seroval 1.5.2 → 1.5.4

package/dist/cjs/development/index.cjs

@@ -1968,10 +1968,16 @@ function applyObjectFlag(obj, flag) {
 var DEFAULT_DEPTH_LIMIT = 1e3;
 function createBaseDeserializerContext(mode, options) {
   var _a;
+  const refs = options.refs || /* @__PURE__ */ new Map();
+  if (!("types" in refs)) {
+    Object.assign(refs, {
+      types: /* @__PURE__ */ new Map()
+    });
+  }
   return {
     mode,
     plugins: options.plugins,
-    refs: options.refs || /* @__PURE__ */ new Map(),
+    refs,
     features: (_a = options.features) != null ? _a : ALL_ENABLED ^ (options.disabledFeatures || 0),
     depthLimit: options.depthLimit || DEFAULT_DEPTH_LIMIT
   };
@@ -2118,6 +2124,14 @@ function assignProperty(ctx, depth, object, key, value) {
     }
   }
 }
+function assignNodeType(ctx, id, type) {
+  ctx.base.refs.types.set(id, type);
+}
+function validateNodeType(ctx, node, id, type) {
+  if (ctx.base.refs.types.get(id) !== type) {
+    throw new SerovalMalformedNodeError(node);
+  }
+}
 function deserializeProperties(ctx, depth, node, result) {
   const keys = node.k;
   const len = keys.length;
@@ -2271,15 +2285,18 @@ function deserializePlugin(ctx, depth, node) {
   throw new SerovalMissingPluginError(node.c);
 }
 function deserializePromiseConstructor(ctx, node) {
-  return assignIndexedValue(
+  const value = assignIndexedValue(
     ctx,
     node.i,
     assignIndexedValue(ctx, node.s, PROMISE_CONSTRUCTOR()).p
   );
+  assignNodeType(ctx, node.s, 22 /* PromiseConstructor */);
+  return value;
 }
 function deserializePromiseResolve(ctx, depth, node) {
   const deferred = ctx.base.refs.get(node.i);
   if (deferred) {
+    validateNodeType(ctx, node, node.i, 22 /* PromiseConstructor */);
     deferred.s(deserialize(ctx, depth, node.a[1]));
     return NIL;
   }
@@ -2288,6 +2305,7 @@ function deserializePromiseResolve(ctx, depth, node) {
 function deserializePromiseReject(ctx, depth, node) {
   const deferred = ctx.base.refs.get(node.i);
   if (deferred) {
+    validateNodeType(ctx, node, node.i, 22 /* PromiseConstructor */);
     deferred.f(deserialize(ctx, depth, node.a[1]));
     return NIL;
   }
@@ -2305,6 +2323,7 @@ function deserializeAsyncIteratorFactoryInstance(ctx, depth, node) {
 }
 function deserializeStreamConstructor(ctx, depth, node) {
   const result = assignIndexedValue(ctx, node.i, createStream());
+  assignNodeType(ctx, node.i, 31 /* StreamConstructor */);
   const items = node.a;
   const len = items.length;
   if (len) {
@@ -2316,7 +2335,8 @@ function deserializeStreamConstructor(ctx, depth, node) {
 }
 function deserializeStreamNext(ctx, depth, node) {
   const deferred = ctx.base.refs.get(node.i);
-  if (deferred && isStream(deferred)) {
+  if (deferred) {
+    validateNodeType(ctx, node, node.i, 31 /* StreamConstructor */);
     deferred.next(deserialize(ctx, depth, node.f));
     return NIL;
   }
@@ -2324,7 +2344,8 @@ function deserializeStreamNext(ctx, depth, node) {
 }
 function deserializeStreamThrow(ctx, depth, node) {
   const deferred = ctx.base.refs.get(node.i);
-  if (deferred && isStream(deferred)) {
+  if (deferred) {
+    validateNodeType(ctx, node, node.i, 31 /* StreamConstructor */);
     deferred.throw(deserialize(ctx, depth, node.f));
     return NIL;
   }
@@ -2332,7 +2353,8 @@ function deserializeStreamThrow(ctx, depth, node) {
 }
 function deserializeStreamReturn(ctx, depth, node) {
   const deferred = ctx.base.refs.get(node.i);
-  if (deferred && isStream(deferred)) {
+  if (deferred) {
+    validateNodeType(ctx, node, node.i, 31 /* StreamConstructor */);
     deferred.return(deserialize(ctx, depth, node.f));
     return NIL;
   }