qvdjs 0.10.0 → 0.10.1

package/dist/index.js

@@ -945,6 +945,24 @@ var init_memoryUtils = __esm({
 });
 
 // src/util/validationUtils.js
+function validateHeaderStructure(headerObj, filePath, stage) {
+  const tableHeader = headerObj?.["QvdTableHeader"];
+  if (tableHeader === null || typeof tableHeader !== "object" || Array.isArray(tableHeader)) {
+    throw new QvdCorruptedError("The XML header contains no usable QvdTableHeader element", {
+      rootElements: headerObj && typeof headerObj === "object" ? Object.keys(headerObj) : [],
+      file: filePath,
+      stage
+    });
+  }
+  const symbolTableLength = parseInt(tableHeader["Offset"], 10);
+  if (isNaN(symbolTableLength) || !Number.isSafeInteger(symbolTableLength) || symbolTableLength < 0) {
+    throw new QvdCorruptedError("Invalid symbol table offset", {
+      offset: tableHeader["Offset"],
+      file: filePath,
+      stage
+    });
+  }
+}
 function validateSymbolTableSizeEarly(symbolTableLength, filePath) {
   const heapLimit = getHeapLimit();
   const MAX_SYMBOL_TABLE_SIZE = heapLimit * 0.125;
@@ -1849,6 +1867,7 @@ var init_QvdFileReader = __esm({
             stage: "readData"
           });
         }
+        validateHeaderStructure(headerObj, this._path, "readData");
         const symbolTableOffset = headerEndIndex;
         const symbolTableLength = parseInt(headerObj["QvdTableHeader"]["Offset"], 10);
         const indexTableOffset = symbolTableOffset + symbolTableLength;
@@ -1972,14 +1991,26 @@ var init_QvdFileReader = __esm({
             stage: "parseHeader"
           });
         }
+        validateHeaderStructure(this._header, this._path, "parseHeader");
         const fields = this._header["QvdTableHeader"]?.["Fields"]?.["QvdFieldHeader"];
-        const fieldCount = fields === void 0 || fields === null ? 0 : Array.isArray(fields) ? fields.length : 1;
-        if (fieldCount === 0) {
+        const fieldList = fields === void 0 || fields === null ? [] : Array.isArray(fields) ? fields : [fields];
+        if (fieldList.length === 0) {
           throw new QvdCorruptedError("The QVD file header declares no fields", {
             file: this._path,
             stage: "parseHeader"
           });
         }
+        const malformedIndex = fieldList.findIndex(
+          (field) => field === null || typeof field !== "object" || Array.isArray(field)
+        );
+        if (malformedIndex !== -1) {
+          throw new QvdCorruptedError("The QVD file header declares a field with no properties", {
+            fieldIndex: malformedIndex,
+            fieldCount: fieldList.length,
+            file: this._path,
+            stage: "parseHeader"
+          });
+        }
         this._headerOffset = headerBeginIndex;
         this._symbolTableOffset = headerEndIndex;
         this._indexTableOffset = this._symbolTableOffset + parseInt(this._header["QvdTableHeader"]["Offset"], 10);