fedserv/echoIRCd
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

s2s: reject malformed or duplicate UIDs on introduction

Browse source
This commit is contained in:
Jean Chevronnet 2026-08-16 17:50:25 +00:00
parent 9ff0d8c629
commit e87c9fd9ca
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
src/link.rs
View file

@ -931,6 +931,16 @@ impl Server {
}
let sid = msg.source.clone().unwrap_or_default();
let uuid = msg.params[0].clone();
// reject a malformed or duplicate UID instead of corrupting the routing
// tables: the uuid is 9 chars carrying the announcing server's 3-char SID,
// and must not already be present.
if sid.len() != 3
|| uuid.len() != 9
|| !uuid.starts_with(&sid)
|| self.remote_users.contains_key(&uuid)
{
return;
}
let nick = msg.params[2].clone();
let host = msg.params[4].clone(); // displayed host
let ident = msg.params[6].clone(); // displayed ident