seroval 1.6.2 → 1.6.4

package/dist/dev/index.cjs

@@ -197,6 +197,101 @@ function deserializeString(str) {
 	return str.replace(/(\\\\|\\"|\\n|\\r|\\b|\\t|\\f|\\u2028|\\u2029|\\x3C)/g, deserializeReplacer);
 }
 //#endregion
+//#region src/core/errors.ts
+const { toString: objectToString } = Object.prototype;
+function getErrorMessageDev(type, cause) {
+	if (cause instanceof Error) return `Seroval caught an error during the ${type} process.
+
+${cause.name}
+${cause.message}
+
+- For more information, please check the "cause" property of this error.
+- If you believe this is an error in Seroval, please submit an issue at https://github.com/lxsmnsyc/seroval/issues/new`;
+	return `Seroval caught an error during the ${type} process.
+
+"${objectToString.call(cause)}"
+
+For more information, please check the "cause" property of this error.`;
+}
+const getErrorMessage = (type, cause) => getErrorMessageDev(type, cause);
+var SerovalError = class extends Error {
+	constructor(type, cause) {
+		super(getErrorMessage(type, cause));
+		this.cause = cause;
+	}
+};
+var SerovalParserError = class extends SerovalError {
+	constructor(cause) {
+		super("parsing", cause);
+	}
+};
+var SerovalSerializationError = class extends SerovalError {
+	constructor(cause) {
+		super("serialization", cause);
+	}
+};
+var SerovalDeserializationError = class extends SerovalError {
+	constructor(cause) {
+		super("deserialization", cause);
+	}
+};
+var SerovalUnsupportedTypeError = class extends Error {
+	constructor(value) {
+		super(`The value ${objectToString.call(value)} of type "${typeof value}" cannot be parsed/serialized.
+      
+There are few workarounds for this problem:
+- Transform the value in a way that it can be serialized.
+- If the reference is present on multiple runtimes (isomorphic), you can use the Reference API to map the references.`);
+		this.value = value;
+	}
+};
+var SerovalUnsupportedNodeError = class extends Error {
+	constructor(node) {
+		super("Unsupported node type \"" + node.t + "\".");
+	}
+};
+var SerovalMissingPluginError = class extends Error {
+	constructor(tag) {
+		super("Missing plugin for tag \"" + tag + "\".");
+	}
+};
+var SerovalMissingInstanceError = class extends Error {
+	constructor(tag) {
+		super("Missing \"" + tag + "\" instance.");
+	}
+};
+var SerovalMissingReferenceError = class extends Error {
+	constructor(value) {
+		super("Missing reference for the value \"" + objectToString.call(value) + "\" of type \"" + typeof value + "\"");
+		this.value = value;
+	}
+};
+var SerovalMissingReferenceForIdError = class extends Error {
+	constructor(id) {
+		super("Missing reference for id \"" + serializeString(id) + "\"");
+	}
+};
+var SerovalUnknownTypedArrayError = class extends Error {
+	constructor(name) {
+		super("Unknown TypedArray \"" + name + "\"");
+	}
+};
+var SerovalMalformedNodeError = class extends Error {
+	constructor(node) {
+		super("Malformed node type \"" + node.t + "\".");
+	}
+};
+var SerovalConflictedNodeIdError = class extends Error {
+	constructor(node) {
+		super("Conflicted node id \"" + node.i + "\".");
+	}
+};
+var SerovalDepthLimitError = class extends Error {
+	constructor(limit) {
+		super("Depth limit of " + limit + " reached");
+	}
+};
+//#endregion
 //#region src/core/keys.ts
 const REFERENCES_KEY = "__SEROVAL_REFS__";
 const GLOBAL_CONTEXT_R = `self.\$R`;
@@ -273,14 +368,16 @@ function getErrorOptions(error, features) {
 	const names = Object.getOwnPropertyNames(error);
 	for (let i = 0, len = names.length, name; i < len; i++) {
 		name = names[i];
-		if (name !== "name" && name !== "message") if (name === "stack") {
-			if (features & 4) {
+		if (name !== "name" && name !== "message") {
+			if (name === "stack") {
+				if (features & 4) {
+					options = options || {};
+					options[name] = error[name];
+				}
+			} else {
 				options = options || {};
 				options[name] = error[name];
 			}
-		} else {
-			options = options || {};
-			options[name] = error[name];
 		}
 	}
 	return options;
@@ -338,13 +435,17 @@ function createArrayNode(id, current, parsedItems) {
 function createBoxedNode(id, boxed) {
 	return createSerovalNode(21, id, void 0, void 0, void 0, void 0, void 0, void 0, boxed, void 0, void 0, void 0);
 }
+const MAX_TYPED_ARRAY_LENGTH = 1e6;
 function createTypedArrayNode(id, current, buffer) {
+	if (current.length > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(15, id, void 0, current.constructor.name, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.length);
 }
 function createBigIntTypedArrayNode(id, current, buffer) {
+	if (current.length > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(16, id, void 0, current.constructor.name, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.length);
 }
 function createDataViewNode(id, current, buffer) {
+	if (current.byteLength > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(20, id, void 0, void 0, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.byteLength);
 }
 function createErrorNode(id, current, options) {
@@ -378,101 +479,6 @@ function createSequenceNode(id, sequence, throwAt, doneAt) {
 	return createSerovalNode(35, id, throwAt, void 0, void 0, void 0, void 0, sequence, void 0, void 0, void 0, doneAt);
 }
 //#endregion
-//#region src/core/errors.ts
-const { toString: objectToString } = Object.prototype;
-function getErrorMessageDev(type, cause) {
-	if (cause instanceof Error) return `Seroval caught an error during the ${type} process.
-
-${cause.name}
-${cause.message}
-
-- For more information, please check the "cause" property of this error.
-- If you believe this is an error in Seroval, please submit an issue at https://github.com/lxsmnsyc/seroval/issues/new`;
-	return `Seroval caught an error during the ${type} process.
-
-"${objectToString.call(cause)}"
-
-For more information, please check the "cause" property of this error.`;
-}
-const getErrorMessage = (type, cause) => getErrorMessageDev(type, cause);
-var SerovalError = class extends Error {
-	constructor(type, cause) {
-		super(getErrorMessage(type, cause));
-		this.cause = cause;
-	}
-};
-var SerovalParserError = class extends SerovalError {
-	constructor(cause) {
-		super("parsing", cause);
-	}
-};
-var SerovalSerializationError = class extends SerovalError {
-	constructor(cause) {
-		super("serialization", cause);
-	}
-};
-var SerovalDeserializationError = class extends SerovalError {
-	constructor(cause) {
-		super("deserialization", cause);
-	}
-};
-var SerovalUnsupportedTypeError = class extends Error {
-	constructor(value) {
-		super(`The value ${objectToString.call(value)} of type "${typeof value}" cannot be parsed/serialized.
-      
-There are few workarounds for this problem:
-- Transform the value in a way that it can be serialized.
