Merge pull request #2079 from CortexFoundation/dev

p2p/rlpx: 2KB maximum size for handshake messages
CortexFoundation · Jun 27, 2024 · 86acc37 · 86acc37
2 parents 8c81a48 + 20b3d34
commit 86acc37
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/p2p/rlpx/rlpx.go b/p2p/rlpx/rlpx.go
@@ -604,6 +604,11 @@ func (h *handshakeState) readMsg(msg any, prv *ecdsa.PrivateKey, r io.Reader) ([
  }
  size := binary.BigEndian.Uint16(prefix)
 
+ // baseProtocolMaxMsgSize = 2 * 1024
+ if size > 2048 {
+ return nil, errors.New("message too big")
+ }
+
  // Read the handshake packet.
  packet, err := h.rbuf.read(r, int(size))
  if err != nil {