@naeemo/capnp 0.9.0 → 0.9.1

package/dist/index.cjs

@@ -549,21 +549,38 @@ var ListBuilder = class {
 * Cap'n Proto MessageReader
 * 纯 TypeScript 实现
 */
+/** 默认安全选项 */
+const DEFAULT_SECURITY_OPTIONS = {
+	maxSegments: 64,
+	maxTotalSize: 64 * 1024 * 1024,
+	strictMode: false
+};
 var MessageReader = class {
 	segments;
-	constructor(buffer) {
+	securityOptions;
+	constructor(buffer, securityOptions) {
+		this.securityOptions = {
+			...DEFAULT_SECURITY_OPTIONS,
+			...securityOptions
+		};
 		const uint8Array = buffer instanceof ArrayBuffer ? new Uint8Array(buffer) : buffer;
 		this.segments = [];
+		if (this.securityOptions.strictMode && uint8Array.byteLength > this.securityOptions.maxTotalSize) throw new Error(`Message size (${uint8Array.byteLength} bytes) exceeds maximum allowed size (${this.securityOptions.maxTotalSize} bytes)`);
 		if (uint8Array.byteLength < 8) return;
 		const view = new DataView(uint8Array.buffer, uint8Array.byteOffset, uint8Array.byteLength);
 		const firstWordLow = view.getUint32(0, true);
 		const firstWordHigh = view.getUint32(4, true);
 		const segmentCount = (firstWordLow & 4294967295) + 1;
 		const firstSegmentSize = firstWordHigh;
+		if (segmentCount > this.securityOptions.maxSegments) {
+			if (this.securityOptions.strictMode) throw new Error(`Segment count (${segmentCount}) exceeds maximum allowed (${this.securityOptions.maxSegments})`);
+			return;
+		}
 		let offset = 8;
 		const segmentSizes = [firstSegmentSize];
 		for (let i = 1; i < segmentCount; i++) {
 			if (offset + 4 > uint8Array.byteLength) {
+				if (this.securityOptions.strictMode) throw new Error(`Message ended prematurely while reading segment ${i} size (offset: ${offset}, length: ${uint8Array.byteLength})`);
 				this.segments = [];
 				return;
 			}
@@ -572,12 +589,24 @@ var MessageReader = class {
 		}
 		offset = offset + 7 & -8;
 		if (offset > uint8Array.byteLength) {
+			if (this.securityOptions.strictMode) throw new Error(`Insufficient data for segment table (offset: ${offset}, length: ${uint8Array.byteLength})`);
 			this.segments = [];
 			return;
 		}
+		const headerSize = offset;
+		let totalBodySize = 0;
+		for (const size of segmentSizes) totalBodySize += size * WORD_SIZE;
+		const expectedTotalSize = headerSize + totalBodySize;
+		if (expectedTotalSize > this.securityOptions.maxTotalSize) {
+			if (this.securityOptions.strictMode) throw new Error(`Total message size (${expectedTotalSize} bytes) exceeds maximum allowed size (${this.securityOptions.maxTotalSize} bytes)`);
+			return;
+		}
 		this.segments = [];
 		for (const size of segmentSizes) {
-			if (offset + size * WORD_SIZE > uint8Array.byteLength) break;
+			if (offset + size * WORD_SIZE > uint8Array.byteLength) {
+				if (this.securityOptions.strictMode) throw new Error(`Insufficient data for segment (expected ${size * WORD_SIZE} bytes at offset ${offset}, but message is ${uint8Array.byteLength} bytes)`);
+				break;
+			}
 			const segmentBuffer = uint8Array.slice(offset, offset + size * WORD_SIZE);
 			this.segments.push(Segment.fromBuffer(segmentBuffer.buffer));
 			offset += size * WORD_SIZE;
@@ -671,6 +700,12 @@ var MessageReader = class {
 	get segmentCount() {
 		return this.segments.length;
 	}
+	/**
+	* 获取当前安全选项配置
+	*/
+	getSecurityOptions() {
+		return { ...this.securityOptions };
+	}
 };
 /**
 * 结构读取器