@poe-platform/safe-bash 0.1.76 → 0.1.77

package/dist/safe-bash/browser.js

@@ -16293,6 +16293,7 @@ var RegexExecutionError = class extends Error {
   }
   code;
 };
+var matchRangeLimits = Object.freeze({ perRow: 1e5, perReply: 1e5 });
 var exprMatchCeilings = Object.freeze({
   maxPatternBytes: 65536,
   maxSubjectBytes: 1048576,
@@ -16393,13 +16394,28 @@ function validateReply(value2, id, rows, signal) {
     throw new RegexExecutionError("MATCH", reply.error);
   }
   if (!("results" in reply) || !Array.isArray(reply.results) || reply.results.length !== rows.length) throw new RegexExecutionError("PROTOCOL", "invalid reply rows");
-  return reply.results.map((ranges, index) => {
+  let total = 0;
+  const lengths = [];
+  for (let index = 0; index < reply.results.length; index++) {
     signal.throwIfAborted();
-    if (!(ranges instanceof Float64Array) || ranges.length % 2 || ranges.length > 2 * (rows[index].bytes.length + 1)) throw new RegexExecutionError("PROTOCOL", "invalid match ranges");
+    const ranges = reply.results[index];
+    const row = rows[index];
+    if (!(ranges instanceof Float64Array)) throw new RegexExecutionError("PROTOCOL", "invalid match ranges");
+    const length = ranges.length;
+    if (length % 2 || length > 2 * (row.bytes.length + 1)) throw new RegexExecutionError("PROTOCOL", "invalid match ranges");
+    if (!row.all && length > 2) throw new RegexExecutionError("PROTOCOL", "unexpected multiple matches");
+    const count2 = length / 2;
+    if (count2 > matchRangeLimits.perRow || count2 > matchRangeLimits.perReply - total) throw new RegexExecutionError("PROTOCOL", "match range limit exceeded");
+    total += count2;
+    lengths.push(length);
+  }
+  const results = reply.results.map((ranges, index) => {
+    signal.throwIfAborted();
+    const length = lengths[index];
+    if (ranges.length !== length) throw new RegexExecutionError("PROTOCOL", "match ranges changed after admission");
     const result = [];
     const row = rows[index];
-    if (!row.all && ranges.length > 2) throw new RegexExecutionError("PROTOCOL", "unexpected multiple matches");
-    for (let offset = 0; offset < ranges.length; offset += 2) {
+    for (let offset = 0; offset < length; offset += 2) {
       signal.throwIfAborted();
       const start = ranges[offset];
       const end = ranges[offset + 1];
@@ -16408,6 +16424,11 @@ function validateReply(value2, id, rows, signal) {
     }
     return result;
   });
+  for (let index = 0; index < reply.results.length; index++) {
+    signal.throwIfAborted();
+    if (reply.results[index].length !== lengths[index]) throw new RegexExecutionError("PROTOCOL", "match ranges changed after admission");
+  }
+  return results;
 }
 
 // packages/safe-bash/src/commands/regex-execution/portable.ts