-- If the reference is present on multiple runtimes (isomorphic), you can use the Reference API to map the references.`);
-		this.value = value;
-	}
-};
-var SerovalUnsupportedNodeError = class extends Error {
-	constructor(node) {
-		super("Unsupported node type \"" + node.t + "\".");
-	}
-};
-var SerovalMissingPluginError = class extends Error {
-	constructor(tag) {
-		super("Missing plugin for tag \"" + tag + "\".");
-	}
-};
-var SerovalMissingInstanceError = class extends Error {
-	constructor(tag) {
-		super("Missing \"" + tag + "\" instance.");
-	}
-};
-var SerovalMissingReferenceError = class extends Error {
-	constructor(value) {
-		super("Missing reference for the value \"" + objectToString.call(value) + "\" of type \"" + typeof value + "\"");
-		this.value = value;
-	}
-};
-var SerovalMissingReferenceForIdError = class extends Error {
-	constructor(id) {
-		super("Missing reference for id \"" + serializeString(id) + "\"");
-	}
-};
-var SerovalUnknownTypedArrayError = class extends Error {
-	constructor(name) {
-		super("Unknown TypedArray \"" + name + "\"");
-	}
-};
-var SerovalMalformedNodeError = class extends Error {
-	constructor(node) {
-		super("Malformed node type \"" + node.t + "\".");
-	}
-};
-var SerovalConflictedNodeIdError = class extends Error {
-	constructor(node) {
-		super("Conflicted node id \"" + node.i + "\".");
-	}
-};
-var SerovalDepthLimitError = class extends Error {
-	constructor(limit) {
-		super("Depth limit of " + limit + " reached");
-	}
-};
-//#endregion
 //#region src/core/opaque-reference.ts
 /**
 * An opaque reference allows hiding values from the serializer.
@@ -1060,7 +1066,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 		case DataView: return parseDataView$1(ctx, depth, id, current);
 		case Map: return parseMap$1(ctx, depth, id, current);
 		case Set: return parseSet$1(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentClass === Promise || current instanceof Promise) return parsePromise$1(ctx, depth, id, current);
 	const currentFeatures = ctx.base.features;
@@ -1068,7 +1073,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 	if (currentFeatures & 16) switch (currentClass) {
 		case BigInt64Array:
 		case BigUint64Array: return parseBigIntTypedArray$1(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentFeatures & 1 && typeof AggregateError !== "undefined" && (currentClass === AggregateError || current instanceof AggregateError)) return parseAggregateError$1(ctx, depth, id, current);
 	if (currentFeatures & 64 && typeof Temporal !== "undefined") switch (currentClass) {
@@ -1080,7 +1084,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 		case Temporal.PlainTime: return createTemporalNode(id, 5, current);
 		case Temporal.PlainYearMonth: return createTemporalNode(id, 6, current);
 		case Temporal.ZonedDateTime: return createTemporalNode(id, 7, current);
-		default: break;
 	}
 	if (current instanceof Error) return parseError$1(ctx, depth, id, current);
 	if (SYM_ITERATOR in current || SYM_ASYNC_ITERATOR in current) return parsePlainObject$1(ctx, depth, id, current, !!currentClass);
@@ -1379,15 +1382,17 @@ function deserializeTypedArray(ctx, depth, node) {
 	var _node$b;
 	const construct = getTypedArrayConstructor(node.c);
 	const source = deserialize$1(ctx, depth, node.f);
+	if (!(source instanceof ArrayBuffer)) throw new SerovalMalformedNodeError(node);
 	const offset = (_node$b = node.b) !== null && _node$b !== void 0 ? _node$b : 0;
-	if (offset < 0 || offset > source.byteLength) throw new SerovalMalformedNodeError(node);
+	if (offset < 0 || offset > source.byteLength || node.l > MAX_BASE64_LENGTH) throw new SerovalMalformedNodeError(node);
 	return assignIndexedValue$1(ctx, node.i, new construct(source, offset, node.l));
 }
 function deserializeDataView(ctx, depth, node) {
 	var _node$b2;
 	const source = deserialize$1(ctx, depth, node.f);
+	if (!(source instanceof ArrayBuffer)) throw new SerovalMalformedNodeError(node);
 	const offset = (_node$b2 = node.b) !== null && _node$b2 !== void 0 ? _node$b2 : 0;
-	if (offset < 0 || offset > source.byteLength) throw new SerovalMalformedNodeError(node);
+	if (offset < 0 || offset > source.byteLength || node.l > MAX_BASE64_LENGTH) throw new SerovalMalformedNodeError(node);
 	return assignIndexedValue$1(ctx, node.i, new DataView(source, offset, node.l));
 }
 function deserializeDictionary(ctx, depth, node, result) {
@@ -1446,11 +1451,15 @@ function deserializePromiseFulfill(ctx, depth, node) {
 }
 function deserializeIteratorFactoryInstance(ctx, depth, node) {
 	deserialize$1(ctx, depth, node.a[0]);
-	return sequenceToIterator(deserialize$1(ctx, depth, node.a[1]));
+	const source = deserialize$1(ctx, depth, node.a[1]);
+	if (!source || typeof source !== "object" || !isSequence(source)) throw new SerovalMalformedNodeError(node.a[1]);
+	return sequenceToIterator(source);
 }
 function deserializeAsyncIteratorFactoryInstance(ctx, depth, node) {
 	deserialize$1(ctx, depth, node.a[0]);
-	return streamToAsyncIterable(deserialize$1(ctx, depth, node.a[1]));
+	const source = deserialize$1(ctx, depth, node.a[1]);
+	if (!source || typeof source !== "object" || !isStream(source)) throw new SerovalMalformedNodeError(node.a[1]);
+	return streamToAsyncIterable(source);
 }
 function deserializeStreamConstructor(ctx, depth, node) {
 	const result = assignIndexedValue$1(ctx, node.i, createStream());
@@ -1922,9 +1931,10 @@ function serializeStringKeyAssignment(ctx, source, mainAssignments, key, value)
 	const serialized = serialize$1(ctx, value);
 	const check = Number(key);
 	const isIdentifier = check >= 0 && check.toString() === key || isValidIdentifier(key);
-	if (isIndexedValueInStack(base, value)) if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
-	else createArrayAssign(ctx, source.i, isIdentifier ? key : "\"" + key + "\"", serialized);
-	else {
+	if (isIndexedValueInStack(base, value)) {
+		if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
+		else createArrayAssign(ctx, source.i, isIdentifier ? key : "\"" + key + "\"", serialized);
+	} else {
 		const parentAssignment = base.assignments;
 		base.assignments = mainAssignments;
 		if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
@@ -2551,7 +2561,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 		case DataView: return parseDataView(ctx, depth, id, current);
 		case Map: return parseMap(ctx, depth, id, current);
 		case Set: return parseSet(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentClass === Promise || current instanceof Promise) return parsePromise(ctx, depth, id, current);
 	const currentFeatures = ctx.base.features;
@@ -2559,7 +2568,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 	if (currentFeatures & 16) switch (currentClass) {
 		case BigInt64Array:
 		case BigUint64Array: return parseBigIntTypedArray(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentFeatures & 1 && typeof AggregateError !== "undefined" && (currentClass === AggregateError || current instanceof AggregateError)) return parseAggregateError(ctx, depth, id, current);
 	if (currentFeatures & 64 && typeof Temporal !== "undefined") switch (currentClass) {
@@ -2571,7 +2579,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 		case Temporal.PlainTime: return createTemporalNode(id, 5, current);
 		case Temporal.PlainYearMonth: return createTemporalNode(id, 6, current);
 		case Temporal.ZonedDateTime: return createTemporalNode(id, 7, current);
-		default: break;
 	}
 	if (current instanceof Error) return parseError(ctx, depth, id, current);
 	if (SYM_ITERATOR in current || SYM_ASYNC_ITERATOR in current) return parsePlainObject(ctx, depth, id, current, !!currentClass);

package/dist/dev/index.js

@@ -196,6 +196,101 @@ function deserializeString(str) {
 	return str.replace(/(\\\\|\\"|\\n|\\r|\\b|\\t|\\f|\\u2028|\\u2029|\\x3C)/g, deserializeReplacer);
 }
 //#endregion
+//#region src/core/errors.ts
+const { toString: objectToString } = Object.prototype;
+function getErrorMessageDev(type, cause) {
+	if (cause instanceof Error) return `Seroval caught an error during the ${type} process.
