@blamejs/pki 0.8.59 → 0.8.61

package/lib/est.js

@@ -73,6 +73,9 @@ var crmfFmt = require("./schema-crmf");
 var frameworkError = require("./framework-error");
 var guard = require("./guard-all");
 var intrinsic = require("./guard-intrinsic");
+/** @internal The append every list here is built with: `push` stores at the index and a store
+ *  consults a setter inherited there, which takes the element being appended. */
+var _push = intrinsic.append;
 var _charCodeAt = intrinsic.uncurry(String.prototype.charCodeAt);
 var _strSlice = intrinsic.uncurry(String.prototype.slice);
 var _toLowerCase = intrinsic.uncurry(String.prototype.toLowerCase);
@@ -423,7 +426,7 @@ function findIssuedCert(certs, target) {
 
 function _recipientKeyIds(recipientInfos, kind) {
   var ids = [];
-  function push(v) { if (Buffer.isBuffer(v)) ids.push(v); }
+  function push(v) { if (Buffer.isBuffer(v)) _push(ids,v); }
   (recipientInfos || []).forEach(function (r) {
     if (kind !== "symmetric") {
       if (r.rid) push(r.rid.subjectKeyIdentifier);
@@ -439,7 +442,7 @@ function _recipientKeyIds(recipientInfos, kind) {
 
 function _recipientIssuerSerials(recipientInfos) {
   var out = [];
-  function push(rid) { if (rid && rid.issuer && Buffer.isBuffer(rid.issuer.bytes) && rid.serialNumber != null) out.push({ issuer: rid.issuer.bytes, serialNumber: rid.serialNumber }); }
+  function push(rid) { if (rid && rid.issuer && Buffer.isBuffer(rid.issuer.bytes) && rid.serialNumber != null) _push(out,{ issuer: rid.issuer.bytes, serialNumber: rid.serialNumber }); }
   (recipientInfos || []).forEach(function (r) {
     push(r.rid);
     if (r.kemri) push(r.kemri.rid);
@@ -758,7 +761,7 @@ function smimeCapabilitiesAttr(capabilities) {
   if (!Array.isArray(capabilities) || capabilities.length === 0) throw E("est/bad-input", "smimeCapabilitiesAttr requires a non-empty capability list");
   var caps = capabilities.map(function (c) {
     var seq = [asn1.build.oid(c.capabilityID)];
-    if (c.parameters !== undefined && c.parameters !== null) seq.push(Buffer.isBuffer(c.parameters) ? c.parameters : asn1.build.oid(c.parameters));
+    if (c.parameters !== undefined && c.parameters !== null) _push(seq,Buffer.isBuffer(c.parameters) ? c.parameters : asn1.build.oid(c.parameters));
     return asn1.build.sequence(seq);
   });
   return _attr(OID_SMIME_CAPABILITIES, [asn1.build.sequence(caps)]);
@@ -780,7 +783,7 @@ function buildEnrollAttributes(csrattrsParsed) {
       if (plan.keyType) throw E("est/ambiguous-key-type", "a non-template CsrAttrs response must carry exactly one key-type attribute (RFC 9908 sec. 3.2)");
       plan.keyType = { type: it.name, curve: it.curve || null, keySize: it.keySize || null, values: it.values || [] };
     }
-    else plan.unhandled.push({ kind: it.kind, oid: it.oid, name: it.name });
+    else _push(plan.unhandled,{ kind: it.kind, oid: it.oid, name: it.name });
   }
   return plan;
 }
@@ -1217,7 +1220,7 @@ function _correlateIssued(bag, wanted, arm) {
 function _allMatching(bag, key) {
   var rest = bag.slice(), out = [], hit;
   while ((hit = findIssuedCert(rest, key)) !== null) {
-    out.push(hit);
+    _push(out,hit);
     rest = rest.filter(function (c) { return c !== hit; });
   }
   return out;
@@ -1240,7 +1243,7 @@ function _requestedPublicKeys(der) {
     try {
       if (r.certificationRequestBytes) {
         var spki = csr.parse(r.certificationRequestBytes).subjectPublicKeyInfo;
-        if (spki && Buffer.isBuffer(spki.bytes)) out.push(spki.bytes);
+        if (spki && Buffer.isBuffer(spki.bytes)) _push(out,spki.bytes);
         if (out.length === before) _unreadableArm();
         return;
       }
@@ -1251,7 +1254,7 @@ function _requestedPublicKeys(der) {
         var pk = (tmpl && tmpl.publicKey) ||
           (msg0 && msg0.popo && msg0.popo.poposkInput && msg0.popo.poposkInput.publicKey);
         var pkBytes = Buffer.isBuffer(pk) ? pk : (pk && pk.bytes);
-        if (Buffer.isBuffer(pkBytes)) out.push(pkBytes);
+        if (Buffer.isBuffer(pkBytes)) _push(out,pkBytes);
         if (out.length === before) _unreadableArm();
       }
     } catch (e) {
@@ -1299,7 +1302,7 @@ function _requestBinding(der) {
   var paths = [];
   intrinsic.forEach([body.requests, body.controls, body.cmsSequence, body.otherMsgs], function (list) {
     (list || []).forEach(function (el) {
-      if (el && el.bodyPartID != null) { ids.push(el.bodyPartID); paths.push([el.bodyPartID]); }
+      if (el && el.bodyPartID != null) { _push(ids,el.bodyPartID); _push(paths,[el.bodyPartID]); }
     });
   });
   _collectNestedPaths(body.cmsSequence, [], paths, 0);
@@ -1344,7 +1347,7 @@ function _collectNestedPaths(list, prefix, out, depth) {
     if (!inner || inner.kind !== "pkiData") return;
     var path = prefix.concat([el.bodyPartID]);
     intrinsic.forEach([inner.requests, inner.controls, inner.cmsSequence, inner.otherMsgs], function (l) {
-      (l || []).forEach(function (e2) { if (e2 && e2.bodyPartID != null) out.push(path.concat([e2.bodyPartID])); });
+      (l || []).forEach(function (e2) { if (e2 && e2.bodyPartID != null) _push(out,path.concat([e2.bodyPartID])); });
     });
     _collectNestedPaths(inner.cmsSequence, path, out, depth + 1);
   });

package/lib/guard-bytes.js

@@ -446,7 +446,11 @@ function _deep(v, ErrorClass, code, label, cap, depth, collect, work) {
       var element;
       try { element = v[k]; }
       catch (e) { throw _raise(ErrorClass, code, label + ": reading element " + k + " threw", e); }
-      arr[k] = _deep(element, ErrorClass, code, label, cap, depth + 1, collect, work);
+      /** @internal The copy's slot is DEFINED, not stored at. The indices walked here are the ones
+       *  the source holds of its own, so they can skip: a store at an index this copy has no own
+       *  property at walks the prototype chain for a setter, which would take the copied element at
+       *  the toolkit's own door for caller byte structures. */
+      _defineProperty(arr, k, { value: _deep(element, ErrorClass, code, label, cap, depth + 1, collect, work), writable: true, enumerable: true, configurable: true });
     });
     arr.length = vCount;
     _copyNamed(v, arr, ErrorClass, code, label, cap, depth, collect, work);