@blamejs/pki 0.8.59 → 0.8.60

package/lib/schema-c509.js

@@ -22,6 +22,11 @@ var x509 = require("./schema-x509");
 var pkix = require("./schema-pkix");
 var schema = require("./schema-engine");
 var guard = require("./guard-all");
+/** @internal The append every list in this module is built with. `push` STORES at the index, and a
+ *  store walks the prototype chain for a setter, so an accessor inherited at an array index receives
+ *  each element as it is appended and the index then reads back whatever its getter answers. This one
+ *  defines the index on the array itself. */
+var _push = guard.list.append;
 var constants = require("./constants");
 var frameworkError = require("./framework-error");
 var validator = require("./validator-all");
@@ -346,8 +351,8 @@ function _name509(node, isSubject, isNative) {
     var vv = v.text !== undefined ? v.text : (v.hex !== undefined ? v.hex : _macToEui64String(v.eui64));
     var rdn = { type: tname, value: vv, printable: ti < 0 };
     _assertAttrValue(rdn);
-    rdns.push(rdn);
-    parts.push(_shortName(tname) + "=" + guard.name.escapeDnValue(vv));
+    _push(rdns,rdn);
+    _push(parts,_shortName(tname) + "=" + guard.name.escapeDnValue(vv));
   }
   if (!isNative && rdns.length === 1 && rdns[0].type === "commonName" && !rdns[0].printable) {
     throw _err("c509/bad-name", "a Name holding a single +1 commonName must be encoded as a bare SpecialText, not an array (draft sec. 3.1.4)");
@@ -431,7 +436,7 @@ function _generalNamesToDer(node, isNative) {
   var kids = node.children;
   if (kids.length === 0 || kids.length % 2 !== 0) throw _err("c509/bad-extensions", "a GeneralNames array must be non-empty (int, value) pairs (sec. 3.3)");
   var out = [];
-  for (var i = 0; i + 1 < kids.length; i += 2) out.push(_generalNameToDer(Number(_cborIntVal(kids[i], "a GeneralName type")), kids[i + 1], false, isNative));
+  for (var i = 0; i + 1 < kids.length; i += 2) _push(out,_generalNameToDer(Number(_cborIntVal(kids[i], "a GeneralName type")), kids[i + 1], false, isNative));
   return out;
 }
 function _generalNamesFromDer(gnNodes, ctx) {
@@ -439,7 +444,7 @@ function _generalNamesFromDer(gnNodes, ctx) {
   for (var i = 0; i < gnNodes.length; i++) {
     var pair = _generalNameFromDer(schema.walk(GN_LEAF, gnNodes[i], schema.withResources(NS, ctx)), false, ctx);
     if (pair == null) return null;
-    out.push(pair[0]); out.push(pair[1]);
+    _push(out,pair[0]); _push(out,pair[1]);
   }
   return out;
 }
@@ -535,13 +540,24 @@ function _ipSeqToInt(seq) {
   var head = Buffer.from([seq[0] + 1]);
   return BigInt("0x" + Buffer.concat([head, seq.subarray(1)]).toString("hex"));
 }
+/** @internal The octets are counted and then written into the output from its end. Prepending STORES
+ *  at an index, and a store walks the prototype chain for a setter, so an accessor inherited at an
+ *  array index took each octet and left the list reading back its getter's value: the leading octet
+ *  is both the prefix length this checks for range and the byte the result carries, so the check and
+ *  the emitted address were both decided by the accessor. A typed array handles its own
+ *  integer-indexed writes and consults no prototype accessor. */
 function _ipIntToSeq(n) {
   if (n < 1n) return null;
-  var out = [];
-  for (var v = n; v > 0n; v >>= 8n) out.unshift(Number(v & 0xffn));
-  if (out.length > 9 || out[0] < 1 || out[0] > 8) return null;
+  var count = 0;
+  for (var v = n; v > 0n; v >>= 8n) count++;
+  if (count > 9) return null;
+  var head = Number((n >> BigInt(8 * (count - 1))) & 0xffn);
+  if (head < 1 || head > 8) return null;
+  var out = Buffer.alloc(count);
+  var t = n;
+  for (var i = count - 1; i >= 0; i--) { out[i] = Number(t & 0xffn); t >>= 8n; }
   out[0] -= 1;
-  return Buffer.from(out);
+  return out;
 }
 var _IP_WIDTH = Object.assign(Object.create(null), { 1: 4, 2: 16 });
 