+
+${cause.name}
+${cause.message}
+
+- For more information, please check the "cause" property of this error.
+- If you believe this is an error in Seroval, please submit an issue at https://github.com/lxsmnsyc/seroval/issues/new`;
+	return `Seroval caught an error during the ${type} process.
+
+"${objectToString.call(cause)}"
+
+For more information, please check the "cause" property of this error.`;
+}
+const getErrorMessage = (type, cause) => getErrorMessageDev(type, cause);
+var SerovalError = class extends Error {
+	constructor(type, cause) {
+		super(getErrorMessage(type, cause));
+		this.cause = cause;
+	}
+};
+var SerovalParserError = class extends SerovalError {
+	constructor(cause) {
+		super("parsing", cause);
+	}
+};
+var SerovalSerializationError = class extends SerovalError {
+	constructor(cause) {
+		super("serialization", cause);
+	}
+};
+var SerovalDeserializationError = class extends SerovalError {
+	constructor(cause) {
+		super("deserialization", cause);
+	}
+};
+var SerovalUnsupportedTypeError = class extends Error {
+	constructor(value) {
+		super(`The value ${objectToString.call(value)} of type "${typeof value}" cannot be parsed/serialized.
+      
+There are few workarounds for this problem:
+- Transform the value in a way that it can be serialized.
+- If the reference is present on multiple runtimes (isomorphic), you can use the Reference API to map the references.`);
+		this.value = value;
+	}
+};
+var SerovalUnsupportedNodeError = class extends Error {
+	constructor(node) {
+		super("Unsupported node type \"" + node.t + "\".");
+	}
+};
+var SerovalMissingPluginError = class extends Error {
+	constructor(tag) {
+		super("Missing plugin for tag \"" + tag + "\".");
+	}
+};
+var SerovalMissingInstanceError = class extends Error {
+	constructor(tag) {
+		super("Missing \"" + tag + "\" instance.");
+	}
+};
+var SerovalMissingReferenceError = class extends Error {
+	constructor(value) {
+		super("Missing reference for the value \"" + objectToString.call(value) + "\" of type \"" + typeof value + "\"");
+		this.value = value;
+	}
+};
+var SerovalMissingReferenceForIdError = class extends Error {
+	constructor(id) {
+		super("Missing reference for id \"" + serializeString(id) + "\"");
+	}
+};
+var SerovalUnknownTypedArrayError = class extends Error {
+	constructor(name) {
+		super("Unknown TypedArray \"" + name + "\"");
+	}
+};
+var SerovalMalformedNodeError = class extends Error {
+	constructor(node) {
+		super("Malformed node type \"" + node.t + "\".");
+	}
+};
+var SerovalConflictedNodeIdError = class extends Error {
+	constructor(node) {
+		super("Conflicted node id \"" + node.i + "\".");
+	}
+};
+var SerovalDepthLimitError = class extends Error {
+	constructor(limit) {
+		super("Depth limit of " + limit + " reached");
+	}
+};
+//#endregion
 //#region src/core/keys.ts
 const REFERENCES_KEY = "__SEROVAL_REFS__";
 const GLOBAL_CONTEXT_R = `self.\$R`;
@@ -272,14 +367,16 @@ function getErrorOptions(error, features) {
 	const names = Object.getOwnPropertyNames(error);
 	for (let i = 0, len = names.length, name; i < len; i++) {
 		name = names[i];
-		if (name !== "name" && name !== "message") if (name === "stack") {
-			if (features & 4) {
+		if (name !== "name" && name !== "message") {
+			if (name === "stack") {
+				if (features & 4) {
+					options = options || {};
+					options[name] = error[name];
+				}
+			} else {
 				options = options || {};
 				options[name] = error[name];
 			}
-		} else {
-			options = options || {};
-			options[name] = error[name];
 		}
 	}
 	return options;
@@ -337,13 +434,17 @@ function createArrayNode(id, current, parsedItems) {
 function createBoxedNode(id, boxed) {
 	return createSerovalNode(21, id, void 0, void 0, void 0, void 0, void 0, void 0, boxed, void 0, void 0, void 0);
 }
+const MAX_TYPED_ARRAY_LENGTH = 1e6;
 function createTypedArrayNode(id, current, buffer) {
+	if (current.length > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(15, id, void 0, current.constructor.name, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.length);
 }
 function createBigIntTypedArrayNode(id, current, buffer) {
+	if (current.length > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(16, id, void 0, current.constructor.name, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.length);
 }
 function createDataViewNode(id, current, buffer) {
+	if (current.byteLength > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(20, id, void 0, void 0, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.byteLength);
 }
 function createErrorNode(id, current, options) {
@@ -377,101 +478,6 @@ function createSequenceNode(id, sequence, throwAt, doneAt) {
 	return createSerovalNode(35, id, throwAt, void 0, void 0, void 0, void 0, sequence, void 0, void 0, void 0, doneAt);
 }
 //#endregion
-//#region src/core/errors.ts
-const { toString: objectToString } = Object.prototype;
-function getErrorMessageDev(type, cause) {
-	if (cause instanceof Error) return `Seroval caught an error during the ${type} process.
-
-${cause.name}
-${cause.message}
-
-- For more information, please check the "cause" property of this error.
-- If you believe this is an error in Seroval, please submit an issue at https://github.com/lxsmnsyc/seroval/issues/new`;
-	return `Seroval caught an error during the ${type} process.
-
-"${objectToString.call(cause)}"
-
-For more information, please check the "cause" property of this error.`;
-}
-const getErrorMessage = (type, cause) => getErrorMessageDev(type, cause);
-var SerovalError = class extends Error {
-	constructor(type, cause) {
-		super(getErrorMessage(type, cause));
-		this.cause = cause;
-	}
-};
-var SerovalParserError = class extends SerovalError {
-	constructor(cause) {
-		super("parsing", cause);
-	}
-};
-var SerovalSerializationError = class extends SerovalError {
-	constructor(cause) {
-		super("serialization", cause);
-	}
-};
-var SerovalDeserializationError = class extends SerovalError {
-	constructor(cause) {
-		super("deserialization", cause);
-	}
-};
-var SerovalUnsupportedTypeError = class extends Error {
-	constructor(value) {
-		super(`The value ${objectToString.call(value)} of type "${typeof value}" cannot be parsed/serialized.
-      
-There are few workarounds for this problem:
-- Transform the value in a way that it can be serialized.
