From a892de5891b83d73ba92b715408de365f3e83af2 Mon Sep 17 00:00:00 2001 From: Simon Eisenmann Date: Tue, 3 Jun 2014 18:30:00 +0200 Subject: [PATCH] Validad useridcombo value properly. --- src/app/spreed-webrtc-server/users.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/app/spreed-webrtc-server/users.go b/src/app/spreed-webrtc-server/users.go index 8861a3a1..61fe312e 100644 --- a/src/app/spreed-webrtc-server/users.go +++ b/src/app/spreed-webrtc-server/users.go @@ -75,6 +75,9 @@ func (uh *UsersSharedsecretHandler) Validate(snr *SessionNonceRequest, request * // Parse UseridCombo. useridCombo := strings.SplitN(snr.UseridCombo, ":", 2) + if len(useridCombo) != 2 { + return "", errors.New("invalid useridcombo") + } expirationString, userid := useridCombo[0], useridCombo[1] expiration, err := strconv.ParseInt(expirationString, 10, 64)