fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don't let incoming challenges fill a victim's GameServ slots

Browse source
This commit is contained in:
Jean Chevronnet 2026-07-19 19:19:20 +00:00
parent d0a86359c2
commit 2c81af108b
No known key found for this signature in database
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/gameserv/src/lib.rs
View file

@ -159,7 +159,10 @@ impl GameServ {
ctx.notice(me, from.uid, "The game server is at capacity right now. Please try again shortly.");
return;
}
let mine = self.games.values().filter(|g| g.acc_a == meid || g.acc_b == meid).count();
// Count games I started (any status) plus ones I accepted (active) — but NOT
// pending challenges sent TO me, or an attacker could spend their own budget
// flooding a victim with offers to exhaust the victim's slots.
let mine = self.games.values().filter(|g| g.acc_a == meid || (g.acc_b == meid && g.status == Status::Active)).count();
if mine >= MAX_GAMES_PER_USER {
ctx.notice(me, from.uid, format!("You have too many games in progress (max {MAX_GAMES_PER_USER}). Finish or resign one first."));
return;