p2p-proxy: better request length checking

a329e4fc · Adin Schmahmann · 895b340e · a329e4fc
Commit a329e4fc authored Dec 01, 2020 by Adin Schmahmann
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

core/corehttp/p2p_proxy.go core/corehttp/p2p_proxy.go +1 -1

No files found.
--- a/core/corehttp/p2p_proxy.go
+++ b/core/corehttp/p2p_proxy.go
@@ -65,7 +65,7 @@ func parseRequest(request *http.Request) (*proxyRequest, error) {
 	}

 	split = strings.SplitN(path, "/", 7)
-	if split[3] != "x" || split[5] != "http" {
+	if len(split) < 7 || split[3] != "x" || split[5] != "http" {
 		return nil, fmt.Errorf("Invalid request path '%s'", path)
 	}