Damien Arrachequesne 04d23cecaf fix: check the format of the index of each attachment ...

A specially crafted packet could be incorrectly decoded.

Example:

```js
const decoder = new Decoder();

decoder.on("decoded", (packet) => {
  console.log(packet.data); // prints [ 'hello', [Function: splice] ]
})

decoder.add('51-["hello",{"_placeholder":true,"num":"splice"}]');
decoder.add(Buffer.from("world"));
```

As usual, please remember not to trust user input.

Backported from b5d0cb7dc5

2022-11-09 11:04:00 +01:00

4.2 KiB

Raw Blame History

View Raw