@ai-ecoverse/slicc-kernel 1.173.1 → 1.173.2

package/dist/node-process-worker.cjs

@@ -7513,7 +7513,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     init_captured_globals();
-    KERNEL_VERSION = true ? "1.173.1" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.173.2" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });

package/dist/node-process-worker.js

@@ -7512,7 +7512,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     init_captured_globals();
-    KERNEL_VERSION = true ? "1.173.1" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.173.2" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });

package/dist/node.js

@@ -3702,7 +3702,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.173.1" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.173.2" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -30649,7 +30649,20 @@ var RULE = new RegExp(
 );
 var TERM = /^[A-Za-z0-9._+-]+$/;
 var PLAIN3 = /^[A-Za-z0-9_@%+=:,./-]+$/;
+var CONTROL = /[\0-\x1f\x7f]/;
 var USAGE = "usage: sudo [-n] [-u user] [--] command [args...]\n       sudo -l";
+function hasControl(text) {
+  return CONTROL.test(text);
+}
+function withoutControl(text) {
+  return text.replace(CONTROL, (ch) => {
+    const n = ch.charCodeAt(0);
+    if (n === 9) return "\\t";
+    if (n === 10) return "\\n";
+    if (n === 13) return "\\r";
+    return `\\x${n.toString(16).padStart(2, "0")}`;
+  });
+}
 function failed3(errno3, error) {
   return { error, errno: errno3 };
 }
@@ -30675,7 +30688,8 @@ function splitWords(text) {
   return words2;
 }
 function quoteWord(word) {
-  return PLAIN3.test(word) ? word : `'${word.replaceAll("'", `'\\''`)}'`;
+  const text = hasControl(word) ? withoutControl(word) : word;
+  return PLAIN3.test(text) ? text : `'${text.replaceAll("'", `'\\''`)}'`;
 }
 function addPart(word, part) {
   const last = word.length - 1;
@@ -30811,7 +30825,7 @@ function recordedBare(line, file, rule) {
   const head = `NOPASSWD ${rule.who} (${rule.target}) `;
   const cmnd = `Cmnd ${quoteWord(rule.cmnd.path)}`;
   const cwd = rule.cwd === void 0 ? "" : `Cwd ${quoteWord(rule.cwd)} `;
-  return line === `${head}${cwd}${cmnd}`;
+  return line.trimEnd() === `${head}${cwd}${cmnd}`;
 }
 function flags(parsed2, arg, next3) {
   for (let j = 1; j < arg.length; j++) {
@@ -31084,6 +31098,7 @@ ${lines2}
     const { fs } = this.o;
     const path = `${SUDOERS_D}/${self.name}`;
     if (!NAME3.test(self.name)) return false;
+    if (hasControl(cwd) || argv.some(hasControl)) return false;
     try {
       await this.provision();
       if (!await this.trusted(SUDOERS_D)) return false;