peer-term 1.2.11 → 1.2.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "peer-term",
-  "version": "1.2.11",
+  "version": "1.2.12",
   "license": "MIT",
   "description": "Share your terminal instantly using a 6-digit code. Encrypted. No config.",
   "keywords": [

package/src/index.js

@@ -368,25 +368,54 @@ class Session {
 
   async _completeKeyExchange(clientPublicKeyBase64) {
     if (!this.keyPair || !this.hostPublicKeyBase64) return;
+    if (typeof clientPublicKeyBase64 !== 'string' || clientPublicKeyBase64.length === 0) {
+      this._rejectProtocolMessage('Invalid key-exchange public key');
+      return;
+    }
 
-    this.logDebug('Deriving shared secret...');
-    this.clientPublicKeyBase64 = clientPublicKeyBase64;
+    try {
+      this.logDebug('Deriving shared secret...');
+      this.clientPublicKeyBase64 = clientPublicKeyBase64;
+
+      const peerPublicKey = await importPublicKey(clientPublicKeyBase64);
+      this.sharedKey = await deriveSharedKey(this.keyPair.privateKey, peerPublicKey);
+
+      if (this.secureMode) {
+        this.securityFingerprint = await fingerprintPublicKeys(
+          this.code,
+          this.hostPublicKeyBase64,
+          this.clientPublicKeyBase64
+        );
+        this.fingerprintAuthorized = false;
+        this._printFingerprintAuthorization();
+      } else {
+        this.fingerprintAuthorized = true;
+        await this._activateSecureSession();
+      }
+    } catch (err) {
+      this._rejectProtocolMessage(`Invalid key exchange: ${err.message}`);
+    }
+  }
 
-    const peerPublicKey = await importPublicKey(clientPublicKeyBase64);
-    this.sharedKey = await deriveSharedKey(this.keyPair.privateKey, peerPublicKey);
+  _rejectProtocolMessage(reason) {
+    this.log(`Protocol error: ${reason}`);
+    this.isClientConnected = false;
+    this.awaitingRejoin = false;
+    this.sharedKey = null;
+    this.keyPair = null;
+    this.hostPublicKeyBase64 = null;
+    this.clientPublicKeyBase64 = null;
+    this.securityFingerprint = null;
+    this.fingerprintAuthorized = false;
+    this.stopHeartbeat();
+    this._cleanupWebRTC();
+    this.destroy();
+  }
 
-    if (this.secureMode) {
-      this.securityFingerprint = await fingerprintPublicKeys(
-        this.code,
-        this.hostPublicKeyBase64,
-        this.clientPublicKeyBase64
-      );
-      this.fingerprintAuthorized = false;
-      this._printFingerprintAuthorization();
-    } else {
-      this.fingerprintAuthorized = true;
-      await this._activateSecureSession();
-    }
+  _handleMessageError(err) {
+    const message = err instanceof Error ? err.message : String(err);
+    this.log(`Protocol handler error: ${message}`);
+    this.destroy();
   }
 
   _printFingerprintAuthorization() {
@@ -481,6 +510,7 @@ class Session {
       });
 
       this.ws.on('message', async (raw) => {
+        try {
         let msg;
         try {
           msg = JSON.parse(raw.toString());
@@ -488,6 +518,10 @@ class Session {
           this.log('Invalid message from relay');
           return;
         }
+        if (!msg || typeof msg.type !== 'string') {
+          this._rejectProtocolMessage('Malformed relay message');
+          return;
+        }
 
         switch (msg.type) {
           case 'code': {
@@ -614,6 +648,9 @@ class Session {
             break;
           }
         }
+        } catch (err) {
+          this._handleMessageError(err);
+        }
       });
 
       this.ws.on('close', () => {
@@ -910,12 +947,17 @@ class Session {
         });
 
         newWs.on('message', async (raw) => {
+          try {
           let msg;
           try {
             msg = JSON.parse(raw.toString());
           } catch {
             return;
           }
+          if (!msg || typeof msg.type !== 'string') {
+            this._rejectProtocolMessage('Malformed relay message');
+            return;
+          }
 
           if (msg.type === 'rejoined') {
             // Success — replace the old ws with this new one
@@ -935,6 +977,9 @@ class Session {
             this.destroy();
             try { newWs.close(); } catch {}
           }
+          } catch (err) {
+            this._handleMessageError(err);
+          }
         });
 
         newWs.on('error', () => {
@@ -970,6 +1015,7 @@ class Session {
    */
   _attachWsHandlers(newWs) {
     newWs.on('message', async (raw) => {
+      try {
       let msg;
       try {
         msg = JSON.parse(raw.toString());
@@ -977,6 +1023,10 @@ class Session {
         this.log('Invalid message from relay');
         return;
       }
+      if (!msg || typeof msg.type !== 'string') {
+        this._rejectProtocolMessage('Malformed relay message');
+        return;
+      }
 
       switch (msg.type) {
         case 'client-connected': {
@@ -1084,6 +1134,9 @@ class Session {
           break;
         }
       }
+      } catch (err) {
+        this._handleMessageError(err);
+      }
     });
 
     newWs.on('close', () => {
@@ -1414,7 +1467,6 @@ process.on('uncaughtException', (err) => {
 process.on('unhandledRejection', (reason) => {
   const err = reason instanceof Error ? reason : new Error(String(reason));
   logger.error(`Unhandled rejection: ${err.message}`, err);
-  process.exit(1);
 });
 
 // ─── Run ─────────────────────────────────────────────────────────────────────