octoleo/syncthing
1
0
Fork 0
mirror of https://github.com/octoleo/syncthing.git synced 2025-01-08 17:24:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request from GHSA-x462-89pf-6r5h

Browse Source
This commit is contained in:
Jakob Borg 2021-04-06 08:00:00 +02:00 committed by GitHub
parent 04623718ce
commit 8e38ecdeb2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/relay/protocol/protocol.go
View File

@ -4,6 +4,7 @@ package protocol
import ( import (
"errors" "errors"
"fmt"
"io" "io"
) )
@ -86,6 +87,9 @@ func ReadMessage(r io.Reader) (interface{}, error) {
if header.magic != magic { if header.magic != magic {
return nil, errors.New("magic mismatch") return nil, errors.New("magic mismatch")
} }
if header.messageLength < 0 || header.messageLength > 1024 {
return nil, fmt.Errorf("bad length (%d)", header.messageLength)
}
buf = make([]byte, int(header.messageLength)) buf = make([]byte, int(header.messageLength))
if _, err := io.ReadFull(r, buf); err != nil { if _, err := io.ReadFull(r, buf); err != nil {