SomberNight 21e637f543 network: validate server peers sent by main server ...

Data returned by the main server for request "server.peers.subscribe"
is of course untrusted input. Previously if it contained e.g. invalid port numbers
or IP addresses, it could kill the whole network taskgroup.
(this might have only affected master and not released versions,
which would only raise exceptions once the client actually tried to connect to an invalid host/port)

2020-05-13 19:28:35 +02:00

55 KiB

Raw Blame History

View Raw