@ai-ecoverse/slicc-kernel 1.56.1 → 1.56.2

package/dist/node-process-worker.js

@@ -493,6 +493,35 @@ function normalize(path) {
   }
   return `/${out.join("/")}`;
 }
+function physical(fs, path) {
+  let done = [];
+  let todo = path.split("/").filter((part) => part !== "" && part !== ".");
+  let hops = 0;
+  while (todo.length > 0) {
+    const part = todo.shift();
+    if (part === "..") {
+      done.pop();
+      continue;
+    }
+    if (!todo.includes("..")) {
+      done.push(part);
+      continue;
+    }
+    const at = `/${[...done, part].join("/")}`;
+    const st = fs.lstat(at);
+    if (st.isSymbolicLink) {
+      if (++hops > MAX_LINKS) throw new WasiError("ELOOP");
+      const target = fs.readlink(at);
+      if (target.startsWith("/")) done = [];
+      todo = [...target.split("/").filter((p) => p !== "" && p !== "."), ...todo];
+    } else if (!st.isDirectory) {
+      throw new WasiError("ENOTDIR");
+    } else {
+      done.push(part);
+    }
+  }
+  return `/${done.join("/")}`;
+}
 function resolveUnder(dir, path) {
   return normalize(path.startsWith("/") ? path : `${dir}/${path}`);
 }
@@ -588,7 +617,7 @@ function pinnedIo(bridge, handle, mutating) {
     truncate: (p, size) => mutating(() => truncate(p, size))
   };
 }
-var WasiError, FileBuffer, LocalFile, MISS_TTL_MS;
+var WasiError, FileBuffer, LocalFile, MAX_LINKS, MISS_TTL_MS;
 var init_wasi_files = __esm({
   "src/process/wasi/wasi-files.ts"() {
     "use strict";
@@ -776,6 +805,7 @@ var init_wasi_files = __esm({
         this.buffer.flush();
       }
     };
+    MAX_LINKS = 40;
     MISS_TTL_MS = 20;
   }
 });
@@ -1429,8 +1459,8 @@ var init_wasi_fds = __esm({
         }
       }
       resolve(dirfd, path) {
-        if (path.startsWith("/")) return normalize(path);
-        return resolveUnder(this.dir(dirfd).path, path);
+        const joined2 = path.startsWith("/") ? path : `${this.dir(dirfd).path}/${path}`;
+        return joined2.split("/").includes("..") ? physical(this.fs, joined2) : normalize(joined2);
       }
       open(path, oflags, rights, fdflags) {
         const device2 = deviceOf(path);
@@ -8805,9 +8835,9 @@ function procfsBridge(fs, tree) {
     }
   };
   const readOnly = (paths, run) => {
-    const physical = shadowing();
+    const physical2 = shadowing();
     for (const [p, follow2] of paths) {
-      if (inProc(p) || physical && toProc(p, follow2) !== void 0) throw syncError("EROFS", p);
+      if (inProc(p) || physical2 && toProc(p, follow2) !== void 0) throw syncError("EROFS", p);
     }
     return run();
   };