fix(koa): handle Content-Length overflow and NaN

packages/koa/src/request.ts

@@ -328,7 +328,8 @@ export class Request {
     if (len === '') {
       return;
     }
-    return Number.parseInt(len);
+    const parsed = Number.parseInt(len, 10);
+    return Number.isNaN(parsed) ? undefined : parsed;
   }
 
   /**

packages/koa/src/response.ts

@@ -189,7 +189,7 @@ export class Response {
    */
   get length(): number | undefined {
     if (this.has('Content-Length')) {
-      return Number.parseInt(this.get('Content-Length')) || 0;
+      return Number.parseInt(this.get('Content-Length'), 10) || 0;
     }
 
     const body = this.body;

packages/koa/test/request/length.test.ts

@@ -15,4 +15,40 @@ describe('ctx.length', () => {
     const req = request();
     assert.strictEqual(req.length, undefined);
   });
+
+  it('should handle zero content-length', () => {
+    const req = request();
+    req.header['content-length'] = '0';
+    assert.strictEqual(req.length, 0);
+  });
+
+  it('should handle Content-Length > 2GB (2147483648)', () => {
+    const req = request();
+    req.header['content-length'] = '2147483648';
+    assert.strictEqual(req.length, 2147483648);
+  });
+
+  it('should handle very large Content-Length (10GB)', () => {
+    const req = request();
+    req.header['content-length'] = '10000000000';
+    assert.strictEqual(req.length, 10000000000);
+  });
+
+  it('should handle floating-point-like strings (truncate decimal)', () => {
+    const req = request();
+    req.header['content-length'] = '10.5';
+    assert.strictEqual(req.length, 10);
+  });
+
+  it('should return undefined for non-numeric strings', () => {
+    const req = request();
+    req.header['content-length'] = 'invalid';
+    assert.strictEqual(req.length, undefined);
+  });
+
+  it('should return undefined for empty string', () => {
+    const req = request();
+    req.header['content-length'] = '';
+    assert.strictEqual(req.length, undefined);
+  });
 });