@poe-platform/safe-bash 0.1.71 → 0.1.72

package/dist/safe-bash/browser.js

@@ -3432,6 +3432,7 @@ function createDirectoryReader(maxEntries = 1e4) {
 }
 
 // packages/safe-bash/src/commands/filesystem.ts
+var MAX_RECURSIVE_DIRECTORY_DEPTH = 1024;
 async function preflightOperands(context, operands, check) {
   for (const operand of operands) {
     try {
@@ -3514,11 +3515,19 @@ async function copy(context, source, target, flags, readDirectory, top = true, a
     if (isPathWithin(physicalSource, physicalTarget)) throw new FsError("EINVAL", { path: target, message: "cannot copy a directory into itself" });
     if (ancestors.has(physicalSource)) throw new FsError("ELOOP", { path: source });
     if (targetStat && targetStat.type !== "directory") throw new FsError("ENOTDIR", { path: target });
+    context.signal.throwIfAborted();
+    if (ancestors.size > MAX_RECURSIVE_DIRECTORY_DEPTH) {
+      throw new FsError("ELOOP", { path: source, message: `cp directory depth limit exceeded (${MAX_RECURSIVE_DIRECTORY_DEPTH})` });
+    }
     await admitFilesystemModes(context, "cp", ["recursive"], [target]);
-    if (!targetStat && !preflight) await context.fs.mkdir(target, { mode: sourceStat.mode & 511, signal: context.signal });
-    const next = new Set(ancestors).add(physicalSource);
-    for (const entry of await readDirectory(context, source, true)) {
-      await copy(context, joinPath(source, entry.name), joinPath(target, entry.name), flags, readDirectory, false, next, preflight);
+    ancestors.add(physicalSource);
+    try {
+      if (!targetStat && !preflight) await context.fs.mkdir(target, { mode: sourceStat.mode & 511, signal: context.signal });
+      for (const entry of await readDirectory(context, source, true)) {
+        await copy(context, joinPath(source, entry.name), joinPath(target, entry.name), flags, readDirectory, false, ancestors, preflight);
+      }
+    } finally {
+      ancestors.delete(physicalSource);
     }
   } else if (preserveLink) {
     await admitFilesystemModes(context, "cp", ["symlink"], [target]);
@@ -3856,25 +3865,33 @@ function filesystemCommands(maxDirectoryEntries) {
         await admitFilesystemModes(context, "ls", ["directory"], [path]);
         const physical = await context.fs.realpath(path, { signal: context.signal });
         if (ancestors.has(physical)) throw new FsError("ELOOP", { path });
-        const next = new Set(ancestors).add(physical);
-        if (header) {
-          await output(context, `${headerWritten ? "\n" : ""}${display}:
-`);
-          headerWritten = true;
+        context.signal.throwIfAborted();
+        if (ancestors.size > MAX_RECURSIVE_DIRECTORY_DEPTH) {
+          throw new FsError("ELOOP", { path, message: `ls directory depth limit exceeded (${MAX_RECURSIVE_DIRECTORY_DEPTH})` });
         }
-        const entries = await readDirectory(context, path, true);
-        const names = entries.map((entry) => entry.name).filter((name2) => parsed.flags.has("a") || parsed.flags.has("A") || !name2.startsWith("."));
-        if (parsed.flags.has("a")) for (const name2 of [".", ".."]) {
-          const index = names.findIndex((entry) => entry > name2);
-          names.splice(index < 0 ? names.length : index, 0, name2);
-        }
-        if (parsed.flags.has("r")) names.reverse();
-        for (const name2 of names) await render(joinPath(path, name2), name2);
-        if (parsed.flags.has("R")) for (const name2 of names) {
-          if (name2 === "." || name2 === "..") continue;
-          const child = joinPath(path, name2);
-          const childStat = await context.fs[parsed.flags.has("L") ? "stat" : "lstat"](child, { signal: context.signal });
-          if (childStat.type === "directory") await list(child, `${display.replace(/\/$/u, "")}/${name2}`, true, next);
+        ancestors.add(physical);
+        try {
+          if (header) {
+            await output(context, `${headerWritten ? "\n" : ""}${display}:
+`);
+            headerWritten = true;
+          }
+          const entries = await readDirectory(context, path, true);
+          const names = entries.map((entry) => entry.name).filter((name2) => parsed.flags.has("a") || parsed.flags.has("A") || !name2.startsWith("."));
+          if (parsed.flags.has("a")) for (const name2 of [".", ".."]) {
+            const index = names.findIndex((entry) => entry > name2);
+            names.splice(index < 0 ? names.length : index, 0, name2);
+          }
+          if (parsed.flags.has("r")) names.reverse();
+          for (const name2 of names) await render(joinPath(path, name2), name2);
+          if (parsed.flags.has("R")) for (const name2 of names) {
+            if (name2 === "." || name2 === "..") continue;
+            const child = joinPath(path, name2);
+            const childStat = await context.fs[parsed.flags.has("L") ? "stat" : "lstat"](child, { signal: context.signal });
+            if (childStat.type === "directory") await list(child, `${display.replace(/\/$/u, "")}/${name2}`, true, ancestors);
+          }
+        } finally {
+          ancestors.delete(physical);
         }
       };
       return eachOperand(context, operands, (operand) => list(pathOf(context, operand), operand, operands.length > 1 || parsed.flags.has("R")));