agentroam-runtime-darwin-arm64 0.2.0-preview.59 → 0.2.0-preview.63

package/runtime/node_modules/mediabunny/dist/modules/src/isobmff/isobmff-misc.js

@@ -20,6 +20,9 @@ export const buildIsobmffMimeType = (info) => {
     return string;
 };
 export const parsePsshBoxContents = (contents) => {
+    if (contents.length < 24) {
+        throw new Error('Invalid pssh box: too small.');
+    }
     const view = toDataView(contents);
     let pos = 0;
     const version = view.getUint8(pos);
@@ -31,6 +34,9 @@ export const parsePsshBoxContents = (contents) => {
     if (version > 0) {
         const kidCount = view.getUint32(pos);
         pos += 4;
+        if (pos + 16 * kidCount + 4 > contents.length) {
+            throw new Error('Invalid pssh box: key ID count exceeds box size.');
+        }
         if (kidCount > 0) {
             keyIds = [];
             for (let i = 0; i < kidCount; i++) {

package/runtime/node_modules/mediabunny/dist/modules/src/isobmff/isobmff-reader.js

@@ -98,7 +98,7 @@ export const readDataBox = (slice) => {
     if (!header || header.name !== 'data') {
         return null;
     }
-    if (slice.remainingLength < 8) {
+    if (header.contentSize < 8 || slice.remainingLength < 8) {
         // Box is too small
         return null;
     }

package/runtime/node_modules/mediabunny/dist/modules/src/matroska/ebml.js

@@ -501,7 +501,8 @@ export const readVarInt = (slice) => {
     return value;
 };
 export const readUnsignedInt = (slice, width) => {
-    if (width < 1 || width > 8) {
+    // Zero width is valid and means zero
+    if (width > 8) {
         throw new Error('Bad unsigned int size ' + width);
     }
     let value = 0;
@@ -513,7 +514,7 @@ export const readUnsignedInt = (slice, width) => {
     return value;
 };
 export const readUnsignedBigInt = (slice, width) => {
-    if (width < 1) {
+    if (width < 1 || width > 8) {
         throw new Error('Bad unsigned int size ' + width);
     }
     let value = 0n;
@@ -582,11 +583,11 @@ export const readElementHeader = (slice) => {
 export const readAsciiString = (slice, length) => {
     const bytes = readBytes(slice, length);
     // Actual string length might be shorter due to null terminators
-    let strLength = 0;
-    while (strLength < length && bytes[strLength] !== 0) {
-        strLength += 1;
+    let str = '';
+    for (let i = 0; i < length && bytes[i] !== 0; i++) {
+        str += String.fromCharCode(bytes[i]);
     }
-    return String.fromCharCode(...bytes.subarray(0, strLength));
+    return str;
 };
 export const readUnicodeString = (slice, length) => {
     const bytes = readBytes(slice, length);
@@ -637,11 +638,12 @@ export const resync = async (reader, startPos, ids, until) => {
         let slice = reader.requestSliceRange(currentPos, 0, Math.min(CHUNK_SIZE, until - currentPos));
         if (isThenable(slice))
             slice = await slice;
-        if (!slice)
-            break;
-        if (slice.length < MAX_VAR_INT_SIZE)
+        if (!slice || slice.length === 0)
             break;
-        for (let i = 0; i < slice.length - MAX_VAR_INT_SIZE; i++) {
+        // The last few positions are left for the next chunk so their IDs can be read in full. Close to the end, there
+        // is no next chunk to speak of, so we must still make progress.
+        const positionsToCheck = Math.max(slice.length - MAX_VAR_INT_SIZE, 1);
+        for (let i = 0; i < positionsToCheck; i++) {
             slice.filePos = currentPos;
             const elementId = readElementId(slice);
             if (elementId !== null && idsSet.has(elementId)) {