@blamejs/pki 0.8.25 → 0.8.26

package/lib/inspect.js

@@ -164,16 +164,17 @@ var KU_LABEL = NAMES.KEY_USAGE;
 var EKU_LABEL = NAMES.EXT_KEY_USAGE;
 var GN_KIND = NAMES.GENERAL_NAME;
 
+/** @internal A 4- or 16-octet buffer is ONE address, rendered by the shared home so that one address
+ *  reads the same wherever a report carries it: the RFC 3779 blocks reach that home through
+ *  `_ipAddressText`, and a GeneralName reaching it through a second renderer would print the same
+ *  octets two ways in one report. An 8- or 32-octet buffer is a name constraint's address AND mask,
+ *  which is not an address, so each half is rendered and the two are joined. The home is not widened
+ *  to take those widths, because a mask reaching it as an address would render as one everywhere. */
 function _ipString(buf) {
   if (!Buffer.isBuffer(buf)) return "";
-  if (buf.length === 4) return buf[0] + "." + buf[1] + "." + buf[2] + "." + buf[3];
+  if (buf.length === 4 || buf.length === 16) return ipUtils.textFromOctets(buf) || _hexColon(buf, {});
   if (buf.length === 8) return _ipString(buf.subarray(0, 4)) + "/" + _ipString(buf.subarray(4));
-  if (buf.length === 16 || buf.length === 32) {
-    var groups = [];
-    for (var i = 0; i < 16; i += 2) groups.push((((buf[i] << 8) | buf[i + 1]) >>> 0).toString(16).toUpperCase());
-    var s = groups.join(":");
-    return buf.length === 32 ? s + "/" + _ipString(buf.subarray(16)) : s;
-  }
+  if (buf.length === 32) return _ipString(buf.subarray(0, 16)) + "/" + _ipString(buf.subarray(16));
   return _hexColon(buf, {});
 }