starred/orca
1
0
Fork 0
mirror of https://github.com/stablyai/orca.git synced 2026-09-29 08:03:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(mobile): bound gzip package chunk decoding

Browse Source
This commit is contained in:
Jinwoo-H
2026-08-30 23:16:57 -04:00
parent 0ae1dd23f5
commit 7aa09a2ee7
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mobile/src/mobile-web/mobile-web-package-chunk-decoder.ts
+7 -4
View File
@@ -52,6 +52,9 @@ export function decodeGzipMobileWebPackageChunk(
) {
return null
}
if (expectedLength > MOBILE_WEB_PACKAGE_CHUNK_BYTES) {
return null
}
const compressed = decodeCanonicalBase64(chunk.data.dataBase64)
if (
!compressed ||
@@ -61,10 +64,10 @@ export function decodeGzipMobileWebPackageChunk(
return null
}
try {
const bytes = gunzipSync(compressed)
return bytes.byteLength === expectedLength && bytes.byteLength <= MOBILE_WEB_PACKAGE_CHUNK_BYTES
? bytes
: null
// Reserve one sentinel byte so expansion beyond the advertised size is rejected without an
// attacker-controlled allocation.
const bytes = gunzipSync(compressed, { out: new Uint8Array(expectedLength + 1) })
return bytes.byteLength === expectedLength ? bytes : null
} catch {
return null
}