mediabunny 1.9.1 → 1.9.3

package/dist/bundles/mediabunny.cjs

@@ -1766,6 +1766,7 @@ var Mediabunny = (() => {
     async addEncodedAudioPacket(track, packet, meta) {
       const release = await this.mutex.acquire();
       try {
+        this.validateAndNormalizeTimestamp(track, packet.timestamp, packet.type === "key");
         if (!this.audioSpecificConfig) {
           validateAudioChunkMetadata(meta);
           const description = meta?.decoderConfig?.description;
@@ -4635,7 +4636,11 @@ var Mediabunny = (() => {
         totalSize = this.readU64();
         headerSize = 16;
       }
-      return { name, totalSize, headerSize, contentSize: totalSize - headerSize };
+      const contentSize = totalSize - headerSize;
+      if (contentSize < 0) {
+        return null;
+      }
+      return { name, totalSize, headerSize, contentSize };
     }
   };
 
@@ -12451,6 +12456,9 @@ ${cue.notes ?? ""}`;
           );
           const startPos = this.metadataReader.pos;
           const boxInfo = this.metadataReader.readBoxHeader();
+          if (!boxInfo) {
+            break;
+          }
           if (boxInfo.name === "ftyp") {
             const majorBrand = this.metadataReader.readAscii(4);
             this.isQuickTime = majorBrand === "qt  ";
@@ -12473,11 +12481,15 @@ ${cue.notes ?? ""}`;
           this.metadataReader.pos = sourceSize - 4;
           const lastWord = this.metadataReader.readU32();
           const potentialMfraPos = sourceSize - lastWord;
-          if (potentialMfraPos >= 0 && potentialMfraPos < sourceSize) {
-            await this.metadataReader.reader.loadRange(potentialMfraPos, sourceSize);
+          if (potentialMfraPos >= 0 && potentialMfraPos <= sourceSize - MAX_BOX_HEADER_SIZE) {
+            await this.metadataReader.reader.loadRange(potentialMfraPos, potentialMfraPos + 2 ** 16);
             this.metadataReader.pos = potentialMfraPos;
             const boxInfo = this.metadataReader.readBoxHeader();
-            if (boxInfo.name === "mfra") {
+            if (boxInfo && boxInfo.name === "mfra") {
+              await this.metadataReader.reader.loadRange(
+                potentialMfraPos,
+                potentialMfraPos + boxInfo.totalSize
+              );
               this.readContiguousBoxes(boxInfo.contentSize);
             }
           }
@@ -12587,7 +12599,7 @@ ${cue.notes ?? ""}`;
         this.metadataReader.pos + MAX_BOX_HEADER_SIZE
       );
       const moofBoxInfo = this.metadataReader.readBoxHeader();
-      assert(moofBoxInfo.name === "moof");
+      assert(moofBoxInfo?.name === "moof");
       const contentStart = this.metadataReader.pos;
       await this.metadataReader.reader.loadRange(contentStart, contentStart + moofBoxInfo.contentSize);
       this.metadataReader.pos = startPos;
@@ -12616,7 +12628,7 @@ ${cue.notes ?? ""}`;
           this.metadataReader.pos = currentFragment.moofOffset + currentFragment.moofSize;
         }
         let nextFragmentIsFirstFragment = this.metadataReader.pos === 0;
-        while (this.metadataReader.pos < startPos) {
+        while (this.metadataReader.pos <= startPos - MIN_BOX_HEADER_SIZE) {
           if (currentFragment?.nextFragment) {
             currentFragment = currentFragment.nextFragment;
             this.metadataReader.pos = currentFragment.moofOffset + currentFragment.moofSize;
@@ -12627,6 +12639,9 @@ ${cue.notes ?? ""}`;
             );
             const startPos2 = this.metadataReader.pos;
             const boxInfo = this.metadataReader.readBoxHeader();
+            if (!boxInfo) {
+              break;
+            }
             if (boxInfo.name === "moof") {
               const index3 = binarySearchExact(this.fragments, startPos2, (x) => x.moofOffset);
               let fragment2;
@@ -12661,12 +12676,18 @@ ${cue.notes ?? ""}`;
     readContiguousBoxes(totalSize) {
       const startIndex = this.metadataReader.pos;
       while (this.metadataReader.pos - startIndex <= totalSize - MIN_BOX_HEADER_SIZE) {
-        this.traverseBox();
+        const foundBox = this.traverseBox();
+        if (!foundBox) {
+          break;
+        }
       }
     }
     traverseBox() {
       const startPos = this.metadataReader.pos;
       const boxInfo = this.metadataReader.readBoxHeader();
+      if (!boxInfo) {
+        return false;
+      }
       const boxEndPos = startPos + boxInfo.totalSize;
       switch (boxInfo.name) {
         case "mdia":
@@ -12894,6 +12915,9 @@ ${cue.notes ?? ""}`;
             for (let i = 0; i < entries; i++) {
               const startPos2 = this.metadataReader.pos;
               const sampleBoxInfo = this.metadataReader.readBoxHeader();
+              if (!sampleBoxInfo) {
+                break;
+              }
               const lowercaseBoxName = sampleBoxInfo.name.toLowerCase();
               if (track.info.type === "video") {
                 if (lowercaseBoxName === "avc1") {
@@ -13805,6 +13829,7 @@ ${cue.notes ?? ""}`;
           break;
       }
       this.metadataReader.pos = boxEndPos;
+      return true;
     }
   };
   var IsobmffTrackBacking = class {
@@ -14187,6 +14212,9 @@ ${cue.notes ?? ""}`;
           await metadataReader.reader.loadRange(metadataReader.pos, metadataReader.pos + MAX_BOX_HEADER_SIZE);
           const startPos = metadataReader.pos;
           const boxInfo = metadataReader.readBoxHeader();
+          if (!boxInfo) {
+            break;
+          }
           if (boxInfo.name === "moof") {
             const index = binarySearchExact(demuxer.fragments, startPos, (x) => x.moofOffset);
             let fragment;