@@ -639,18 +655,18 @@ function _ipChoiceToDer(items, afi) {
     if (it.majorType === 4) {
       if (!it.children || it.children.length !== 2) throw _err("c509/bad-extensions", "an IPAddress range must be exactly [min, max]");
       var lo = absolute(it.children[0]), hi = absolute(it.children[1]);
-      seqs.push(lo); seqs.push(hi);
+      _push(seqs,lo); _push(seqs,hi);
       var rlo = _ipLow(lo, width), rhi = _ipHigh(hi, width);
       {
         if (_ipRangeIsPrefix(rlo, rhi)) throw _err("c509/bad-extensions", "an address range that is exactly a prefix must use the prefix form (RFC 3779 sec. 2.2.3.7)");
-        bounds.push({ lo: rlo, hi: rhi });
+        _push(bounds,{ lo: rlo, hi: rhi });
       }
-      out.push(b.sequence([b.bitString(lo.subarray(1), lo[0]), b.bitString(hi.subarray(1), hi[0])]));
+      _push(out,b.sequence([b.bitString(lo.subarray(1), lo[0]), b.bitString(hi.subarray(1), hi[0])]));
     } else {
       var pfx = absolute(it);
-      seqs.push(pfx);
-      bounds.push({ lo: _ipLow(pfx, width), hi: _ipHigh(pfx, width) });
-      out.push(b.bitString(pfx.subarray(1), pfx[0]));
+      _push(seqs,pfx);
+      _push(bounds,{ lo: _ipLow(pfx, width), hi: _ipHigh(pfx, width) });
+      _push(out,b.bitString(pfx.subarray(1), pfx[0]));
     }
   }
   if (sawBytes && sawInt) throw _err("c509/bad-extensions", "an IPAddressFamily must use one address form throughout (sec. 3.3)");
@@ -680,8 +696,8 @@ function _ipChoiceFromDer(ch, afi) {
       pair = [Buffer.concat([Buffer.from([lo.unusedBits]), lo.bytes]),
               Buffer.concat([Buffer.from([hi.unusedBits]), hi.bytes])];
     } else return null;
-    groups.push(pair);
-    for (var k = 0; k < pair.length; k++) flat.push(pair[k]);
+    _push(groups,pair);
+    for (var k = 0; k < pair.length; k++) _push(flat,pair[k]);
   }
   var width = _IP_WIDTH[afi];
   if (!width) return null;
@@ -691,7 +707,7 @@ function _ipChoiceFromDer(ch, afi) {
     if (bg[0].length - 1 > width || bg[bg.length - 1].length - 1 > width) return null;
     var blo = _ipLow(bg[0], width), bhi = _ipHigh(bg[bg.length - 1], width);
     if (bg.length === 2 && _ipRangeIsPrefix(blo, bhi)) return null;
-    bounds.push({ lo: blo, hi: bhi });
+    _push(bounds,{ lo: blo, hi: bhi });
   }
   for (var r = 0; r < bounds.length; r++) {
     if (_ipOctCmp(bounds[r].lo, bounds[r].hi) > 0) return null;
@@ -701,7 +717,7 @@ function _ipChoiceFromDer(ch, afi) {
   var out = [];
   if (useBytes) {
     groups.forEach(function (p) {
-      out.push(p.length === 1 ? cbor.build.byteString(p[0])
+      _push(out,p.length === 1 ? cbor.build.byteString(p[0])
         : cbor.build.array([cbor.build.byteString(p[0]), cbor.build.byteString(p[1])]));
     });
     return cbor.build.array(out);
@@ -719,12 +735,12 @@ function _ipChoiceFromDer(ch, afi) {
     if (grp.length === 1) {
       var one = delta(grp[0]);
       if (!one) return null;
-      out.push(one);
+      _push(out,one);
     } else {
       var dlo = delta(grp[0]);
       var dhi = dlo ? delta(grp[1]) : null;
       if (!dlo || !dhi) return null;
-      out.push(cbor.build.array([dlo, dhi]));
+      _push(out,cbor.build.array([dlo, dhi]));
     }
   }
   return cbor.build.array(out);
@@ -742,7 +758,7 @@ function _subtreesToDer(node, isNative) {
   var kids = node.children;
   if (kids.length === 0 || kids.length % 2 !== 0) throw _err("c509/bad-extensions", "a GeneralSubtrees array must be non-empty (int, value) pairs");
   var out = [];
-  for (var i = 0; i + 1 < kids.length; i += 2) out.push(b.sequence([_generalNameToDer(Number(_cborIntVal(kids[i], "a GeneralSubtree base type")), kids[i + 1], true, isNative)]));
+  for (var i = 0; i + 1 < kids.length; i += 2) _push(out,b.sequence([_generalNameToDer(Number(_cborIntVal(kids[i], "a GeneralSubtree base type")), kids[i + 1], true, isNative)]));
   return Buffer.concat(out);
 }
 function _subtreesFromDer(subtreeNodes, ctx) {
@@ -753,7 +769,7 @@ function _subtreesFromDer(subtreeNodes, ctx) {
     if (st.tagClass !== "universal" || st.tagNumber !== asn1.TAGS.SEQUENCE || !st.children || st.children.length !== 1) return null;
     var pair = _generalNameFromDer(schema.walk(GN_LEAF_SUBTREE, st.children[0], schema.withResources(NS, ctx)), true, ctx);
     if (pair == null) return null;
-    out.push(pair[0]); out.push(pair[1]);
+    _push(out,pair[0]); _push(out,pair[1]);
   }
   return out;
 }
@@ -832,8 +848,8 @@ function _dpToDer(dpNode, isNative) {
     uris = fullName.children.map(function (u) { return b.contextPrimitive(6, _ia5Bytes(u, 6)); });
   } else throw _err("c509/bad-extensions", "a DistributionPoint fullName must be a URI text or an array of URIs");
   var fields = [b.explicit(0, b.contextConstructed(0, Buffer.concat(uris)))];
-  if (!_isCborNull(reasons)) fields.push(_reasonsBitsToDer(Number(_cborUint(reasons, "cRLDistributionPoints reasons"))));
-  if (!_isCborNull(crlIssuer)) fields.push(b.contextConstructed(2, b.explicit(4, _reconName(_name509(crlIssuer, true, isNative)))));
+  if (!_isCborNull(reasons)) _push(fields,_reasonsBitsToDer(Number(_cborUint(reasons, "cRLDistributionPoints reasons"))));
+  if (!_isCborNull(crlIssuer)) _push(fields,b.contextConstructed(2, b.explicit(4, _reconName(_name509(crlIssuer, true, isNative)))));
   return b.sequence(fields);
 }
 function _dpFromDer(dp, ctx) {
@@ -851,7 +867,7 @@ function _dpFromDer(dp, ctx) {
       for (var j = 0; j < dpn.children.length; j++) {
         var mm = dpn.children[j];
         if (mm.tagClass !== "context" || mm.tagNumber !== 6) return null;