-- If the reference is present on multiple runtimes (isomorphic), you can use the Reference API to map the references.`);
-		this.value = value;
-	}
-};
-var SerovalUnsupportedNodeError = class extends Error {
-	constructor(node) {
-		super("Unsupported node type \"" + node.t + "\".");
-	}
-};
-var SerovalMissingPluginError = class extends Error {
-	constructor(tag) {
-		super("Missing plugin for tag \"" + tag + "\".");
-	}
-};
-var SerovalMissingInstanceError = class extends Error {
-	constructor(tag) {
-		super("Missing \"" + tag + "\" instance.");
-	}
-};
-var SerovalMissingReferenceError = class extends Error {
-	constructor(value) {
-		super("Missing reference for the value \"" + objectToString.call(value) + "\" of type \"" + typeof value + "\"");
-		this.value = value;
-	}
-};
-var SerovalMissingReferenceForIdError = class extends Error {
-	constructor(id) {
-		super("Missing reference for id \"" + serializeString(id) + "\"");
-	}
-};
-var SerovalUnknownTypedArrayError = class extends Error {
-	constructor(name) {
-		super("Unknown TypedArray \"" + name + "\"");
-	}
-};
-var SerovalMalformedNodeError = class extends Error {
-	constructor(node) {
-		super("Malformed node type \"" + node.t + "\".");
-	}
-};
-var SerovalConflictedNodeIdError = class extends Error {
-	constructor(node) {
-		super("Conflicted node id \"" + node.i + "\".");
-	}
-};
-var SerovalDepthLimitError = class extends Error {
-	constructor(limit) {
-		super("Depth limit of " + limit + " reached");
-	}
-};
-//#endregion
 //#region src/core/opaque-reference.ts
 /**
 * An opaque reference allows hiding values from the serializer.
@@ -1059,7 +1065,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 		case DataView: return parseDataView$1(ctx, depth, id, current);
 		case Map: return parseMap$1(ctx, depth, id, current);
 		case Set: return parseSet$1(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentClass === Promise || current instanceof Promise) return parsePromise$1(ctx, depth, id, current);
 	const currentFeatures = ctx.base.features;
@@ -1067,7 +1072,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 	if (currentFeatures & 16) switch (currentClass) {
 		case BigInt64Array:
 		case BigUint64Array: return parseBigIntTypedArray$1(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentFeatures & 1 && typeof AggregateError !== "undefined" && (currentClass === AggregateError || current instanceof AggregateError)) return parseAggregateError$1(ctx, depth, id, current);
 	if (currentFeatures & 64 && typeof Temporal !== "undefined") switch (currentClass) {
@@ -1079,7 +1083,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 		case Temporal.PlainTime: return createTemporalNode(id, 5, current);
 		case Temporal.PlainYearMonth: return createTemporalNode(id, 6, current);
 		case Temporal.ZonedDateTime: return createTemporalNode(id, 7, current);
-		default: break;
 	}
 	if (current instanceof Error) return parseError$1(ctx, depth, id, current);
 	if (SYM_ITERATOR in current || SYM_ASYNC_ITERATOR in current) return parsePlainObject$1(ctx, depth, id, current, !!currentClass);
@@ -1378,15 +1381,17 @@ function deserializeTypedArray(ctx, depth, node) {
 	var _node$b;
 	const construct = getTypedArrayConstructor(node.c);
 	const source = deserialize$1(ctx, depth, node.f);
+	if (!(source instanceof ArrayBuffer)) throw new SerovalMalformedNodeError(node);
 	const offset = (_node$b = node.b) !== null && _node$b !== void 0 ? _node$b : 0;
-	if (offset < 0 || offset > source.byteLength) throw new SerovalMalformedNodeError(node);
+	if (offset < 0 || offset > source.byteLength || node.l > MAX_BASE64_LENGTH) throw new SerovalMalformedNodeError(node);
 	return assignIndexedValue$1(ctx, node.i, new construct(source, offset, node.l));
 }
 function deserializeDataView(ctx, depth, node) {
 	var _node$b2;
 	const source = deserialize$1(ctx, depth, node.f);
+	if (!(source instanceof ArrayBuffer)) throw new SerovalMalformedNodeError(node);
 	const offset = (_node$b2 = node.b) !== null && _node$b2 !== void 0 ? _node$b2 : 0;
-	if (offset < 0 || offset > source.byteLength) throw new SerovalMalformedNodeError(node);
+	if (offset < 0 || offset > source.byteLength || node.l > MAX_BASE64_LENGTH) throw new SerovalMalformedNodeError(node);
 	return assignIndexedValue$1(ctx, node.i, new DataView(source, offset, node.l));
 }
 function deserializeDictionary(ctx, depth, node, result) {
@@ -1445,11 +1450,15 @@ function deserializePromiseFulfill(ctx, depth, node) {
 }
 function deserializeIteratorFactoryInstance(ctx, depth, node) {
 	deserialize$1(ctx, depth, node.a[0]);
-	return sequenceToIterator(deserialize$1(ctx, depth, node.a[1]));
+	const source = deserialize$1(ctx, depth, node.a[1]);
+	if (!source || typeof source !== "object" || !isSequence(source)) throw new SerovalMalformedNodeError(node.a[1]);
+	return sequenceToIterator(source);
 }
 function deserializeAsyncIteratorFactoryInstance(ctx, depth, node) {
 	deserialize$1(ctx, depth, node.a[0]);
-	return streamToAsyncIterable(deserialize$1(ctx, depth, node.a[1]));
+	const source = deserialize$1(ctx, depth, node.a[1]);
+	if (!source || typeof source !== "object" || !isStream(source)) throw new SerovalMalformedNodeError(node.a[1]);
+	return streamToAsyncIterable(source);
 }
 function deserializeStreamConstructor(ctx, depth, node) {
 	const result = assignIndexedValue$1(ctx, node.i, createStream());
@@ -1921,9 +1930,10 @@ function serializeStringKeyAssignment(ctx, source, mainAssignments, key, value)
 	const serialized = serialize$1(ctx, value);
 	const check = Number(key);
 	const isIdentifier = check >= 0 && check.toString() === key || isValidIdentifier(key);
-	if (isIndexedValueInStack(base, value)) if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
-	else createArrayAssign(ctx, source.i, isIdentifier ? key : "\"" + key + "\"", serialized);
-	else {
+	if (isIndexedValueInStack(base, value)) {
+		if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
+		else createArrayAssign(ctx, source.i, isIdentifier ? key : "\"" + key + "\"", serialized);
+	} else {
 		const parentAssignment = base.assignments;
 		base.assignments = mainAssignments;
 		if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
@@ -2550,7 +2560,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 		case DataView: return parseDataView(ctx, depth, id, current);
 		case Map: return parseMap(ctx, depth, id, current);
 		case Set: return parseSet(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentClass === Promise || current instanceof Promise) return parsePromise(ctx, depth, id, current);
 	const currentFeatures = ctx.base.features;
@@ -2558,7 +2567,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 	if (currentFeatures & 16) switch (currentClass) {
 		case BigInt64Array:
 		case BigUint64Array: return parseBigIntTypedArray(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentFeatures & 1 && typeof AggregateError !== "undefined" && (currentClass === AggregateError || current instanceof AggregateError)) return parseAggregateError(ctx, depth, id, current);
 	if (currentFeatures & 64 && typeof Temporal !== "undefined") switch (currentClass) {
@@ -2570,7 +2578,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 		case Temporal.PlainTime: return createTemporalNode(id, 5, current);
