From: Sergey Matveev <stargrave@stargrave.org>
Date: Mon, 9 Jan 2017 19:07:13 +0000 (+0300)
Subject: Limited read from untrusted socket
X-Git-Tag: 0.1~6
X-Git-Url: http://www.git.cypherpunks.ru/?a=commitdiff_plain;h=84cbe89a78a5109f833808b26251ec22f3cd97db;p=nncp.git

Limited read from untrusted socket
---

diff --git a/src/cypherpunks.ru/nncp/sp.go b/src/cypherpunks.ru/nncp/sp.go
index 8e5562e..71abec2 100644
--- a/src/cypherpunks.ru/nncp/sp.go
+++ b/src/cypherpunks.ru/nncp/sp.go
@@ -202,7 +202,7 @@ func (state *SPState) WriteSP(dst io.Writer, payload []byte) error {
 
 func (state *SPState) ReadSP(src io.Reader) ([]byte, error) {
 	var sp SPRaw
-	n, err := xdr.Unmarshal(src, &sp)
+	n, err := xdr.UnmarshalLimited(src, &sp, 2<<17)
 	if err != nil {
 		return nil, err
 	}