-        fullNameUris.push(schema.walk(GN_LEAF, mm, NS).value);
+        _push(fullNameUris,schema.walk(GN_LEAF, mm, NS).value);
       }
     } else if (f.tagNumber === 1) {
       var bs;
@@ -930,8 +946,8 @@ function _extValueToDer(name, node, isNative) {
     case "nameConstraints": {
       if (node.majorType !== 4 || !node.children || node.children.length !== 2) throw _err("c509/bad-extensions", "a nameConstraints value must be a 2-element CBOR array [ permitted, excluded ] (sec. 3.3)");
       var ncFields = [];
-      if (!_isCborNull(node.children[0])) ncFields.push(b.contextConstructed(0, _subtreesToDer(node.children[0], isNative)));
-      if (!_isCborNull(node.children[1])) ncFields.push(b.contextConstructed(1, _subtreesToDer(node.children[1], isNative)));
+      if (!_isCborNull(node.children[0])) _push(ncFields,b.contextConstructed(0, _subtreesToDer(node.children[0], isNative)));
+      if (!_isCborNull(node.children[1])) _push(ncFields,b.contextConstructed(1, _subtreesToDer(node.children[1], isNative)));
       if (ncFields.length === 0) throw _err("c509/bad-extensions", "nameConstraints must contain permittedSubtrees or excludedSubtrees (RFC 5280 sec. 4.2.1.10)");
       return b.sequence(ncFields);
     }
@@ -941,7 +957,7 @@ function _extValueToDer(name, node, isNative) {
       var aiaKids = node.children;
       if (aiaKids.length === 0 || aiaKids.length % 2 !== 0) throw _err("c509/bad-extensions", "an " + name + " array must be non-empty (accessMethod, uri) pairs (sec. 3.3)");
       var descs = [];
-      for (var ai = 0; ai + 1 < aiaKids.length; ai += 2) descs.push(b.sequence([b.oid(_accessMethodOid(aiaKids[ai])), b.contextPrimitive(6, _ia5Bytes(aiaKids[ai + 1], 6))]));
+      for (var ai = 0; ai + 1 < aiaKids.length; ai += 2) _push(descs,b.sequence([b.oid(_accessMethodOid(aiaKids[ai])), b.contextPrimitive(6, _ia5Bytes(aiaKids[ai + 1], 6))]));
       return b.sequence(descs);
     }
     case "cRLDistributionPoints":
@@ -962,7 +978,7 @@ function _extValueToDer(name, node, isNative) {
         if (!_isCborNull(safiNode)) {
           var safi = _cborUint(safiNode, "an IPAddrBlocks SAFI");
           if (safi > 0xffn) throw _err("c509/bad-extensions", "an IPAddrBlocks SAFI must fit one octet (RFC 3779 sec. 2.2.3.3)");
-          famBytes.push(Number(safi));
+          _push(famBytes,Number(safi));
         }
         var famOct = Buffer.from(famBytes);
         if (prevFam !== null && _famOctCmp(prevFam, famOct) >= 0) {
@@ -971,14 +987,14 @@ function _extValueToDer(name, node, isNative) {
         prevFam = famOct;
         var choice = ipKids[fi + 2], famFields = [b.octetString(famOct)];
         if (_isCborNull(choice)) {
-          famFields.push(b.nullValue());
+          _push(famFields,b.nullValue());
         } else {
           if (choice.majorType !== 4 || !choice.children || choice.children.length === 0) {
             throw _err("c509/bad-extensions", "an IPAddrBlocks address choice must be null (inherit) or a non-empty CBOR array");
           }
-          famFields.push(b.sequence(_ipChoiceToDer(choice.children, Number(afi))));
+          _push(famFields,b.sequence(_ipChoiceToDer(choice.children, Number(afi))));
         }
-        families.push(b.sequence(famFields));
+        _push(families,b.sequence(famFields));
       }
       return b.sequence(families);
     }
@@ -996,13 +1012,13 @@ function _extValueToDer(name, node, isNative) {
           var amin = _asDelta(it.children[0], asPrev), amax = _asDelta(it.children[1], amin);
           if (amax <= amin) throw _err("c509/bad-extensions", "an ASIdentifiers range must be ascending (RFC 3779 sec. 3.2.3.6)");
           if (asPrevHigh !== null && amin <= asPrevHigh + 1n) throw _err("c509/bad-extensions", "ASIdentifiers must be sorted, non-overlapping and maximally merged (RFC 3779 sec. 3.2.3.4)");
-          asDers.push(b.sequence([b.integer(amin), b.integer(amax)]));
+          _push(asDers,b.sequence([b.integer(amin), b.integer(amax)]));
           asPrev = amax;
           asPrevHigh = amax;
         } else {
           var aid = _asDelta(it, asPrev);
           if (asPrevHigh !== null && aid <= asPrevHigh + 1n) throw _err("c509/bad-extensions", "ASIdentifiers must be sorted, non-overlapping and maximally merged (RFC 3779 sec. 3.2.3.4)");
-          asDers.push(b.integer(aid));
+          _push(asDers,b.integer(aid));
           asPrev = aid;
           asPrevHigh = aid;
         }
@@ -1024,10 +1040,10 @@ function _extValueToDer(name, node, isNative) {
         if (quals.children.length) {
           if (quals.children.length % 2 !== 0) throw _err("c509/bad-extensions", "a policyQualifiers array must be (policyQualifierId, qualifier) pairs");
           var pqDers = [];
-          for (var qk = 0; qk + 1 < quals.children.length; qk += 2) pqDers.push(_qualifierToDer(quals.children[qk], quals.children[qk + 1]));
-          polFields.push(b.sequence(pqDers));
+          for (var qk = 0; qk + 1 < quals.children.length; qk += 2) _push(pqDers,_qualifierToDer(quals.children[qk], quals.children[qk + 1]));
+          _push(polFields,b.sequence(pqDers));
         }
-        polInfos.push(b.sequence(polFields));
+        _push(polInfos,b.sequence(polFields));
       }
       return b.sequence(polInfos);
     }
@@ -1036,14 +1052,14 @@ function _extValueToDer(name, node, isNative) {
       var pmKids = node.children;
       if (pmKids.length === 0 || pmKids.length % 2 !== 0) throw _err("c509/bad-extensions", "a policyMappings array must be non-empty (issuerDomainPolicy, subjectDomainPolicy) pairs (sec. 3.3)");