 		case Temporal.PlainYearMonth: return createTemporalNode(id, 6, current);
 		case Temporal.ZonedDateTime: return createTemporalNode(id, 7, current);
-		default: break;
 	}
 	if (current instanceof Error) return parseError(ctx, depth, id, current);
 	if (SYM_ITERATOR in current || SYM_ASYNC_ITERATOR in current) return parsePlainObject(ctx, depth, id, current, !!currentClass);

package/dist/index.cjs

@@ -197,6 +197,94 @@ function deserializeString(str) {
 	return str.replace(/(\\\\|\\"|\\n|\\r|\\b|\\t|\\f|\\u2028|\\u2029|\\x3C)/g, deserializeReplacer);
 }
 //#endregion
+//#region src/core/errors.ts
+const { toString: objectToString } = Object.prototype;
+const STEP_ERROR_CODES = {
+	parsing: 1,
+	serialization: 2,
+	deserialization: 3
+};
+function getErrorMessageProd(type) {
+	return `Seroval Error (step: ${STEP_ERROR_CODES[type]})`;
+}
+const getErrorMessage = (type, cause) => getErrorMessageProd(type);
+var SerovalError = class extends Error {
+	constructor(type, cause) {
+		super(getErrorMessage(type, cause));
+		this.cause = cause;
+	}
+};
+var SerovalParserError = class extends SerovalError {
+	constructor(cause) {
+		super("parsing", cause);
+	}
+};
+var SerovalSerializationError = class extends SerovalError {
+	constructor(cause) {
+		super("serialization", cause);
+	}
+};
+var SerovalDeserializationError = class extends SerovalError {
+	constructor(cause) {
+		super("deserialization", cause);
+	}
+};
+function getSpecificErrorMessage(code) {
+	return `Seroval Error (specific: ${code})`;
+}
+var SerovalUnsupportedTypeError = class extends Error {
+	constructor(value) {
+		super(getSpecificErrorMessage(1));
+		this.value = value;
+	}
+};
+var SerovalUnsupportedNodeError = class extends Error {
+	constructor(node) {
+		super(getSpecificErrorMessage(2));
+	}
+};
+var SerovalMissingPluginError = class extends Error {
+	constructor(tag) {
+		super(getSpecificErrorMessage(3));
+	}
+};
+var SerovalMissingInstanceError = class extends Error {
+	constructor(tag) {
+		super(getSpecificErrorMessage(4));
+	}
+};
+var SerovalMissingReferenceError = class extends Error {
+	constructor(value) {
+		super(getSpecificErrorMessage(5));
+		this.value = value;
+	}
+};
+var SerovalMissingReferenceForIdError = class extends Error {
+	constructor(id) {
+		super(getSpecificErrorMessage(6));
+	}
+};
+var SerovalUnknownTypedArrayError = class extends Error {
+	constructor(name) {
+		super(getSpecificErrorMessage(7));
+	}
+};
+var SerovalMalformedNodeError = class extends Error {
+	constructor(node) {
+		super(getSpecificErrorMessage(8));
+	}
+};
+var SerovalConflictedNodeIdError = class extends Error {
+	constructor(node) {
+		super(getSpecificErrorMessage(9));
+	}
+};
+var SerovalDepthLimitError = class extends Error {
+	constructor(limit) {
+		super(getSpecificErrorMessage(9));
+	}
+};
+//#endregion
 //#region src/core/keys.ts
 const REFERENCES_KEY = "__SEROVAL_REFS__";
 const GLOBAL_CONTEXT_R = `self.\$R`;
@@ -273,14 +361,16 @@ function getErrorOptions(error, features) {
 	const names = Object.getOwnPropertyNames(error);
 	for (let i = 0, len = names.length, name; i < len; i++) {
 		name = names[i];
-		if (name !== "name" && name !== "message") if (name === "stack") {
-			if (features & 4) {
+		if (name !== "name" && name !== "message") {
+			if (name === "stack") {
+				if (features & 4) {
+					options = options || {};
+					options[name] = error[name];
+				}
+			} else {
 				options = options || {};
 				options[name] = error[name];
 			}
-		} else {
-			options = options || {};
-			options[name] = error[name];
 		}
 	}
 	return options;
@@ -338,13 +428,17 @@ function createArrayNode(id, current, parsedItems) {
 function createBoxedNode(id, boxed) {
 	return createSerovalNode(21, id, void 0, void 0, void 0, void 0, void 0, void 0, boxed, void 0, void 0, void 0);
 }
+const MAX_TYPED_ARRAY_LENGTH = 1e6;
 function createTypedArrayNode(id, current, buffer) {
+	if (current.length > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(15, id, void 0, current.constructor.name, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.length);
 }
 function createBigIntTypedArrayNode(id, current, buffer) {
+	if (current.length > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(16, id, void 0, current.constructor.name, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.length);
 }
 function createDataViewNode(id, current, buffer) {
+	if (current.byteLength > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(20, id, void 0, void 0, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.byteLength);
 }
 function createErrorNode(id, current, options) {
@@ -378,94 +472,6 @@ function createSequenceNode(id, sequence, throwAt, doneAt) {
 	return createSerovalNode(35, id, throwAt, void 0, void 0, void 0, void 0, sequence, void 0, void 0, void 0, doneAt);
 }
 //#endregion
-//#region src/core/errors.ts
-const { toString: objectToString } = Object.prototype;
-const STEP_ERROR_CODES = {
-	parsing: 1,
-	serialization: 2,
-	deserialization: 3
-};
-function getErrorMessageProd(type) {
-	return `Seroval Error (step: ${STEP_ERROR_CODES[type]})`;
-}
-const getErrorMessage = (type, cause) => getErrorMessageProd(type);
-var SerovalError = class extends Error {
-	constructor(type, cause) {
-		super(getErrorMessage(type, cause));
-		this.cause = cause;
-	}
-};
-var SerovalParserError = class extends SerovalError {
-	constructor(cause) {
-		super("parsing", cause);
-	}
-};
-var SerovalSerializationError = class extends SerovalError {
-	constructor(cause) {
-		super("serialization", cause);
-	}
-};
-var SerovalDeserializationError = class extends SerovalError {
-	constructor(cause) {
-		super("deserialization", cause);
-	}
-};
-function getSpecificErrorMessage(code) {
-	return `Seroval Error (specific: ${code})`;
-}
-var SerovalUnsupportedTypeError = class extends Error {
-	constructor(value) {
-		super(getSpecificErrorMessage(1));
-		this.value = value;
-	}
-};
-var SerovalUnsupportedNodeError = class extends Error {
-	constructor(node) {
-		super(getSpecificErrorMessage(2));
-	}
-};
-var SerovalMissingPluginError = class extends Error {
-	constructor(tag) {
-		super(getSpecificErrorMessage(3));
-	}
-};
-var SerovalMissingInstanceError = class extends Error {
-	constructor(tag) {
-		super(getSpecificErrorMessage(4));
-	}
-};
-var SerovalMissingReferenceError = class extends Error {
-	constructor(value) {
-		super(getSpecificErrorMessage(5));
-		this.value = value;
-	}
-};
-var SerovalMissingReferenceForIdError = class extends Error {
-	constructor(id) {
-		super(getSpecificErrorMessage(6));
-	}
-};
-var SerovalUnknownTypedArrayError = class extends Error {
-	constructor(name) {
-		super(getSpecificErrorMessage(7));
-	}
-};
-var SerovalMalformedNodeError = class extends Error {
-	constructor(node) {
-		super(getSpecificErrorMessage(8));
-	}
-};
-var SerovalConflictedNodeIdError = class extends Error {
-	constructor(node) {
-		super(getSpecificErrorMessage(9));
-	}
-};
-var SerovalDepthLimitError = class extends Error {
-	constructor(limit) {
-		super(getSpecificErrorMessage(9));
-	}
-};
-//#endregion
 //#region src/core/opaque-reference.ts
 /**
 * An opaque reference allows hiding values from the serializer.
