[1.1.6] Buffer.alloc is not a function

[collenbrecht]

TypeError: Buffer.alloc is not a function
in create-hmac@1.1.6/legacy.js

[calvinmetcalf]

this may be a bundling error, buffer refers to var Buffer = require('safe-buffer').Buffer and safe-buffer should have alloc on it

[briansneddon]

I think one of the issues is that safe-buffer requires the buffer package however since buffer is not specified in the safe-buffer package.json there's no constraint on the version that will satisfy it. So if another package is already using an older buffer release then safe-buffer won't pull a later one. Some of the older buffer packages releases do not support alloc.

[mikew]

I'm not sure where it's coming from for me yet, but it's happening with browserify for me.

[collenbrecht]

we circumvented the issue by putting https://github.com/crypto-browserify/pbkdf2 fixed to an older version (3.0.9) as well as createHmac to version 1.1.4. Since then package 3.0.12 of pbkdf2 has been published but I still seem to get the same error when I unfix the versions.

[dcousens]

Does anyone have easy repro steps?

[daaain]

If you paste the code sample from the README to RequireBin you'll get the Buffer error on the console, see: http://requirebin.com/?gist=ea94116908e96710a648ad3f47407636

Edit: sorry, just realised this might be a different issue, will see if I can find a better way to reproduce the actual one...

[calvinmetcalf]

jspm/registry#1049 seems to be the fix

[calvinmetcalf]

@briansneddon opened an issue based on your thing on safe-buffer feross/safe-buffer#9

[s890081tonyhsu]

I have the same issue at my repo, so I refer from here to wait for your next updates.

[nikashitsa]

I have same issue with old browserify (^6.3.2). Fixed with latest browserify (13.0.1)

[ilovett]

workaround is to use shrinkwrap

cd node_modules/browserify/node_modules/crypto-browserify
npm install pbkdf2@3.0.9
npm install create-hmac@1.1.4
cd ../../../../
npm shrinkwrap --dev

hopefully you dont run into any shrinkwrap errors... if so try npm prune

[jreading]

Are there fixes in those packages that should be PR'd?

[calvinmetcalf]

there is a pull on safe-buffer feross/safe-buffer#10

[minwan]

ETA for the fix? thanks!

[dcousens]

Closing in favour of feross/safe-buffer#10