       var maps = [];
-      for (var mi = 0; mi + 1 < pmKids.length; mi += 2) maps.push(b.sequence([b.oid(_policyIdToDerOid(pmKids[mi])), b.oid(_policyIdToDerOid(pmKids[mi + 1]))]));
+      for (var mi = 0; mi + 1 < pmKids.length; mi += 2) _push(maps,b.sequence([b.oid(_policyIdToDerOid(pmKids[mi])), b.oid(_policyIdToDerOid(pmKids[mi + 1]))]));
       return b.sequence(maps);
     }
     case "policyConstraints": {
       if (node.majorType !== 4 || !node.children || node.children.length !== 2) throw _err("c509/bad-extensions", "a policyConstraints value must be a 2-element CBOR array [ requireExplicitPolicy, inhibitPolicyMapping ] (sec. 3.3)");
       var pcFields = [], repN = node.children[0], ipmN = node.children[1];
-      if (!_isCborNull(repN)) pcFields.push(b.implicit(0, b.integer(_boundCount(_cborUint(repN, "a policyConstraints requireExplicitPolicy"), "a policyConstraints requireExplicitPolicy"))));
-      if (!_isCborNull(ipmN)) pcFields.push(b.implicit(1, b.integer(_boundCount(_cborUint(ipmN, "a policyConstraints inhibitPolicyMapping"), "a policyConstraints inhibitPolicyMapping"))));
+      if (!_isCborNull(repN)) _push(pcFields,b.implicit(0, b.integer(_boundCount(_cborUint(repN, "a policyConstraints requireExplicitPolicy"), "a policyConstraints requireExplicitPolicy"))));
+      if (!_isCborNull(ipmN)) _push(pcFields,b.implicit(1, b.integer(_boundCount(_cborUint(ipmN, "a policyConstraints inhibitPolicyMapping"), "a policyConstraints inhibitPolicyMapping"))));
       if (pcFields.length === 0) throw _err("c509/bad-extensions", "policyConstraints must contain requireExplicitPolicy or inhibitPolicyMapping (RFC 5280 sec. 4.2.1.11)");
       return b.sequence(pcFields);
     }
@@ -1141,8 +1157,8 @@ function _extValueFromDer(name, der, ctx) {
         var aiaLoc = d.children[1];
         if (aiaLoc.tagClass !== "context" || aiaLoc.tagNumber !== 6) return null;
         var methodDotted = asn1.read.oid(d.children[0]), mint = IA_TO_INT[methodDotted];
-        aiaOut.push(mint !== undefined ? cbor.build.int(BigInt(mint)) : _oidCbor(methodDotted));
-        aiaOut.push(cbor.build.textString(schema.walk(GN_LEAF, aiaLoc, NS).value));
+        _push(aiaOut,mint !== undefined ? cbor.build.int(BigInt(mint)) : _oidCbor(methodDotted));
+        _push(aiaOut,cbor.build.textString(schema.walk(GN_LEAF, aiaLoc, NS).value));
       }
       return cbor.build.array(aiaOut);
     }
@@ -1151,7 +1167,7 @@ function _extValueFromDer(name, der, ctx) {
       var dps = node.children || [];
       if (node.tagClass !== "universal" || node.tagNumber !== asn1.TAGS.SEQUENCE || dps.length < 1) return null;
       var dpResults = [];
-      for (var dpi = 0; dpi < dps.length; dpi++) { var dpr = _dpFromDer(dps[dpi], ctx); if (dpr == null) return null; dpResults.push(dpr); }
+      for (var dpi = 0; dpi < dps.length; dpi++) { var dpr = _dpFromDer(dps[dpi], ctx); if (dpr == null) return null; _push(dpResults,dpr); }
       if (dpResults.length === 1 && dpResults[0].oneUri != null && dpResults[0].noReasons && dpResults[0].noIssuer) return cbor.build.textString(dpResults[0].oneUri);
       return cbor.build.array(dpResults.map(function (r) { return r.triple; }));
     }
@@ -1167,13 +1183,13 @@ function _extValueFromDer(name, der, ctx) {
         if (prevFamOct !== null && _famOctCmp(prevFamOct, famOct) >= 0) return null;
         prevFamOct = famOct;
         var afiVal = (famOct[0] << 8) | famOct[1];
-        ipOut.push(cbor.build.uint(BigInt(afiVal)));
-        ipOut.push(famOct.length === 3 ? cbor.build.uint(BigInt(famOct[2])) : cbor.build.nullValue());
+        _push(ipOut,cbor.build.uint(BigInt(afiVal)));
+        _push(ipOut,famOct.length === 3 ? cbor.build.uint(BigInt(famOct[2])) : cbor.build.nullValue());
         var ch = fam.children[1];
-        if (_isUniversal(ch, asn1.TAGS.NULL)) { ipOut.push(cbor.build.nullValue()); continue; }
+        if (_isUniversal(ch, asn1.TAGS.NULL)) { _push(ipOut,cbor.build.nullValue()); continue; }
         var chOut = _ipChoiceFromDer(ch, afiVal);
         if (!chOut) return null;
-        ipOut.push(chOut);
+        _push(ipOut,chOut);
       }
       return cbor.build.array(ipOut);
     }
@@ -1199,10 +1215,10 @@ function _extValueFromDer(name, der, ctx) {
         } else return null;
         if (asPrevHigh !== null && elLo <= asPrevHigh + 1n) return null;
         if (el.tagNumber === asn1.TAGS.INTEGER) {
-          asOut.push(cbor.build.int(asPrevOut === null ? elLo : elLo - asPrevOut));
+          _push(asOut,cbor.build.int(asPrevOut === null ? elLo : elLo - asPrevOut));
           asPrevOut = elLo;
         } else {
-          asOut.push(cbor.build.array([
+          _push(asOut,cbor.build.array([
             cbor.build.int(asPrevOut === null ? elLo : elLo - asPrevOut),
             cbor.build.int(elHi - elLo),
           ]));
@@ -1218,7 +1234,7 @@ function _extValueFromDer(name, der, ctx) {
       for (var pli = 0; pli < node.children.length; pli++) {
         var pol = node.children[pli];
         if (pol.tagClass !== "universal" || pol.tagNumber !== asn1.TAGS.SEQUENCE || !pol.children || pol.children.length < 1 || pol.children.length > 2) return null;
-        cpOut.push(_policyIdFromDer(asn1.read.oid(pol.children[0])));
+        _push(cpOut,_policyIdFromDer(asn1.read.oid(pol.children[0])));
         var qArr = [];
         if (pol.children.length === 2) {
           var qseq = pol.children[1];
@@ -1228,10 +1244,10 @@ function _extValueFromDer(name, der, ctx) {
             if (pq.tagClass !== "universal" || pq.tagNumber !== asn1.TAGS.SEQUENCE || !pq.children || pq.children.length !== 2) return null;