@@ -1053,7 +1059,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 		case DataView: return parseDataView$1(ctx, depth, id, current);
 		case Map: return parseMap$1(ctx, depth, id, current);
 		case Set: return parseSet$1(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentClass === Promise || current instanceof Promise) return parsePromise$1(ctx, depth, id, current);
 	const currentFeatures = ctx.base.features;
@@ -1061,7 +1066,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 	if (currentFeatures & 16) switch (currentClass) {
 		case BigInt64Array:
 		case BigUint64Array: return parseBigIntTypedArray$1(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentFeatures & 1 && typeof AggregateError !== "undefined" && (currentClass === AggregateError || current instanceof AggregateError)) return parseAggregateError$1(ctx, depth, id, current);
 	if (currentFeatures & 64 && typeof Temporal !== "undefined") switch (currentClass) {
@@ -1073,7 +1077,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 		case Temporal.PlainTime: return createTemporalNode(id, 5, current);
 		case Temporal.PlainYearMonth: return createTemporalNode(id, 6, current);
 		case Temporal.ZonedDateTime: return createTemporalNode(id, 7, current);
-		default: break;
 	}
 	if (current instanceof Error) return parseError$1(ctx, depth, id, current);
 	if (SYM_ITERATOR in current || SYM_ASYNC_ITERATOR in current) return parsePlainObject$1(ctx, depth, id, current, !!currentClass);
@@ -1372,15 +1375,17 @@ function deserializeTypedArray(ctx, depth, node) {
 	var _node$b;
 	const construct = getTypedArrayConstructor(node.c);
 	const source = deserialize$1(ctx, depth, node.f);
+	if (!(source instanceof ArrayBuffer)) throw new SerovalMalformedNodeError(node);
 	const offset = (_node$b = node.b) !== null && _node$b !== void 0 ? _node$b : 0;
-	if (offset < 0 || offset > source.byteLength) throw new SerovalMalformedNodeError(node);
+	if (offset < 0 || offset > source.byteLength || node.l > MAX_BASE64_LENGTH) throw new SerovalMalformedNodeError(node);
 	return assignIndexedValue$1(ctx, node.i, new construct(source, offset, node.l));
 }
 function deserializeDataView(ctx, depth, node) {
 	var _node$b2;
 	const source = deserialize$1(ctx, depth, node.f);
+	if (!(source instanceof ArrayBuffer)) throw new SerovalMalformedNodeError(node);
 	const offset = (_node$b2 = node.b) !== null && _node$b2 !== void 0 ? _node$b2 : 0;
-	if (offset < 0 || offset > source.byteLength) throw new SerovalMalformedNodeError(node);
+	if (offset < 0 || offset > source.byteLength || node.l > MAX_BASE64_LENGTH) throw new SerovalMalformedNodeError(node);
 	return assignIndexedValue$1(ctx, node.i, new DataView(source, offset, node.l));
 }
 function deserializeDictionary(ctx, depth, node, result) {
@@ -1439,11 +1444,15 @@ function deserializePromiseFulfill(ctx, depth, node) {
 }
 function deserializeIteratorFactoryInstance(ctx, depth, node) {
 	deserialize$1(ctx, depth, node.a[0]);
-	return sequenceToIterator(deserialize$1(ctx, depth, node.a[1]));
+	const source = deserialize$1(ctx, depth, node.a[1]);
+	if (!source || typeof source !== "object" || !isSequence(source)) throw new SerovalMalformedNodeError(node.a[1]);
+	return sequenceToIterator(source);
 }
 function deserializeAsyncIteratorFactoryInstance(ctx, depth, node) {
 	deserialize$1(ctx, depth, node.a[0]);
-	return streamToAsyncIterable(deserialize$1(ctx, depth, node.a[1]));
+	const source = deserialize$1(ctx, depth, node.a[1]);
+	if (!source || typeof source !== "object" || !isStream(source)) throw new SerovalMalformedNodeError(node.a[1]);
+	return streamToAsyncIterable(source);
 }
 function deserializeStreamConstructor(ctx, depth, node) {
 	const result = assignIndexedValue$1(ctx, node.i, createStream());
@@ -1915,9 +1924,10 @@ function serializeStringKeyAssignment(ctx, source, mainAssignments, key, value)
 	const serialized = serialize$1(ctx, value);
 	const check = Number(key);
 	const isIdentifier = check >= 0 && check.toString() === key || isValidIdentifier(key);
-	if (isIndexedValueInStack(base, value)) if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
-	else createArrayAssign(ctx, source.i, isIdentifier ? key : "\"" + key + "\"", serialized);
-	else {
+	if (isIndexedValueInStack(base, value)) {
+		if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
+		else createArrayAssign(ctx, source.i, isIdentifier ? key : "\"" + key + "\"", serialized);
+	} else {
 		const parentAssignment = base.assignments;
 		base.assignments = mainAssignments;
 		if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
@@ -2544,7 +2554,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 		case DataView: return parseDataView(ctx, depth, id, current);
 		case Map: return parseMap(ctx, depth, id, current);
 		case Set: return parseSet(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentClass === Promise || current instanceof Promise) return parsePromise(ctx, depth, id, current);
 	const currentFeatures = ctx.base.features;
@@ -2552,7 +2561,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 	if (currentFeatures & 16) switch (currentClass) {
 		case BigInt64Array:
 		case BigUint64Array: return parseBigIntTypedArray(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentFeatures & 1 && typeof AggregateError !== "undefined" && (currentClass === AggregateError || current instanceof AggregateError)) return parseAggregateError(ctx, depth, id, current);
 	if (currentFeatures & 64 && typeof Temporal !== "undefined") switch (currentClass) {
@@ -2564,7 +2572,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 		case Temporal.PlainTime: return createTemporalNode(id, 5, current);
 		case Temporal.PlainYearMonth: return createTemporalNode(id, 6, current);
 		case Temporal.ZonedDateTime: return createTemporalNode(id, 7, current);
-		default: break;
 	}
 	if (current instanceof Error) return parseError(ctx, depth, id, current);
 	if (SYM_ITERATOR in current || SYM_ASYNC_ITERATOR in current) return parsePlainObject(ctx, depth, id, current, !!currentClass);

package/dist/index.js

@@ -196,6 +196,94 @@ function deserializeString(str) {
 	return str.replace(/(\\\\|\\"|\\n|\\r|\\b|\\t|\\f|\\u2028|\\u2029|\\x3C)/g, deserializeReplacer);
 }
 //#endregion
+//#region src/core/errors.ts
+const { toString: objectToString } = Object.prototype;
+const STEP_ERROR_CODES = {
+	parsing: 1,
+	serialization: 2,
+	deserialization: 3
+};
+function getErrorMessageProd(type) {
