@parcel/utils 2.16.1 → 2.16.3

package/lib/index.js

@@ -4296,7 +4296,7 @@ $aa3e068b956a6fc4$var$util.ByteStringBuffer.prototype._optimizeConstructedString
     return this;
 };
 /**
- * Shortens this buffer by triming bytes off of the end of this buffer.
+ * Shortens this buffer by trimming bytes off of the end of this buffer.
  *
  * @param count the number of bytes to trim off.
  *
@@ -4838,7 +4838,7 @@ $aa3e068b956a6fc4$var$util.DataBuffer = $aa3e068b956a6fc4$var$DataBuffer;
     return this;
 };
 /**
- * Shortens this buffer by triming bytes off of the end of this buffer.
+ * Shortens this buffer by trimming bytes off of the end of this buffer.
  *
  * @param count the number of bytes to trim off.
  *
@@ -5671,7 +5671,7 @@ $aa3e068b956a6fc4$var$util.text = {
                 if (argi < arguments.length) parts.push(arguments[argi++ + 1]);
                 else parts.push('<?>');
                 break;
-            // FIXME: do proper formating for numbers, etc
+            // FIXME: do proper formatting for numbers, etc
             //case 'f':
             //case 'd':
             case '%':
@@ -7122,7 +7122,7 @@ var $4ddacb2967c366b4$var$imix; // inverse mix-columns table
  * The word [a0, a1, a2, a3] is a polynomial a3x^3 + a2x^2 + a1x + a0.
  *
  * Addition is performed by XOR'ing like powers of x. Multiplication
- * is performed in two steps, the first is an algebriac expansion as
+ * is performed in two steps, the first is an algebraic expansion as
  * you would do normally (where addition is XOR). But the result is
  * a polynomial larger than 3 degrees and thus it cannot fit in a word. So
  * next the result is modularly reduced by an AES-specific polynomial of
@@ -8395,6 +8395,9 @@ $dac3a60e3c7fa860$var$_IN('1.3.6.1.5.5.7.3.8', 'timeStamping');
     GENERALIZEDTIME: 24,
     BMPSTRING: 30
 };
+/**
+ * Sets the default maximum recursion depth when parsing ASN.1 structures.
+ */ $4842c66ab7bb0996$var$asn1.maxDepth = 256;
 /**
  * Creates a new asn1 object.
  *
@@ -8576,6 +8579,8 @@ $dac3a60e3c7fa860$var$_IN('1.3.6.1.5.5.7.3.8', 'timeStamping');
  *            erroneously decode values that happen to be valid ASN.1. This
  *            flag will be deprecated or removed as soon as schema support is
  *            available. (default: true)
+ *          [maxDepth] override asn1.maxDepth recursion limit
+ *            (default: asn1.maxDepth)
  *
  * @throws Will throw an error for various malformed input conditions.
  *
@@ -8594,6 +8599,7 @@ $dac3a60e3c7fa860$var$_IN('1.3.6.1.5.5.7.3.8', 'timeStamping');
     if (!('strict' in options)) options.strict = true;
     if (!('parseAllBytes' in options)) options.parseAllBytes = true;
     if (!('decodeBitStrings' in options)) options.decodeBitStrings = true;
+    if (!('maxDepth' in options)) options.maxDepth = $4842c66ab7bb0996$var$asn1.maxDepth;
     // wrap in buffer if needed
     if (typeof bytes === 'string') bytes = $ctKnW.util.createBuffer(bytes);
     var byteCount = bytes.length();
@@ -8616,6 +8622,8 @@ $dac3a60e3c7fa860$var$_IN('1.3.6.1.5.5.7.3.8', 'timeStamping');
  *
  * @return the parsed asn1 object.
  */ function $4842c66ab7bb0996$var$_fromDer(bytes, remaining, depth, options) {
+    // check depth limit
+    if (depth >= options.maxDepth) throw new Error('ASN.1 parsing error: Max depth exceeded.');
     // temporary storage for consumption calculations
     var start;
     // minimum length for ASN.1 DER structure is 2
@@ -8838,6 +8846,8 @@ $dac3a60e3c7fa860$var$_IN('1.3.6.1.5.5.7.3.8', 'timeStamping');
         last = true;
         valueBytes = [];
         value = parseInt(values[i], 10);
+        // TODO: Change bitwise logic to allow larger values.
