bugfix: 防止恶意端口攻击

canoziia · canoziia · commit eba2cd303faf · 2023-06-09T16:07:17.000+08:00
diff --git a/lib/server/swarm.js b/lib/server/swarm.js
@@ -153,6 +153,8 @@ class Swarm {
       if (!peer) continue
       if (isWebRTC && peer.peerId === ownPeerId) continue // don't send peer to itself
       if ((isWebRTC && peer.type !== 'ws') || (!isWebRTC && peer.type === 'ws')) continue // send proper peer type
+      // 如果端口号不是0-65535, continue
+      if (peer.port > 65535 || peer.port < 0) continue
       peers.push(peer)
     }
     return peers

Original file line number	Diff line number	Diff line change
`@@ -153,6 +153,8 @@ class Swarm {`
`153`	`153`	`if (!peer) continue`
`154`	`154`	`if (isWebRTC && peer.peerId === ownPeerId) continue // don't send peer to itself`
`155`	`155`	`if ((isWebRTC && peer.type !== 'ws') \|\| (!isWebRTC && peer.type === 'ws')) continue // send proper peer type`
	`156`	`+ // 如果端口号不是0-65535, continue`
	`157`	`+ if (peer.port > 65535 \|\| peer.port < 0) continue`
`156`	`158`	`peers.push(peer)`
`157`	`159`	`}`
`158`	`160`	`return peers`