             var qpair = _qualifierFromDer(pq);
             if (qpair == null) return null;
-            qArr.push(qpair[0]); qArr.push(qpair[1]);
+            _push(qArr,qpair[0]); _push(qArr,qpair[1]);
           }
         }
-        cpOut.push(cbor.build.array(qArr));
+        _push(cpOut,cbor.build.array(qArr));
       }
       return cbor.build.array(cpOut);
     }
@@ -1241,8 +1257,8 @@ function _extValueFromDer(name, der, ctx) {
       for (var pm = 0; pm < node.children.length; pm++) {
         var mp = node.children[pm];
         if (mp.tagClass !== "universal" || mp.tagNumber !== asn1.TAGS.SEQUENCE || !mp.children || mp.children.length !== 2) return null;
-        pmOut.push(_policyIdFromDer(asn1.read.oid(mp.children[0])));
-        pmOut.push(_policyIdFromDer(asn1.read.oid(mp.children[1])));
+        _push(pmOut,_policyIdFromDer(asn1.read.oid(mp.children[0])));
+        _push(pmOut,_policyIdFromDer(asn1.read.oid(mp.children[1])));
       }
       return cbor.build.array(pmOut);
     }
@@ -1304,18 +1320,18 @@ function _sdaToDer(node, isNative) {
       for (var vi = 0; vi < valuesNode.children.length; vi++) {
         var vn = valuesNode.children[vi];
         if (vn.majorType !== 3) throw _err("c509/bad-extensions", "a subjectDirectoryAttributes int-form attribute value must be a CBOR text string (a non-string value requires the ~oid form)");
-        try { vals.push(_reconAttrValue({ type: tname, value: cbor.read.textString(vn), printable: ti < 0 })); }
+        try { _push(vals,_reconAttrValue({ type: tname, value: cbor.read.textString(vn), printable: ti < 0 })); }
         catch (e) { throw _err("c509/bad-extensions", "a subjectDirectoryAttributes " + tname + " value is not valid for its string type", e); }
       }
-      attrs.push(b.sequence([b.oid(oid.byName(tname)), _derSetInDeclaredOrder(vals)]));
+      _push(attrs,b.sequence([b.oid(oid.byName(tname)), _derSetInDeclaredOrder(vals)]));
     } else if (typeNode.majorType === 2) {
       var dotted = _oidName(typeNode, "c509/bad-extensions", "a subjectDirectoryAttributes attribute type").oid;
       for (var vj = 0; vj < valuesNode.children.length; vj++) {
         var vb = valuesNode.children[vj];
         if (vb.majorType !== 2) throw _err("c509/bad-extensions", "a ~oid-form subjectDirectoryAttributes value must be a CBOR byte string (a raw DER AttributeValue)");
-        vals.push(b.raw(_requireStrictDerTlv(vb.content, "c509/bad-extensions", "a ~oid-form subjectDirectoryAttributes AttributeValue")));
+        _push(vals,b.raw(_requireStrictDerTlv(vb.content, "c509/bad-extensions", "a ~oid-form subjectDirectoryAttributes AttributeValue")));
       }
-      attrs.push(b.sequence([b.oid(dotted), _derSetInDeclaredOrder(vals)]));
+      _push(attrs,b.sequence([b.oid(dotted), _derSetInDeclaredOrder(vals)]));
     } else {
       throw _err("c509/bad-extensions", "a subjectDirectoryAttributes attribute type must be a CBOR integer (sec. 8.6) or a ~oid");
     }
@@ -1330,7 +1346,7 @@ function _sdaTryIntForm(tint, name, valueNodes) {
     var mails = [];
     for (i = 0; i < valueNodes.length; i++) {
       if (valueNodes[i].tagClass !== "universal" || valueNodes[i].tagNumber !== asn1.TAGS.IA5_STRING) return null;
-      mails.push(cbor.build.textString(asn1.read.string(valueNodes[i])));
+      _push(mails,cbor.build.textString(asn1.read.string(valueNodes[i])));
     }
     return { sign: 1, values: mails };
   }
@@ -1342,7 +1358,7 @@ function _sdaTryIntForm(tint, name, valueNodes) {
     else return null;
     if (sign === 0) sign = s;
     else if (sign !== s) return null;
-    out.push(cbor.build.textString(asn1.read.string(vn)));
+    _push(out,cbor.build.textString(asn1.read.string(vn)));
   }
   return { sign: sign, values: out };
 }
@@ -1361,11 +1377,11 @@ function _sdaFromDer(node) {
     var tint = canonAttr === undefined ? undefined : ATTR_TO_INT[canonAttr];
     var intForm = _sdaTryIntForm(tint, nm, setNode.children);
     if (intForm != null) {
-      out.push(cbor.build.int(BigInt(intForm.sign < 0 ? -tint : tint)));
-      out.push(cbor.build.array(intForm.values));
+      _push(out,cbor.build.int(BigInt(intForm.sign < 0 ? -tint : tint)));
+      _push(out,cbor.build.array(intForm.values));
     } else {
-      out.push(_oidCbor(dotted));
-      out.push(cbor.build.array(setNode.children.map(function (v) { return cbor.build.byteString(v.bytes); })));
+      _push(out,_oidCbor(dotted));
+      _push(out,cbor.build.array(setNode.children.map(function (v) { return cbor.build.byteString(v.bytes); })));
     }
   }
   return cbor.build.array(out);
@@ -1439,7 +1455,7 @@ function _extensions(node, isNative, ctx) {
       }
       _assertSpecificExtension(extOid, valContent, isNative, ctx);
     }
-    out.push({ name: name, oid: extOid, critical: critical, value: valContent || null });
+    _push(out,{ name: name, oid: extOid, critical: critical, value: valContent || null });
   }
   return out;
 }
@@ -1448,7 +1464,7 @@ function _extensions(node, isNative, ctx) {
 function _macToEui64String(buf) {
   var bytes = buf.length === 6 ? Buffer.concat([buf.subarray(0, 3), Buffer.from([0xff, 0xfe]), buf.subarray(3)]) : buf;
   var s = [];
-  for (var i = 0; i < bytes.length; i++) { var h = bytes[i].toString(16).toUpperCase(); if (h.length < 2) h = "0" + h; s.push(h); }
+  for (var i = 0; i < bytes.length; i++) { var h = bytes[i].toString(16).toUpperCase(); if (h.length < 2) h = "0" + h; _push(s, h); }
   return s.join("-");
 }
 