+        if (value > 0xffffffff) throw new Error('OID value too large; max is 32-bits.');
         do {
             b = value & 0x7F;
             value = value >>> 7;
@@ -8870,8 +8880,11 @@ $dac3a60e3c7fa860$var$_IN('1.3.6.1.5.5.7.3.8', 'timeStamping');
     // the last byte for each value
     var value = 0;
     while(bytes.length() > 0){
+        // error if 7b shift would exceed Number.MAX_SAFE_INTEGER
+        // (Number.MAX_SAFE_INTEGER / 128)
+        if (value > 0x3fffffffffff) throw new Error('OID value too large; max is 53-bits.');
         b = bytes.getByte();
-        value = value << 7;
+        value = value * 128;
         // not the last byte for the value
         if (b & 0x80) value += b & 0x7F;
         else {
@@ -9139,13 +9152,48 @@ $dac3a60e3c7fa860$var$_IN('1.3.6.1.5.5.7.3.8', 'timeStamping');
             if (v.value && $ctKnW.util.isArray(v.value)) {
                 var j = 0;
                 for(var i = 0; rval && i < v.value.length; ++i){
-                    rval = v.value[i].optional || false;
-                    if (obj.value[j]) {
-                        rval = $4842c66ab7bb0996$var$asn1.validate(obj.value[j], v.value[i], capture, errors);
-                        if (rval) ++j;
-                        else if (v.value[i].optional) rval = true;
+                    var schemaItem = v.value[i];
+                    rval = !!schemaItem.optional;
+                    // current child in the object
+                    var objChild = obj.value[j];
+                    // if there is no child left to match
+                    if (!objChild) {
+                        // if optional, ok (rval already true), else fail below
+                        if (!schemaItem.optional) {
+                            rval = false;
+                            if (errors) errors.push('[' + v.name + '] ' + 'Missing required element. Expected tag class "' + schemaItem.tagClass + '", type "' + schemaItem.type + '"');
+                        }
+                        continue;
+                    }
+                    // If schema explicitly specifies tagClass/type, do a quick structural check
+                    // to avoid unnecessary recursion/side-effects when tags clearly don't match.
+                    var schemaHasTag = typeof schemaItem.tagClass !== 'undefined' && typeof schemaItem.type !== 'undefined';
+                    if (schemaHasTag && (objChild.tagClass !== schemaItem.tagClass || objChild.type !== schemaItem.type)) {
+                        // Tags do not match.
+                        if (schemaItem.optional) {
+                            // Skip this schema element (don't consume objChild; don't call recursive validate).
+                            rval = true;
+                            continue;
+                        } else {
+                            // Required schema item mismatched - fail.
+                            rval = false;
+                            if (errors) errors.push('[' + v.name + '] ' + 'Tag mismatch. Expected (' + schemaItem.tagClass + ',' + schemaItem.type + '), got (' + objChild.tagClass + ',' + objChild.type + ')');
+                            break;
+                        }
+                    }
+                    // Tags are compatible (or schema did not declare tags) - dive into recursive validate.
+                    var childRval = $4842c66ab7bb0996$var$asn1.validate(objChild, schemaItem, capture, errors);
+                    if (childRval) {
+                        // consume this child
+                        ++j;
+                        rval = true;
+                    } else if (schemaItem.optional) // validation failed but element is optional => skip schema item (don't consume child)
+                    rval = true;
+                    else {
+                        // required item failed
+                        rval = false;
+                        break;
                     }
-                    if (!rval && errors) errors.push('[' + v.name + '] ' + 'Tag class "' + v.tagClass + '", type "' + v.type + '" expected value length "' + v.value.length + '", got "' + obj.value.length + '"');
                 }
             }
             if (rval && capture) {
@@ -15269,7 +15317,7 @@ var $e581af606dac1487$var$digestInfoValidator = {
                     capture: 'algorithmIdentifier'
                 },
                 {
-                    // NULL paramters
+                    // NULL parameters
                     name: 'DigestInfo.DigestAlgorithm.parameters',
                     tagClass: $e581af606dac1487$var$asn1.Class.UNIVERSAL,
                     type: $e581af606dac1487$var$asn1.Type.NULL,
@@ -15305,7 +15353,7 @@ var $e581af606dac1487$var$digestInfoValidator = {
  *
  * @param md the message digest object with the hash to sign.
  *
- * @return the encoded message (ready for RSA encrytion)
+ * @return the encoded message (ready for RSA encryption)
  */ var $e581af606dac1487$var$emsaPkcs1v15encode = function(md) {
     // get the oid for the algorithm
     var oid;
@@ -15447,7 +15495,7 @@ var $e581af606dac1487$var$digestInfoValidator = {
  *
  * The parameter bt controls whether to put padding bytes before the
  * message passed in. Set bt to either true or false to disable padding
- * completely (in order to handle e.g. EMSA-PSS encoding seperately before),
+ * completely (in order to handle e.g. EMSA-PSS encoding separately before),
  * signaling whether the encryption operation is a public key operation
  * (i.e. encrypting data) or not, i.e. private key operation (data signing).
