enhanced share reliability

Author: ehsan6sha

Cargo.lock

@@ -77,7 +77,7 @@ name = "encrypted_upload_test"
 path = "examples/encrypted_upload_test.rs"
 
 [workspace.package]
-version = "0.3.3"
+version = "0.3.4"
 edition = "2021"
 license = "MIT OR Apache-2.0"
 repository = "https://github.com/functionland/fula-api"

Cargo.toml

@@ -6221,6 +6221,19 @@ impl EncryptedClient {
         chunked_meta: &ChunkedFileMetadata,
         dek: &fula_crypto::keys::DekKey,
     ) -> Result<Bytes> {
+        // Reject share tokens that claim implausible file sizes before attempting
+        // allocation. WASM's linear memory is bounded; a garbage total_size from a
+        // malformed token would otherwise surface as an opaque "memory access out
+        // of bounds" from __wbindgen_realloc instead of a clean error.
+        const MAX_CHUNKED_TOTAL_SIZE: u64 = 8 * 1024 * 1024 * 1024;
+        if chunked_meta.total_size > MAX_CHUNKED_TOTAL_SIZE {
+            return Err(ClientError::Encryption(fula_crypto::CryptoError::Decryption(
+                format!(
+                    "chunked_meta.total_size {} exceeds maximum {}",
+                    chunked_meta.total_size, MAX_CHUNKED_TOTAL_SIZE
+                ),
+            )));
+        }
         let mut output = Vec::with_capacity(chunked_meta.total_size as usize);
         self.download_chunks_windowed_to_writer(bucket, storage_key, chunked_meta, dek, &mut output, None).await?;
         Ok(Bytes::from(output))

crates/fula-client/src/encryption.rs

@@ -6,7 +6,7 @@
 
 Pod::Spec.new do |s|
   s.name             = 'fula_client'
-  s.version          = '0.3.3'
+  s.version          = '0.3.4'
   s.summary          = 'Flutter SDK for Fula decentralized storage'
   s.description      = <<-DESC
     A Flutter plugin providing client-side encryption, metadata privacy,

packages/fula_client/ios/fula_client.podspec

@@ -1,6 +1,6 @@
 name: fula_client
 description: Flutter SDK for Fula decentralized storage with client-side encryption, metadata privacy, and secure sharing.
-version: 0.3.3
+version: 0.3.4
 homepage: https://fx.land
 repository: https://github.com/functionland/fula-api
 issue_tracker: https://github.com/functionland/fula-api/issues