aws-eventstream 1.3.2 → 1.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9f7607916d853599e76825eca92307793809152833c3e03d46668641662ed989
-  data.tar.gz: 7af13e44c46b8428daf19e6ecb42af386ec1b99ec49dbd692969d3a4ef161469
+  metadata.gz: ab51070b934f6cc24b6221b958d85de7e6385b00e1807c439ffb2c1c724d024b
+  data.tar.gz: 7768dae84ea125d169529dffe424543493d10a3555176f2c47a60d193633849a
 SHA512:
-  metadata.gz: 7dc49237b6a85046c15d076ff8c7245745ae661970686ead73c1975cd801802fc8d65255657e41c957cc7d05809820608ac5c4f0f18518387aa2390e6a731e6a
-  data.tar.gz: 184af3549253e984f4b7e64db8dd59216ed42e0b5c945fcf79bff50706acdc53b57707ded32dac101a6078dc09335d3ce763fb7049e95d9fa75620049a16b144
+  metadata.gz: d5d7379e1df312197bd26c0790052645830901171a1c39a4602b41cf573cac527399e77452d5c33b9d8f9c5d2a458fce20500a8ed8a6f56611f2775bd1729594
+  data.tar.gz: f69606e1b8880d6d52085cc13164b2fe7856cbe4f2b994db6a347b7b8201e62a58904de2514467759b45fe7491ea7bcb5d6b42ae746bb40afeca7b4c523cb464

data/CHANGELOG.md

@@ -1,6 +1,17 @@
 Unreleased Changes
 ------------------
 
+1.4.1 (2026-10-21)
+------------------
+
+* Issue - Raise an error when event stream header names or values exceed supported byte-length limits.
+* Issue - Raise an error when a fixed-width event stream header value does not fit its type's width.
+
+1.4.0 (2025-06-02)
+------------------
+
+* Feature - AWS SDK for Ruby no longer supports Ruby runtime versions 2.5 and 2.6.
+
 1.3.2 (2025-03-06)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.3.2
+1.4.1

data/lib/aws-eventstream/encoder.rb

@@ -41,6 +41,14 @@ module Aws
       # and 4 bytes total message crc checksum
       OVERHEAD_LENGTH = 16
 
+      # Maximum encoded length of a single header name (1-byte unsigned length field)
+      MAX_HEADER_NAME_LENGTH = 255
+
+      # Maximum encoded length of a string/bytes header value. The length field is two bytes
+      # (and could hold 65,535), but the protocol caps the value at the signed 16-bit maximum
+      # (INT16_MAX, 2**15 - 1), so the encoder must enforce the lower limit.
+      MAX_HEADER_VALUE_LENGTH = 32_767
+
       # Maximum header length allowed (after encode) 128kb
       MAX_HEADERS_LENGTH = 1024 * 128
 
@@ -109,6 +117,9 @@ module Aws
       # @return [String]
       def encode_headers(message)
         header_entries = message.headers.map do |key, value|
+          if key.bytesize > MAX_HEADER_NAME_LENGTH
+            raise Aws::EventStream::Errors::EventHeaderNameLengthExceedError.new
+          end
           encoded_key = [key.bytesize, key].pack('Ca*')
 
           # header value
@@ -116,7 +127,15 @@ module Aws
           encoded_value = [type_index].pack('C')
           # boolean types doesn't need to specify value
           next [encoded_key, encoded_value].pack('a*a*') if !!pattern == pattern
-          encoded_value = [encoded_value, value.value.bytesize].pack('a*S>') unless value_length
+          validate_fixed_width_value!(value, value_length) if value_length
+          unless value_length
+            # string and bytes types carry a 2-byte length prefix capped at INT16_MAX; reject
+            # oversized values rather than letting bytesize wrap mod 65536.
+            if value.value.bytesize > MAX_HEADER_VALUE_LENGTH
+              raise Aws::EventStream::Errors::EventHeaderValueLengthExceedError.new
+            end
+            encoded_value = [encoded_value, value.value.bytesize].pack('a*S>')
+          end
 
           [
             encoded_key,
@@ -132,6 +151,25 @@ module Aws
 
       private
 
+      # Fixed-width values carry no length prefix, so a value that does not fit its
+      # protocol width would either be silently truncated by #pack (integers) or
+      # misalign the header block (uuid). Reject both before anything is written.
+      def validate_fixed_width_value!(value, width)
+        v = value.value
+        valid =
+          if value.type == 'uuid'
+            v.respond_to?(:bytesize) && v.bytesize == width
+          elsif v.is_a?(Integer)
+            limit = 1 << (width * 8 - 1)
+            v >= -limit && v < limit
+          else
+            true
+          end
+        return if valid
+
+        raise Aws::EventStream::Errors::EventHeaderValueWidthError.new(value.type)
+      end
+
       def encode_prelude(total_length, headers_length)
         prelude_body = [total_length, headers_length].pack('NN')
         checksum = Zlib.crc32(prelude_body)

data/lib/aws-eventstream/errors.rb

@@ -44,6 +44,27 @@ module Aws
         end
       end
 
+      # Raised when an encoded header name exceeds the 255-byte protocol limit
+      class EventHeaderNameLengthExceedError < RuntimeError
+        def initialize(*args)
+          super("Encoded header name length should be under 256 bytes.")
+        end
+      end
+
+      # Raised when an encoded header value exceeds the 32767-byte (INT16_MAX) protocol limit
+      class EventHeaderValueLengthExceedError < RuntimeError
+        def initialize(*args)
+          super("Encoded header value length should be under 32768 bytes.")
+        end
+      end
+
+      # Raised when a fixed-width header value does not fit its protocol width
+      class EventHeaderValueWidthError < RuntimeError
+        def initialize(type = nil, *args)
+          super("Header value does not fit the fixed width of header type '#{type}'.")
+        end
+      end
+
     end
   end
 end

metadata

@@ -1,18 +1,16 @@
 --- !ruby/object:Gem::Specification
 name: aws-eventstream
 version: !ruby/object:Gem::Version
-  version: 1.3.2
+  version: 1.4.1
 platform: ruby
 authors:
 - Amazon Web Services
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-06 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies: []
 description: Amazon Web Services event stream library. Decodes and encodes binary
   stream under `vnd.amazon.event-stream` content-type
-email:
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -33,7 +31,6 @@ licenses:
 metadata:
   source_code_uri: https://github.com/aws/aws-sdk-ruby/tree/version-3/gems/aws-eventstream
   changelog_uri: https://github.com/aws/aws-sdk-ruby/tree/version-3/gems/aws-eventstream/CHANGELOG.md
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -41,15 +38,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.5'
+      version: '2.7'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 3.6.7
 specification_version: 4
 summary: AWS Event Stream Library
 test_files: []