  *
@@ -16022,7 +16070,7 @@ var $e581af606dac1487$var$digestInfoValidator = {
                 }
                 // check hash algorithm identifier
                 // see PKCS1-v1-5DigestAlgorithms in RFC 8017
-                // FIXME: add support to vaidator for strict value choices
+                // FIXME: add support to validator for strict value choices
                 var oid = $e581af606dac1487$var$asn1.derToOid(capture.algorithmIdentifier);
                 if (!(oid === $ctKnW.oids.md2 || oid === $ctKnW.oids.md5 || oid === $ctKnW.oids.sha1 || oid === $ctKnW.oids.sha224 || oid === $ctKnW.oids.sha256 || oid === $ctKnW.oids.sha384 || oid === $ctKnW.oids.sha512 || oid === $ctKnW.oids['sha512-224'] || oid === $ctKnW.oids['sha512-256'])) {
                     var error = new Error('Unknown RSASSA-PKCS1-v1_5 DigestAlgorithm identifier.');
@@ -16031,7 +16079,7 @@ var $e581af606dac1487$var$digestInfoValidator = {
                 }
                 // special check for md2 and md5 that NULL parameters exist
                 if (oid === $ctKnW.oids.md2 || oid === $ctKnW.oids.md5) {
-                    if (!('parameters' in capture)) throw new Error("ASN.1 object does not contain a valid RSASSA-PKCS1-v1_5 DigestInfo value. Missing algorithm identifer NULL parameters.");
+                    if (!('parameters' in capture)) throw new Error("ASN.1 object does not contain a valid RSASSA-PKCS1-v1_5 DigestInfo value. Missing algorithm identifier NULL parameters.");
                 }
                 // compare the given digest to the decrypted one
                 return digest === capture.digest;
@@ -16388,7 +16436,7 @@ var $e581af606dac1487$var$digestInfoValidator = {
 
     1. The encryption block EB cannot be parsed unambiguously.
     2. The padding string PS consists of fewer than eight octets
-      or is inconsisent with the block type BT.
+      or is inconsistent with the block type BT.
     3. The decryption process is a public-key operation and the block
       type BT is not 00 or 01, or the decryption process is a
       private-key operation and the block type is not 02.
@@ -17190,7 +17238,7 @@ var $af4fabac5df619a8$var$pkcs12PbeParamsValidator = {
         v copies of ID. */ var D = new $ctKnW.util.ByteBuffer();
     D.fillWithByte(id, v);
     /* 2. Concatenate copies of the salt together to create a string S of length
-        v * ceil(s / v) bytes (the final copy of the salt may be trunacted
+        v * ceil(s / v) bytes (the final copy of the salt may be truncated
         to create S).
         Note that if the salt is the empty string, then so is S. */ var Slen = v * Math.ceil(s / v);
     var S = new $ctKnW.util.ByteBuffer();
@@ -20245,7 +20293,7 @@ var $f82685d976399f90$var$certificationRequestValidator = {
  * Convert signature parameters object to ASN.1
  *
  * @param {String} oid Signature algorithm OID
- * @param params The signature parametrs object
+ * @param params The signature parameters object
  * @return ASN.1 object representing signature parameters
  */ function $f82685d976399f90$var$_signatureParametersToAsn1(oid, params) {
     switch(oid){
@@ -21299,7 +21347,7 @@ var $df5201b2e1aaa80b$var$certBagValidator = {
         mac.update(data.value);
         var macValue = mac.getMac();
         if (macValue.getBytes() !== capture.macDigest) throw new Error('PKCS#12 MAC could not be verified. Invalid password?');
-    }
+    } else if (Array.isArray(obj.value) && obj.value.length > 2) /* This is pfx data that should have mac and verify macDigest */ throw new Error('Invalid PKCS#12. macData field present but MAC was not validated.');
     $df5201b2e1aaa80b$var$_decodeAuthenticatedSafe(pfx, data.value, strict, password);
     return pfx;
 };
@@ -22286,7 +22334,7 @@ $1c135395252d0c3b$var$tls.Alert.Description = {
  * @param length the length of the handshake message.
  */ $1c135395252d0c3b$var$tls.handleHelloRequest = function(c, record, length) {
     // ignore renegotiation requests from the server during a handshake, but
-    // if handshaking, send a warning alert that renegotation is denied
+    // if handshaking, send a warning alert that renegotiation is denied
     if (!c.handshaking && c.handshakes > 0) {
         // send alert warning
         $1c135395252d0c3b$var$tls.queue(c, $1c135395252d0c3b$var$tls.createAlert(c, {
@@ -23827,7 +23875,7 @@ $1c135395252d0c3b$var$hsTable[$1c135395252d0c3b$var$tls.ConnectionEnd.client] =
     ]
 ];
 // map server current expect state and handshake type to function
-// Note: CAD[CH] does not map to FB because renegotation is prohibited
+// Note: CAD[CH] does not map to FB because renegotiation is prohibited
 var $1c135395252d0c3b$var$H7 = $1c135395252d0c3b$var$tls.handleClientHello;
 var $1c135395252d0c3b$var$H8 = $1c135395252d0c3b$var$tls.handleClientKeyExchange;
 var $1c135395252d0c3b$var$H9 = $1c135395252d0c3b$var$tls.handleCertificateVerify;