aws-eventstream 1.4.0 → 1.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bd62e87a3b7eee5d16898a4020991b35a58bd8fa578cdc1af4bff0c22e2ede9d
-  data.tar.gz: c9edd876524c36d92e99eaf670ef895f50ddadf464a679f07542970347d72e65
+  metadata.gz: ab51070b934f6cc24b6221b958d85de7e6385b00e1807c439ffb2c1c724d024b
+  data.tar.gz: 7768dae84ea125d169529dffe424543493d10a3555176f2c47a60d193633849a
 SHA512:
-  metadata.gz: 1f419f5891fdf0d400e84b9d1cb998cf78506c42e8572e907c9e30eea9dd9e7f2b1f2d01313892c590531f953dfe2a19d62fd8f35aec5b9f22ceb7d1631ff36b
-  data.tar.gz: aa83514fbe8ba5a2b93e77e7a26094ee0addb913dc2d2d8022ec6988658f28433398232a889b1b50ab1fc6d37e1befc8aa44d0442cc4a042fc63a65ed6be6510
+  metadata.gz: d5d7379e1df312197bd26c0790052645830901171a1c39a4602b41cf573cac527399e77452d5c33b9d8f9c5d2a458fce20500a8ed8a6f56611f2775bd1729594
+  data.tar.gz: f69606e1b8880d6d52085cc13164b2fe7856cbe4f2b994db6a347b7b8201e62a58904de2514467759b45fe7491ea7bcb5d6b42ae746bb40afeca7b4c523cb464

data/CHANGELOG.md

@@ -1,6 +1,12 @@
 Unreleased Changes
 ------------------
 
+1.4.1 (2026-10-21)
+------------------
+
+* Issue - Raise an error when event stream header names or values exceed supported byte-length limits.
+* Issue - Raise an error when a fixed-width event stream header value does not fit its type's width.
+
 1.4.0 (2025-06-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.4.0
+1.4.1

data/lib/aws-eventstream/encoder.rb

@@ -41,6 +41,14 @@ module Aws
       # and 4 bytes total message crc checksum
       OVERHEAD_LENGTH = 16
 
+      # Maximum encoded length of a single header name (1-byte unsigned length field)
+      MAX_HEADER_NAME_LENGTH = 255
+
+      # Maximum encoded length of a string/bytes header value. The length field is two bytes
+      # (and could hold 65,535), but the protocol caps the value at the signed 16-bit maximum
+      # (INT16_MAX, 2**15 - 1), so the encoder must enforce the lower limit.
+      MAX_HEADER_VALUE_LENGTH = 32_767
+
       # Maximum header length allowed (after encode) 128kb
       MAX_HEADERS_LENGTH = 1024 * 128
 
@@ -109,6 +117,9 @@ module Aws
       # @return [String]
       def encode_headers(message)
         header_entries = message.headers.map do |key, value|
+          if key.bytesize > MAX_HEADER_NAME_LENGTH
+            raise Aws::EventStream::Errors::EventHeaderNameLengthExceedError.new
+          end
           encoded_key = [key.bytesize, key].pack('Ca*')
 
           # header value
@@ -116,7 +127,15 @@ module Aws
           encoded_value = [type_index].pack('C')
           # boolean types doesn't need to specify value
           next [encoded_key, encoded_value].pack('a*a*') if !!pattern == pattern
-          encoded_value = [encoded_value, value.value.bytesize].pack('a*S>') unless value_length
+          validate_fixed_width_value!(value, value_length) if value_length
+          unless value_length
+            # string and bytes types carry a 2-byte length prefix capped at INT16_MAX; reject
+            # oversized values rather than letting bytesize wrap mod 65536.
+            if value.value.bytesize > MAX_HEADER_VALUE_LENGTH
+              raise Aws::EventStream::Errors::EventHeaderValueLengthExceedError.new
+            end
+            encoded_value = [encoded_value, value.value.bytesize].pack('a*S>')
+          end
 
           [
             encoded_key,
@@ -132,6 +151,25 @@ module Aws
 
       private
 
+      # Fixed-width values carry no length prefix, so a value that does not fit its
+      # protocol width would either be silently truncated by #pack (integers) or
+      # misalign the header block (uuid). Reject both before anything is written.
+      def validate_fixed_width_value!(value, width)
+        v = value.value
+        valid =
+          if value.type == 'uuid'
+            v.respond_to?(:bytesize) && v.bytesize == width
+          elsif v.is_a?(Integer)
+            limit = 1 << (width * 8 - 1)
+            v >= -limit && v < limit
+          else
+            true
+          end
+        return if valid
+
+        raise Aws::EventStream::Errors::EventHeaderValueWidthError.new(value.type)
+      end
+
       def encode_prelude(total_length, headers_length)
         prelude_body = [total_length, headers_length].pack('NN')
         checksum = Zlib.crc32(prelude_body)

data/lib/aws-eventstream/errors.rb

@@ -44,6 +44,27 @@ module Aws
         end
       end
 
+      # Raised when an encoded header name exceeds the 255-byte protocol limit
+      class EventHeaderNameLengthExceedError < RuntimeError
+        def initialize(*args)
+          super("Encoded header name length should be under 256 bytes.")
+        end
+      end
+
+      # Raised when an encoded header value exceeds the 32767-byte (INT16_MAX) protocol limit
+      class EventHeaderValueLengthExceedError < RuntimeError
+        def initialize(*args)
+          super("Encoded header value length should be under 32768 bytes.")
+        end
+      end
+
+      # Raised when a fixed-width header value does not fit its protocol width
+      class EventHeaderValueWidthError < RuntimeError
+        def initialize(type = nil, *args)
+          super("Header value does not fit the fixed width of header type '#{type}'.")
+        end
+      end
+
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-eventstream
 version: !ruby/object:Gem::Version
-  version: 1.4.0
+  version: 1.4.1
 platform: ruby
 authors:
 - Amazon Web Services