+	return `Seroval Error (step: ${STEP_ERROR_CODES[type]})`;
+}
+const getErrorMessage = (type, cause) => getErrorMessageProd(type);
+var SerovalError = class extends Error {
+	constructor(type, cause) {
+		super(getErrorMessage(type, cause));
+		this.cause = cause;
+	}
+};
+var SerovalParserError = class extends SerovalError {
+	constructor(cause) {
+		super("parsing", cause);
+	}
+};
+var SerovalSerializationError = class extends SerovalError {
+	constructor(cause) {
+		super("serialization", cause);
+	}
+};
+var SerovalDeserializationError = class extends SerovalError {
+	constructor(cause) {
+		super("deserialization", cause);
+	}
+};
+function getSpecificErrorMessage(code) {
+	return `Seroval Error (specific: ${code})`;
+}
+var SerovalUnsupportedTypeError = class extends Error {
+	constructor(value) {
+		super(getSpecificErrorMessage(1));
+		this.value = value;
+	}
+};
+var SerovalUnsupportedNodeError = class extends Error {
+	constructor(node) {
+		super(getSpecificErrorMessage(2));
+	}
+};
+var SerovalMissingPluginError = class extends Error {
+	constructor(tag) {
+		super(getSpecificErrorMessage(3));
+	}
+};
+var SerovalMissingInstanceError = class extends Error {
+	constructor(tag) {
+		super(getSpecificErrorMessage(4));
+	}
+};
+var SerovalMissingReferenceError = class extends Error {
+	constructor(value) {
+		super(getSpecificErrorMessage(5));
+		this.value = value;
+	}
+};
+var SerovalMissingReferenceForIdError = class extends Error {
+	constructor(id) {
+		super(getSpecificErrorMessage(6));
+	}
+};
+var SerovalUnknownTypedArrayError = class extends Error {
+	constructor(name) {
+		super(getSpecificErrorMessage(7));
+	}
+};
+var SerovalMalformedNodeError = class extends Error {
+	constructor(node) {
+		super(getSpecificErrorMessage(8));
+	}
+};
+var SerovalConflictedNodeIdError = class extends Error {
+	constructor(node) {
+		super(getSpecificErrorMessage(9));
+	}
+};
+var SerovalDepthLimitError = class extends Error {
+	constructor(limit) {
+		super(getSpecificErrorMessage(9));
+	}
+};
+//#endregion
 //#region src/core/keys.ts
 const REFERENCES_KEY = "__SEROVAL_REFS__";
 const GLOBAL_CONTEXT_R = `self.\$R`;
@@ -272,14 +360,16 @@ function getErrorOptions(error, features) {
 	const names = Object.getOwnPropertyNames(error);
 	for (let i = 0, len = names.length, name; i < len; i++) {
 		name = names[i];
-		if (name !== "name" && name !== "message") if (name === "stack") {
-			if (features & 4) {
+		if (name !== "name" && name !== "message") {
+			if (name === "stack") {
+				if (features & 4) {
+					options = options || {};
+					options[name] = error[name];
+				}
+			} else {
 				options = options || {};
 				options[name] = error[name];
 			}
-		} else {
-			options = options || {};
-			options[name] = error[name];
 		}
 	}
 	return options;
@@ -337,13 +427,17 @@ function createArrayNode(id, current, parsedItems) {
 function createBoxedNode(id, boxed) {
 	return createSerovalNode(21, id, void 0, void 0, void 0, void 0, void 0, void 0, boxed, void 0, void 0, void 0);
 }
+const MAX_TYPED_ARRAY_LENGTH = 1e6;
 function createTypedArrayNode(id, current, buffer) {
+	if (current.length > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(15, id, void 0, current.constructor.name, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.length);
 }
 function createBigIntTypedArrayNode(id, current, buffer) {
+	if (current.length > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(16, id, void 0, current.constructor.name, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.length);
 }
 function createDataViewNode(id, current, buffer) {
+	if (current.byteLength > MAX_TYPED_ARRAY_LENGTH) throw new SerovalUnsupportedTypeError(current);
 	return createSerovalNode(20, id, void 0, void 0, void 0, void 0, void 0, void 0, buffer, current.byteOffset, void 0, current.byteLength);
 }
 function createErrorNode(id, current, options) {
@@ -377,94 +471,6 @@ function createSequenceNode(id, sequence, throwAt, doneAt) {
 	return createSerovalNode(35, id, throwAt, void 0, void 0, void 0, void 0, sequence, void 0, void 0, void 0, doneAt);
 }
 //#endregion
-//#region src/core/errors.ts
-const { toString: objectToString } = Object.prototype;
-const STEP_ERROR_CODES = {
-	parsing: 1,
-	serialization: 2,
-	deserialization: 3
-};
-function getErrorMessageProd(type) {
-	return `Seroval Error (step: ${STEP_ERROR_CODES[type]})`;
-}
-const getErrorMessage = (type, cause) => getErrorMessageProd(type);
-var SerovalError = class extends Error {
-	constructor(type, cause) {
-		super(getErrorMessage(type, cause));
-		this.cause = cause;
-	}
-};
-var SerovalParserError = class extends SerovalError {
-	constructor(cause) {
-		super("parsing", cause);
-	}
-};
-var SerovalSerializationError = class extends SerovalError {
-	constructor(cause) {
-		super("serialization", cause);
-	}
-};
-var SerovalDeserializationError = class extends SerovalError {
-	constructor(cause) {
-		super("deserialization", cause);
-	}
-};
-function getSpecificErrorMessage(code) {
-	return `Seroval Error (specific: ${code})`;
-}
-var SerovalUnsupportedTypeError = class extends Error {
-	constructor(value) {
-		super(getSpecificErrorMessage(1));
-		this.value = value;
-	}
-};
-var SerovalUnsupportedNodeError = class extends Error {
-	constructor(node) {
-		super(getSpecificErrorMessage(2));
-	}
-};
-var SerovalMissingPluginError = class extends Error {
-	constructor(tag) {
-		super(getSpecificErrorMessage(3));
-	}
-};
-var SerovalMissingInstanceError = class extends Error {
-	constructor(tag) {
-		super(getSpecificErrorMessage(4));
-	}
-};
-var SerovalMissingReferenceError = class extends Error {
-	constructor(value) {
-		super(getSpecificErrorMessage(5));
-		this.value = value;
-	}
-};
-var SerovalMissingReferenceForIdError = class extends Error {
-	constructor(id) {
-		super(getSpecificErrorMessage(6));
-	}
-};
-var SerovalUnknownTypedArrayError = class extends Error {
-	constructor(name) {
-		super(getSpecificErrorMessage(7));
-	}
-};
-var SerovalMalformedNodeError = class extends Error {
-	constructor(node) {
-		super(getSpecificErrorMessage(8));
-	}
-};
-var SerovalConflictedNodeIdError = class extends Error {
-	constructor(node) {
-		super(getSpecificErrorMessage(9));
-	}
-};
-var SerovalDepthLimitError = class extends Error {
-	constructor(limit) {
-		super(getSpecificErrorMessage(9));
-	}
-};
-//#endregion
 //#region src/core/opaque-reference.ts
 /**
 * An opaque reference allows hiding values from the serializer.
