held alive another way. Stuffing it in a
+      // weakmap connected to the promise lifetime can fix that.
+      } else {
+        vmPromises.set(resource, process.domain);
       }
     }
   },

test/parallel/test-domain-vm-promise-isolation.js

@@ -0,0 +1,23 @@
+'use strict';
+
+const common = require('../common');
+const domain = require('domain');
+const vm = require('vm');
+
+// A promise created in a VVM should not track back into the parent.
+//
+// See; https://github.com/nodejs/node/issues/40999
+
+const context = vm.createContext({});
+
+function run(code) {
+  const d = domain.createDomain();
+  d.run(common.mustCall(() => {
+    vm.runInContext(code, context)()
+      .then(common.mustCall(() => { }));
+  }));
+}
+
+for (let i = 0; i < 1000; i++) {
+  run('async () => null');
+}