engine.io-parser - npm Package Compare versions

Comparing version 1.0.6 to 1.0.7

History.md

 
+1.0.7 / 2014-06-24
+==================
+
+ * fix decodePayloadAsBinary memory leak [christophwitzko]
+ * README improvements
+
 1.0.6 / 2014-05-30
@@ -3,0 +9,0 @@ ==================

lib/index.js

@@ -431,6 +431,13 @@ /**
     var isString = bufferTail[0] === 0;
+    var numberTooLong = false;
     for (var i = 1; ; i++) {
       if (bufferTail[i] == 255)  break;
+      // 310 = char length of Number.MAX_VALUE
+      if (strLen.length > 310) {
+        numberTooLong = true;
+        break;
+      }
       strLen += '' + bufferTail[i];
     }
+    if(numberTooLong) return callback(err, 0, 1);
     bufferTail = bufferTail.slice(strLen.length + 1);
@@ -437,0 +444,0 @@

package.json

 {
   "name": "engine.io-parser",
   "description": "Parser for the client for the realtime Engine",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "homepage": "https://github.com/LearnBoost/engine.io-protocol",
@@ -6,0 +6,0 @@ "devDependencies": {

Readme.md

 
 # engine.io-parser
 
-[![Build Status](https://secure.travis-ci.org/LearnBoost/engine.io-parser.png)](http://travis-ci.org/LearnBoost/engine.io-parser)
-[![NPM version](https://badge.fury.io/js/engine.io-parser.png)](http://badge.fury.io/js/engine.io-parser)
+[![Build Status](https://secure.travis-ci.org/Automattic/engine.io-parser.svg)](http://travis-ci.org/Automattic/engine.io-parser)
+[![NPM version](https://badge.fury.io/js/engine.io-parser.svg)](http://badge.fury.io/js/engine.io-parser)
 
 This is the JavaScript parser for the engine.io protocol encoding,
 shared by both
-[engine.io-client](https://github.com/LearnBoost/engine.io-client) and
-[engine.io-server](https://github.com/LearnBoost/engine.io-server).
+[engine.io-client](https://github.com/Automattic/engine.io-client) and
+[engine.io](https://github.com/Automattic/engine.io).
 
 ## License
 
-MIT
+MIT

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

28853

increased by1.13%

Lines of code

846

increased by0.83%

Number of lines in readme file

15

increased by7.14%

No dependency changes