@@ -1052,7 +1058,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 		case DataView: return parseDataView$1(ctx, depth, id, current);
 		case Map: return parseMap$1(ctx, depth, id, current);
 		case Set: return parseSet$1(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentClass === Promise || current instanceof Promise) return parsePromise$1(ctx, depth, id, current);
 	const currentFeatures = ctx.base.features;
@@ -1060,7 +1065,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 	if (currentFeatures & 16) switch (currentClass) {
 		case BigInt64Array:
 		case BigUint64Array: return parseBigIntTypedArray$1(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentFeatures & 1 && typeof AggregateError !== "undefined" && (currentClass === AggregateError || current instanceof AggregateError)) return parseAggregateError$1(ctx, depth, id, current);
 	if (currentFeatures & 64 && typeof Temporal !== "undefined") switch (currentClass) {
@@ -1072,7 +1076,6 @@ async function parseObjectAsync(ctx, depth, id, current) {
 		case Temporal.PlainTime: return createTemporalNode(id, 5, current);
 		case Temporal.PlainYearMonth: return createTemporalNode(id, 6, current);
 		case Temporal.ZonedDateTime: return createTemporalNode(id, 7, current);
-		default: break;
 	}
 	if (current instanceof Error) return parseError$1(ctx, depth, id, current);
 	if (SYM_ITERATOR in current || SYM_ASYNC_ITERATOR in current) return parsePlainObject$1(ctx, depth, id, current, !!currentClass);
@@ -1371,15 +1374,17 @@ function deserializeTypedArray(ctx, depth, node) {
 	var _node$b;
 	const construct = getTypedArrayConstructor(node.c);
 	const source = deserialize$1(ctx, depth, node.f);
+	if (!(source instanceof ArrayBuffer)) throw new SerovalMalformedNodeError(node);
 	const offset = (_node$b = node.b) !== null && _node$b !== void 0 ? _node$b : 0;
-	if (offset < 0 || offset > source.byteLength) throw new SerovalMalformedNodeError(node);
+	if (offset < 0 || offset > source.byteLength || node.l > MAX_BASE64_LENGTH) throw new SerovalMalformedNodeError(node);
 	return assignIndexedValue$1(ctx, node.i, new construct(source, offset, node.l));
 }
 function deserializeDataView(ctx, depth, node) {
 	var _node$b2;
 	const source = deserialize$1(ctx, depth, node.f);
+	if (!(source instanceof ArrayBuffer)) throw new SerovalMalformedNodeError(node);
 	const offset = (_node$b2 = node.b) !== null && _node$b2 !== void 0 ? _node$b2 : 0;
-	if (offset < 0 || offset > source.byteLength) throw new SerovalMalformedNodeError(node);
+	if (offset < 0 || offset > source.byteLength || node.l > MAX_BASE64_LENGTH) throw new SerovalMalformedNodeError(node);
 	return assignIndexedValue$1(ctx, node.i, new DataView(source, offset, node.l));
 }
 function deserializeDictionary(ctx, depth, node, result) {
@@ -1438,11 +1443,15 @@ function deserializePromiseFulfill(ctx, depth, node) {
 }
 function deserializeIteratorFactoryInstance(ctx, depth, node) {
 	deserialize$1(ctx, depth, node.a[0]);
-	return sequenceToIterator(deserialize$1(ctx, depth, node.a[1]));
+	const source = deserialize$1(ctx, depth, node.a[1]);
+	if (!source || typeof source !== "object" || !isSequence(source)) throw new SerovalMalformedNodeError(node.a[1]);
+	return sequenceToIterator(source);
 }
 function deserializeAsyncIteratorFactoryInstance(ctx, depth, node) {
 	deserialize$1(ctx, depth, node.a[0]);
-	return streamToAsyncIterable(deserialize$1(ctx, depth, node.a[1]));
+	const source = deserialize$1(ctx, depth, node.a[1]);
+	if (!source || typeof source !== "object" || !isStream(source)) throw new SerovalMalformedNodeError(node.a[1]);
+	return streamToAsyncIterable(source);
 }
 function deserializeStreamConstructor(ctx, depth, node) {
 	const result = assignIndexedValue$1(ctx, node.i, createStream());
@@ -1914,9 +1923,10 @@ function serializeStringKeyAssignment(ctx, source, mainAssignments, key, value)
 	const serialized = serialize$1(ctx, value);
 	const check = Number(key);
 	const isIdentifier = check >= 0 && check.toString() === key || isValidIdentifier(key);
-	if (isIndexedValueInStack(base, value)) if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
-	else createArrayAssign(ctx, source.i, isIdentifier ? key : "\"" + key + "\"", serialized);
-	else {
+	if (isIndexedValueInStack(base, value)) {
+		if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
+		else createArrayAssign(ctx, source.i, isIdentifier ? key : "\"" + key + "\"", serialized);
+	} else {
 		const parentAssignment = base.assignments;
 		base.assignments = mainAssignments;
 		if (isIdentifier && check !== check) createObjectAssign(ctx, source.i, key, serialized);
@@ -2543,7 +2553,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 		case DataView: return parseDataView(ctx, depth, id, current);
 		case Map: return parseMap(ctx, depth, id, current);
 		case Set: return parseSet(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentClass === Promise || current instanceof Promise) return parsePromise(ctx, depth, id, current);
 	const currentFeatures = ctx.base.features;
@@ -2551,7 +2560,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 	if (currentFeatures & 16) switch (currentClass) {
 		case BigInt64Array:
 		case BigUint64Array: return parseBigIntTypedArray(ctx, depth, id, current);
-		default: break;
 	}
 	if (currentFeatures & 1 && typeof AggregateError !== "undefined" && (currentClass === AggregateError || current instanceof AggregateError)) return parseAggregateError(ctx, depth, id, current);
 	if (currentFeatures & 64 && typeof Temporal !== "undefined") switch (currentClass) {
@@ -2563,7 +2571,6 @@ function parseObjectPhase2(ctx, depth, id, current, currentClass) {
 		case Temporal.PlainTime: return createTemporalNode(id, 5, current);
 		case Temporal.PlainYearMonth: return createTemporalNode(id, 6, current);
 		case Temporal.ZonedDateTime: return createTemporalNode(id, 7, current);
-		default: break;
 	}
 	if (current instanceof Error) return parseError(ctx, depth, id, current);
 	if (SYM_ITERATOR in current || SYM_ASYNC_ITERATOR in current) return parsePlainObject(ctx, depth, id, current, !!currentClass);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "seroval",
   "type": "module",
-  "version": "1.6.2",
+  "version": "1.6.4",
   "files": [
     "dist"
   ],
@@ -16,15 +16,15 @@
     "serialization"
   ],
   "devDependencies": {
-    "@types/node": "^24.10.0",
-    "@vitest/ui": "^4.0.6",
-    "esbuild": "^0.28.1",
-    "temporal-polyfill": "^0.3.2",
+    "@types/node": "^26.2.0",
+    "@vitest/ui": "^4.1.10",
+    "esbuild": "^0.28.2",
+    "temporal-polyfill": "^1.0.4",
     "ts-prune": "^0.10.3",
     "tsdown": "^0.22.14",
     "tslib": "^2.8.1",
     "typescript": "^7.0.2",
-    "vitest": "^4.0.6"
+    "vitest": "^4.1.10"
   },
   "private": false,
   "description": "Stringify JS values",