Leahnaya/wfc-server
1
0
Fork 0
mirror of https://github.com/WiiLink24/wfc-server.git synced 2026-07-16 00:37:10 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #25 from MikeIsAStar/do-not-forward-malicious-messages-to-clients

Browse Source 
QR2: Do not forward malicious messages to clients
This commit is contained in:
Palapeli 2023-12-13 16:34:57 -05:00 committed by GitHub
commit e86d751428
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
qr2/message.go
View File

@ -76,7 +76,13 @@ func SendClientMessage(senderIP string, destSearchID uint64, message []byte) {
senderProfileID := binary.LittleEndian.Uint32(message[0x10:0x14])
moduleName = "QR2/MSG:p" + strconv.FormatUint(uint64(senderProfileID), 10)
if (int(message[9]) + 0x14) != len(message) {
dataSize := message[9]
if dataSize > 0x80 {
logging.Error(moduleName, "Received malicious match command packet header")
return
}
if (int(dataSize) + 0x14) != len(message) {
logging.Error(moduleName, "Received invalid match command packet header")
return
}