@colyseus/schema 3.0.64 → 3.0.66

package/build/cjs/index.js

@@ -338,6 +338,10 @@ const _float64 = new Float64Array(_convoBuffer);
 const _uint64 = new BigUint64Array(_convoBuffer);
 const _int64 = new BigInt64Array(_convoBuffer);
 function utf8Read(bytes, it, length) {
+    // boundary check
+    if (length > bytes.length - it.offset) {
+        length = bytes.length - it.offset;
+    }
     var string = '', chr = 0;
     for (var i = it.offset, end = it.offset + length; i < end; i++) {
         var byte = bytes[i];
@@ -370,9 +374,10 @@ function utf8Read(bytes, it, length) {
             }
             continue;
         }
-        console.error('Invalid byte ' + byte.toString(16));
         // (do not throw error to avoid server/client from crashing due to hack attemps)
         // throw new Error('Invalid byte ' + byte.toString(16));
+        console.error('decode.utf8Read(): Invalid byte ' + byte + ' at offset ' + i + '. Skip to end of string: ' + (it.offset + length));
+        break;
     }
     it.offset += length;
     return string;
@@ -1059,6 +1064,9 @@ class ChangeTree {
             if (typeof (this.ref[$childType]) !== "string") {
                 // MapSchema / ArraySchema, etc.
                 for (const [key, value] of this.ref.entries()) {
+                    if (!value) {
+                        continue;
+                    } // sparse arrays can have undefined values
                     callback(value[$changes], this.indexes?.[key] ?? key);
                 }
             }
@@ -3699,7 +3707,9 @@ class Schema {
         this[$changes].change(metadata[metadata[property]].index, operation);
     }
     clone() {
-        const cloned = new (this.constructor);
+        // Create instance without calling custom constructor
+        const cloned = Object.create(this.constructor.prototype);
+        Schema.initialize(cloned);
         const metadata = this.constructor[Symbol.metadata];
         //
         // TODO: clone all properties, not only annotated ones