@@ -1516,8 +1532,8 @@ function _reconExtensions(exts) {
     else if (Buffer.isBuffer(ext.value)) extnValue = ext.value;
     else throw _err("c509/non-invertible", "extension " + ext.name + " has no reconstructable value in the covered set");
     var fields = [b.oid(ext.oid || oid.byName(ext.name))];
-    if (ext.critical) fields.push(b.boolean(true));
-    fields.push(b.octetString(extnValue));
+    if (ext.critical) _push(fields,b.boolean(true));
+    _push(fields,b.octetString(extnValue));
     return b.sequence(fields);
   });
   return b.explicit(3, b.sequence(items));
@@ -1526,7 +1542,7 @@ function _reconExtensions(exts) {
 function _reconAlgId(alg) {
   var fields = [b.oid(alg.oid)];
   if (alg.parameters && alg.parameters.length) {
-    fields.push(b.raw(_requireStrictDerTlv(alg.parameters, "c509/non-invertible", "algorithm parameters")));
+    _push(fields,b.raw(_requireStrictDerTlv(alg.parameters, "c509/non-invertible", "algorithm parameters")));
   }
   return b.sequence(fields);
 }
@@ -1547,7 +1563,7 @@ function _reconstructDer(r, sigNode) {
     subjectName,
     _reconSpki(r.subjectPublicKeyAlgorithm, r.subjectPublicKey, r.rsaPublicKey),
   ];
-  if (r.extensions.length) tbsFields.push(_reconExtensions(r.extensions));
+  if (r.extensions.length) _push(tbsFields,_reconExtensions(r.extensions));
   var tbs = b.sequence(tbsFields);
   if (String(r.signatureAlgorithm.name || "").toLowerCase().indexOf("ecdsa") !== 0) {
     throw _err("c509/non-invertible", "type-3 signature reconstruction covers only ECDSA; got " + r.signatureAlgorithm.name);
@@ -1751,8 +1767,8 @@ function _encName(name, isSubject) {
   rdns.forEach(function (rdn) {
     var ai = ATTR_TO_INT[rdn.type];
     if (ai === undefined) throw _err("c509/bad-name", "attribute type " + _describe(rdn.type) + " has no C509 registry int");
-    items.push(cbor.build.int(BigInt(rdn.printable ? -ai : ai)));
-    items.push(_encSpecialText(rdn));
+    _push(items,cbor.build.int(BigInt(rdn.printable ? -ai : ai)));
+    _push(items,_encSpecialText(rdn));
   });
   return cbor.build.array(items);
 }
@@ -1806,14 +1822,14 @@ function _encExtensions(exts, isNative) {
     var ei = extName == null ? undefined : EXT_TO_INT[extName];
     var compact = (ei !== undefined && Buffer.isBuffer(ext.value)) ? _tryCompactExtValue(extName, ext.value, isNative) : null;
     if (compact != null) {
-      items.push(cbor.build.int(BigInt(ext.critical ? -ei : ei)));
-      items.push(compact);
+      _push(items,cbor.build.int(BigInt(ext.critical ? -ei : ei)));
+      _push(items,compact);
     } else {
       if (!extDotted) throw _err("c509/bad-input", "an extension must carry an OID or a name in the OID registry, got " + _describe(ext.name));
-      items.push(cbor.build.byteString(asn1.encodeOidContent(extDotted)));
+      _push(items,cbor.build.byteString(asn1.encodeOidContent(extDotted)));
       if (!Buffer.isBuffer(ext.value)) throw _err("c509/non-invertible", "extension " + (ext.oid || ext.name) + " has no byte-string value to encode");
       var bs = cbor.build.byteString(ext.value);
-      items.push(ext.critical ? cbor.build.array([bs]) : bs);
+      _push(items,ext.critical ? cbor.build.array([bs]) : bs);
     }
   });
   return cbor.build.array(items);
@@ -1927,8 +1943,8 @@ function _c509NameFromDer(nameBytes, ctx) {
     var isIa5 = valNode.tagClass === "universal" && valNode.tagNumber === asn1.TAGS.IA5_STRING;
     if ((attrName === "emailAddress") !== isIa5) throw _err("c509/non-invertible", "attribute " + attrName + " carries a " + (isIa5 ? "IA5String" : "non-IA5String") + " value the C509 sec. 8.6 int form cannot represent");
     var eui = attrName === "commonName" ? _euiFromCn(value) : null;
-    if (eui) rdns.push({ type: attrName, value: value, eui64: eui });
-    else rdns.push({ type: attrName, value: value, printable: valNode.tagNumber === asn1.TAGS.PRINTABLE_STRING });
+    if (eui) _push(rdns,{ type: attrName, value: value, eui64: eui });
+    else _push(rdns,{ type: attrName, value: value, printable: valNode.tagNumber === asn1.TAGS.PRINTABLE_STRING });
   });
   return { rdns: rdns };
 }

