fix: check for non negative value

Author: durran

addon/mongocrypt.cc

@@ -572,8 +572,11 @@ MongoCrypt::MongoCrypt(const CallbackInfo& info) : ObjectWrap(info) {
     }
 
     if (options.Has("keyExpirationMS")) {
-        mongocrypt_setopt_key_expiration(mongo_crypt(),
-                                         options.Get("keyExpirationMS").ToNumber().Int64Value());
+        int64_t keyExpirationMS = options.Get("keyExpirationMS").ToNumber().Int64Value();
+        if (keyExpirationMS < 0) {
+            throw TypeError::New(Env(), "Option `keyExpirationMS` must be a non-negative number");
+        }
+        mongocrypt_setopt_key_expiration(mongo_crypt(), keyExpirationMS);
     }
 
     mongocrypt_setopt_use_range_v2(mongo_crypt());

test/unit/bindings.test.ts

@@ -110,7 +110,7 @@ describe('MongoCryptConstructor', () => {
       it('throws an error', () => {
         expect(() => {
           new MongoCrypt({ kmsProviders: serialize({ aws: {} }), keyExpirationMS: -1000000 });
-        }).to.throw(TypeError);
+        }).to.throw(/must be a non-negative number/);
       });
     });
   });