Skip to content

Commit ac8ebb2

Browse files
authored
update BSON due to vulnerability, minor fixes (#20)
Update bson package from 2.0.8 to 4.4.0 due to a vulnerability in v2. The interface changed, so update the files that use the package. Remove an unused TypeArray import. Remove a stray comment.
1 parent f605856 commit ac8ebb2

File tree

5 files changed

+53
-23
lines changed

5 files changed

+53
-23
lines changed

lib/bloom/sbbf.ts

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,3 @@
1-
import TypedArray = NodeJS.TypedArray;
2-
31
import parquet_thrift from "../../gen-nodejs/parquet_types";
42
import Long = require('long')
53
import XxHasher from "./xxhasher"

lib/codec/plain.js

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,6 @@ function decodeValues_INT32(cursor, count) {
4949
function encodeValues_INT64(values) {
5050
let buf = Buffer.alloc(8 * values.length);
5151
for (let i = 0; i < values.length; i++) {
52-
//console.log(typeof values[i]);
5352
buf.writeBigInt64LE(BigInt(values[i]), i*8);
5453
}
5554

lib/types.js

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -292,13 +292,11 @@ function fromPrimitive_JSON(value) {
292292
}
293293

294294
function toPrimitive_BSON(value) {
295-
var encoder = new BSON();
296-
return Buffer.from(encoder.serialize(value));
295+
return Buffer.from(BSON.serialize(value));
297296
}
298297

299298
function fromPrimitive_BSON(value) {
300-
var decoder = new BSON();
301-
return decoder.deserialize(value);
299+
return BSON.deserialize(value);
302300
}
303301

304302
function toPrimitive_TIME_MILLIS(value) {

package-lock.json

Lines changed: 50 additions & 15 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
"@types/thrift": "^0.10.10",
2121
"assert": "^2.0.0",
2222
"browserify-zlib": "^0.2.0",
23-
"bson": "^2.0.8",
23+
"bson": "4.4.0",
2424
"cross-fetch": "^3.1.4",
2525
"esbuild": "^0.12.11",
2626
"events": "^3.3.0",

0 commit comments

Comments
 (0)