package/lib/schema-cmc.js

@@ -45,6 +45,9 @@ var cms = require("./schema-cms");
 var csr = require("./schema-csr");
 var crmf = require("./schema-crmf");
 var guard = require("./guard-all");
+/** @internal The append this module's lists are built with: `push` stores at the index and a store
+ *  consults a setter inherited there, which takes the element being appended. */
+var _push = guard.list.append;
 var frameworkError = require("./framework-error");
 
 var CmcError = frameworkError.CmcError;
@@ -623,7 +626,7 @@ function _collectStatuses(controls, ctx) {
     if (c.values.length !== 1) {
       throw E("cmc/bad-status-info", "a CMC status control carries exactly one AttributeValue, got " + c.values.length);
     }
-    out.push(parseStatusInfo(c.values[0], version, c.bodyPartID, ctx));
+    _push(out, parseStatusInfo(c.values[0], version, c.bodyPartID, ctx));
   }
   return out;
 }
@@ -636,7 +639,7 @@ function _finishBody(body, where, ctx) {
     return c.attrType !== OID_STATUS_INFO && c.attrType !== OID_STATUS_INFO_V2 && c.attrName === null;
   });
   var ids = [];
-  function collect(list) { for (var j = 0; j < list.length; j++) ids.push(list[j].bodyPartID); }
+  function collect(list) { for (var j = 0; j < list.length; j++) _push(ids, list[j].bodyPartID); }
   collect(body.controls);
   collect(body.requests);
   collect(body.cmsSequence);

package/lib/schema-cmp.js

@@ -43,6 +43,9 @@ var cms = require("./schema-cms.js");
 var crmf = require("./schema-crmf.js");
 var frameworkError = require("./framework-error.js");
 var guard = require("./guard-all.js");
+/** @internal The append this module's lists are built with: `push` stores at the index and a store
+ *  consults a setter inherited there, which takes the element being appended. */
+var _push = guard.list.append;
 var constants = require("./constants");
 
 var CmpError = frameworkError.CmpError;
@@ -85,7 +88,7 @@ var PKI_FAILURE_INFO = schema.decode(function (n, ctx) {
   schema.assertMinimalNamedBits(bs.unusedBits, bs.bytes, function (m) { throw ctx.E("cmp/bad-fail-info", m); });
   var bits = [];
   for (var i = 0; i < total; i++) {
-    if ((bs.bytes[i >> 3] >> (7 - (i % 8))) & 1) bits.push(i < FAIL_INFO_NAMES.length ? FAIL_INFO_NAMES[i] : i);
+    if ((bs.bytes[i >> 3] >> (7 - (i % 8))) & 1) _push(bits, i < FAIL_INFO_NAMES.length ? FAIL_INFO_NAMES[i] : i);
   }
   return { bits: bits, raw: bs };
 });
@@ -578,11 +581,11 @@ var PKI_MESSAGE = schema.seq([
     var ckps = [];
     if (body.decoded && body.decoded.response) {
       for (var r = 0; r < body.decoded.response.length; r++) {
-        if (body.decoded.response[r].certifiedKeyPair) ckps.push(body.decoded.response[r].certifiedKeyPair);
+        if (body.decoded.response[r].certifiedKeyPair) _push(ckps, body.decoded.response[r].certifiedKeyPair);
       }
     }
     if (body.decoded && body.decoded.keyPairHist) {
-      for (var kh = 0; kh < body.decoded.keyPairHist.length; kh++) ckps.push(body.decoded.keyPairHist[kh]);
+      for (var kh = 0; kh < body.decoded.keyPairHist.length; kh++) _push(ckps, body.decoded.keyPairHist[kh]);
     }
     for (var ck = 0; ck < ckps.length; ck++) {
       var usesEnveloped =

