sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-05-20 07:39:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Reject out-of-range UDP port before narrowing to uint16 in fakeAddress

Browse Source
This commit is contained in:
Viktor Liu
2026-05-04 13:40:00 +02:00
parent 14ef880fc1
commit 2394972131
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
client/iface/wgproxy/bind/proxy.go
View File

@@ -203,6 +203,9 @@ func fakeAddress(peerAddress *net.UDPAddr) (*netip.AddrPort, error) {
if peerAddress == nil { if peerAddress == nil {
return nil, fmt.Errorf("nil peer address") return nil, fmt.Errorf("nil peer address")
} }
if peerAddress.Port < 0 || peerAddress.Port > 65535 {
return nil, fmt.Errorf("invalid UDP port: %d", peerAddress.Port)
}
addr, ok := netip.AddrFromSlice(peerAddress.IP) addr, ok := netip.AddrFromSlice(peerAddress.IP)
if !ok { if !ok {