harden the return value of m.serialize()

closes Agoric#11
dckc · Sep 12, 2019 · 34adf05 · 34adf05
1 parent c1860bc
commit 34adf05
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/marshal.js b/marshal.js
@@ -396,10 +396,10 @@ export function makeMarshal(serializeSlot, unserializeSlot) {
     const slots = [];
     const slotMap = new Map(); // maps val (proxy or presence) to
     // index of slots[]
-    return {
+    return harden({
       body: JSON.stringify(val, makeReplacer(slots, slotMap)),
       slots,
-    };
+    });
   }
 
   function makeFullRevive(slots, cyclePolicy) {

diff --git a/test/test-marshal.js b/test/test-marshal.js
@@ -59,6 +59,10 @@ test('serialize static data', t => {
     slots: [],
   });
 
+  const cd = ser(harden([1, 2]));
+  t.equal(Object.isFrozen(cd), true);
+  t.equal(Object.isFrozen(cd.slots), true);
+
   t.end();
 });