storm/barnard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Reject malformed ACL and user-list records

Browse Source
This commit is contained in:
Brandon McGinty (chatgpt)
2026-08-09 14:44:42 -04:00
committed by Brandon McGinty
parent 3e9c9e7a81
commit 1fa96d4f15
3 changed files with 31 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fix.txt
+1 -1
View File
@@ -161,7 +161,7 @@ Priority 2: protocol and data correctness
not remove channel from the Links maps of old peers. Remove reciprocal old
links before replacement and add link add/remove/full-replacement tests.
20. Malformed protobuf fields can panic handlers
[x] 20. Malformed protobuf fields can panic handlers
File: gumble/gumble/handlers.go
Several optional proto fields are dereferenced without validation, notably
ACL group.Name and UserList_User.UserId. Validate required fields before