package/lib/schema-cms.js

@@ -53,6 +53,9 @@ var asn1 = require("./asn1-der");
 var schema = require("./schema-engine");
 var pkix = require("./schema-pkix");
 var guard = require("./guard-all");
+/** @internal The append this module's lists are built with: `push` stores at the index and a store
+ *  consults a setter inherited there, which takes the element being appended. */
+var _push = guard.list.append;
 var oid = require("./oid");
 /** @internal The OCSP response schema, for the RFC 5940 `crls` arm. `schema-ocsp` requires neither
  *  this module nor anything that reaches it, so this is an ordinary top-of-file require. */
@@ -595,7 +598,7 @@ function algorithmProtectionReport(attrs, digestAlgorithm, armName, armIdentifie
         " (RFC 6211 sec. 3)" };
     return out;
   }
-  out.compared.push("digestAlgorithm");
+  _push(out.compared, "digestAlgorithm");
   var wantsMacArm = armName === "macAlgorithm";
   var arm = wantsMacArm ? value.macAlgorithm : value.signatureAlgorithm;
   var other = wantsMacArm ? value.signatureAlgorithm : value.macAlgorithm;
@@ -615,7 +618,7 @@ function algorithmProtectionReport(attrs, digestAlgorithm, armName, armIdentifie
         ", or their parameters differ (RFC 6211 sec. 3)" };
     return out;
   }
-  out.compared.push(armName);
+  _push(out.compared, armName);
   return out;
 }
 
@@ -1527,7 +1530,7 @@ function taggedParameterFields(params, maxTag) {
         !Array.isArray(f.children) || f.children.length !== 1) return null;
     last = f.tagNumber;
     if (!Buffer.isBuffer(f.children[0].bytes)) return null;
-    out.push({ tag: f.tagNumber, node: f.children[0], bytes: f.children[0].bytes });
+    _push(out, { tag: f.tagNumber, node: f.children[0], bytes: f.children[0].bytes });
   }
   return out;
 }
@@ -1547,7 +1550,7 @@ function _paramKeyWithoutDefaults(params, rows) {
       if (rows[r].tag === fields[i].tag) { defaulted = rows[r].value.equals(fields[i].bytes); break; }
     }
     if (defaulted) continue;
-    parts.push(String(fields[i].tag) + ":" + fields[i].bytes.toString("hex"));
+    _push(parts, String(fields[i].tag) + ":" + fields[i].bytes.toString("hex"));
   }
   return parts.join(",");
 }

package/lib/schema-crl.js

@@ -292,7 +292,7 @@ var DOOR = pkix.extensionDoor({
     var out = [{ list: rawRecords(crl.crlExtensions), scope: "crl" }];
     var revoked = crl.revokedCertificates || [];
     for (var i = 0; i < revoked.length; i++) {
-      intrinsic.push(out, { list: rawRecords(revoked[i].crlEntryExtensions), scope: "crl-entry", containerIndex: i });
+      intrinsic.append(out, { list: rawRecords(revoked[i].crlEntryExtensions), scope: "crl-entry", containerIndex: i });
     }
     return out;
   },

package/lib/schema-crmf.js

@@ -451,7 +451,7 @@ var DOOR = pkix.extensionDoor({
     var out = [];
     for (var i = 0; i < messages.length; i++) {
       var template = messages[i].certReq && messages[i].certReq.certTemplate;
-      intrinsic.push(out, { list: (template && template.extensions) || [], scope: "crmf-template", containerIndex: i });
+      intrinsic.append(out, { list: (template && template.extensions) || [], scope: "crmf-template", containerIndex: i });
     }
     return out;
   },

package/lib/schema-csr.js

@@ -298,7 +298,7 @@ var DOOR = pkix.extensionDoor({
     var out = [];
     for (var i = 0; i < attrs.length; i++) {
       if (attrs[i].type !== OID_EXTENSION_REQUEST) continue;
-      intrinsic.push(out, { list: attrs[i].extensions || [], scope: "csr-requested", containerIndex: i });
+      intrinsic.append(out, { list: attrs[i].extensions || [], scope: "csr-requested", containerIndex: i });
     }
     if (!read.groups && out.length > 1) {
       throw _err("csr/ambiguous-extension-request", "this request carries " + out.length +
@@ -312,9 +312,9 @@ var DOOR = pkix.extensionDoor({
     for (var s = 0; s < segments.length; s++) {
       var g = { attributeIndex: segments[s].containerIndex, extensions: [] };
       byIndex[segments[s].containerIndex] = g;
-      intrinsic.push(out, g);
+      intrinsic.append(out, g);
     }
-    for (var r = 0; r < rows.length; r++) intrinsic.push(byIndex[rows[r].containerIndex].extensions, rows[r]);
+    for (var r = 0; r < rows.length; r++) intrinsic.append(byIndex[rows[r].containerIndex].extensions, rows[r]);
     return out;
   },
 });