url: process crash via malformed UNC hostname in pathToFileURL()

Fixes: #62546
PR-URL: #62574
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Claudio Wunder <cwunder@gnome.org>

Author: NickNaso

src/node_url.cc

@@ -93,7 +93,6 @@ constexpr auto lookup_table = []() consteval {
   case CHAR:                                                                   \
     result[i] = {{'%', HEX_DIGIT_2, HEX_DIGIT_1, 0}};                          \
     break;
-
       ENCODE_CHAR('\0', '0', '0')  // '\0' == 0x00
       ENCODE_CHAR('\t', '0', '9')  // '\t' == 0x09
       ENCODE_CHAR('\n', '0', 'A')  // '\n' == 0x0A
@@ -169,7 +168,11 @@ void BindingData::PathToFileURL(const FunctionCallbackInfo<Value>& args) {
       [[unlikely]] {
     CHECK(args[2]->IsString());
     Utf8Value hostname(isolate, args[2]);
-    CHECK(out->set_hostname(hostname.ToStringView()));
+    if (!out->set_hostname(hostname.ToStringView())) {
+      return ThrowInvalidURL(realm->env(),
+                             input.ToStringView(),
+                             std::string(hostname.ToStringView()));
+    }
   }
 
   binding_data->UpdateComponents(out->get_components(), out->type);

test/parallel/test-url-pathtofileurl.js

@@ -21,6 +21,14 @@ const url = require('url');
   assert.ok(fileURL.includes('%25'));
 }
 
+{
+  assert.throws(() => {
+    url.pathToFileURL('\\\\exa mple\\share\\file.txt', { windows: true });
+  }, {
+    code: 'ERR_INVALID_URL',
+  });
+}
+
 {
   if (isWindows) {
     // UNC path: \\server\share\resource