From c284843943acf82cc92d09157aa650ee4f994e2a Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 2 Oct 2026 08:49:29 +0000
Subject: bump dependencies

---
 src/assets/js/bundle.js | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'src/assets/js')

diff --git a/src/assets/js/bundle.js b/src/assets/js/bundle.js
index 5764765..a3851c8 100644
--- a/src/assets/js/bundle.js
+++ b/src/assets/js/bundle.js
@@ -404,6 +404,13 @@ class Address4 {
      * address.correctForm(); // '192.0.2.42'
      */
     static fromArpa(arpaFormAddress) {
+        // A 15-character address, a "/32" prefix length and ".in-addr.arpa.": the
+        // longest name is 32 characters. Longer input is rejected before its
+        // labels are split, as the constructor does at its own limit.
+        const longest = constants.GROUPS * 4 - 1 + '/32'.length + '.in-addr.arpa.'.length;
+        if (arpaFormAddress.length > longest) {
+            throw new address_error_1.AddressError(`in-addr.arpa names are at most ${longest} characters.`);
+        }
         // remove an ending ".in-addr.arpa", in any case and with or without the
         // root dot, as Address6.fromArpa does for ".ip6.arpa"
         const leader = arpaFormAddress.replace(/(\.in-addr\.arpa)?\.?$/i, '');
-- 
cgit v1.3