@bytecodealliance/preview2-shim 0.18.0 → 0.18.1

package/lib/browser/filesystem.js

@@ -43,6 +43,22 @@ const timeZero = {
   nanoseconds: 0,
 };
 
+/** Coerce the given object to a safe integer */
+function coerceToSafeIntegerNumber(obj) {
+  let n;
+  if (typeof obj === "number") {
+    n = obj;
+  } else if (typeof obj == "bigint") {
+    n = Number(obj);
+  } else {
+    throw new TypeError(`unexpected non-numeric type: ${obj}`);
+  }
+  if (n > Number.MAX_SAFE_INTEGER) {
+    throw new TypeError(`excessively large number: ${n}`);
+  }
+  return n;
+}
+
 function getChildEntry(parentEntry, subpath, openFlags) {
   if (subpath === "." && _rootPreopen && descriptorGetEntry(_rootPreopen[0]) === parentEntry) {
     subpath = _getCwd();
@@ -188,7 +204,9 @@ class Descriptor {
 
   read(length, offset) {
     const source = getSource(this.#entry);
-    return [source.slice(offset, offset + length), offset + length >= source.byteLength];
+    const off = coerceToSafeIntegerNumber(offset);
+    const len = coerceToSafeIntegerNumber(length);
+    return [source.slice(off, off + len), off + len >= source.byteLength];
   }
 
   write(buffer, offset) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bytecodealliance/preview2-shim",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "description": "WASI Preview2 shim for JS environments",
   "homepage": "https://github.com/bytecodealliance/jco#readme",
   "bugs": {
@@ -52,7 +52,7 @@
     "@bytecodealliance/componentize-js": "0.21.0",
     "@bytecodealliance/jco": "1.15.2",
     "mime": "^4.0.7",
-    "puppeteer": "^24.43.1"
+    "puppeteer": "^25.1.0"
   },
   "scripts": {
     "types:check": "tsc --noEmit",