msgpackr 1.11.11 → 1.11.12

package/dist/node.cjs

@@ -3172,6 +3172,7 @@ class UnpackrStream extends stream.Transform {
 		options.objectMode = true;
 		super(options);
 		options.structures = [];
+		this.maxIncompleteBufferSize = options.maxIncompleteBufferSize !== undefined ? options.maxIncompleteBufferSize : 0x4000000;
 		this.unpackr = options.unpackr || new Unpackr(options);
 	}
 	_transform(chunk, encoding, callback) {
@@ -3184,19 +3185,23 @@ class UnpackrStream extends stream.Transform {
 			values = this.unpackr.unpackMultiple(chunk);
 		} catch(error) {
 			if (error.incomplete) {
-				this.incompleteBuffer = chunk.slice(error.lastPosition);
+				let incompleteBuffer = chunk.slice(error.lastPosition);
+				if (incompleteBuffer.length > this.maxIncompleteBufferSize) {
+					this.incompleteBuffer = null;
+					return callback(new Error('Maximum incomplete buffer size exceeded'))
+				}
+				this.incompleteBuffer = incompleteBuffer;
 				values = error.values;
-			}
-			else
-				throw error
-		} finally {
-			for (let value of values || []) {
-				if (value === null)
-					value = this.getNullValue();
-				this.push(value);
+			} else {
+				return callback(error)
 			}
 		}
-		if (callback) callback();
+		for (let value of values || []) {
+			if (value === null)
+				value = this.getNullValue();
+			this.push(value);
+		}
+		callback();
 	}
 	getNullValue() {
 		return Symbol.for(null)