From 84cbe89a78a5109f833808b26251ec22f3cd97db Mon Sep 17 00:00:00 2001 From: Sergey Matveev Date: Mon, 9 Jan 2017 22:07:13 +0300 Subject: [PATCH] Limited read from untrusted socket --- src/cypherpunks.ru/nncp/sp.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/cypherpunks.ru/nncp/sp.go b/src/cypherpunks.ru/nncp/sp.go index 8e5562e..71abec2 100644 --- a/src/cypherpunks.ru/nncp/sp.go +++ b/src/cypherpunks.ru/nncp/sp.go @@ -202,7 +202,7 @@ func (state *SPState) WriteSP(dst io.Writer, payload []byte) error { func (state *SPState) ReadSP(src io.Reader) ([]byte, error) { var sp SPRaw - n, err := xdr.Unmarshal(src, &sp) + n, err := xdr.UnmarshalLimited(src, &sp, 2<<17) if err != nil { return nil, err } -- 2.44.0