mirror of
https://github.com/morluto/rea.git
synced 2026-11-07 23:36:41 +00:00
morluto
eb97da3388
Give snapshot capture, header admission, packed members, and container streams one file-handle owner. Serialize adoption with reader shutdown, retain failed closes for retry, and remove snapshots only after descriptor cleanup succeeds. Cover unread members, pending opens, zero-byte members, and paired format/cleanup failures. Keep intentionally unrecoverable test fixtures hygienic and strengthen managed identity and process cleanup-authority expectations. Validation: full npm run check; 99 targeted tests and temporary-directory hygiene; exact discovery of 877 test files. No real vendor-provider verification was performed.
50 lines
1.7 KiB
TypeScript
50 lines
1.7 KiB
TypeScript
import type { Stats } from "node:fs";
|
|
import type { FileHandle } from "node:fs/promises";
|
|
|
|
import { ArtifactReaderFailure } from "./ArtifactReader.js";
|
|
|
|
/** Shared resource budget for the eagerly decoded ASAR header, not member bytes. */
|
|
export const MAX_ASAR_HEADER_BYTES = 16 * 1024 * 1024;
|
|
|
|
/** Admit both Chromium pickle extents before an upstream decoder allocates them. */
|
|
export const admitAsarHeader = async (
|
|
handle: Pick<FileHandle, "read"> & { stat(): Promise<Stats> },
|
|
): Promise<{
|
|
readonly archiveBytes: number;
|
|
readonly headerBytes: number;
|
|
readonly jsonBytes: number;
|
|
}> => {
|
|
const observed = await handle.stat();
|
|
if (!observed.isFile())
|
|
throw new ArtifactReaderFailure(
|
|
"format",
|
|
"ASAR container is not a regular file",
|
|
);
|
|
const prefix = Buffer.alloc(16);
|
|
const read = await handle.read(prefix, 0, prefix.length, 0);
|
|
if (read.bytesRead !== prefix.length || prefix.readUInt32LE(0) !== 4)
|
|
throw new ArtifactReaderFailure(
|
|
"format",
|
|
"Truncated or invalid ASAR size pickle",
|
|
);
|
|
const headerBytes = prefix.readUInt32LE(4);
|
|
const payloadBytes = prefix.readUInt32LE(8);
|
|
const jsonBytes = prefix.readUInt32LE(12);
|
|
if (
|
|
headerBytes < 8 ||
|
|
headerBytes > observed.size - 8 ||
|
|
payloadBytes !== headerBytes - 4 ||
|
|
jsonBytes > payloadBytes - 4
|
|
)
|
|
throw new ArtifactReaderFailure(
|
|
"format",
|
|
"ASAR header leaves its container or has invalid pickle extents",
|
|
);
|
|
if (headerBytes > MAX_ASAR_HEADER_BYTES)
|
|
throw new ArtifactReaderFailure(
|
|
"limit",
|
|
`ASAR header exceeds the ${String(MAX_ASAR_HEADER_BYTES)} byte decode budget`,
|
|
);
|
|
return { archiveBytes: observed.size, headerBytes, jsonBytes };
|
|
};
|