Mirrored_Repos/obs-websocket
1
0
Fork 0
mirror of https://github.com/Palakis/obs-websocket.git synced 2024-08-30 18:12:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

websocketserver: Validate op field type

Browse Source 
Could cause a crash by assuming `op` is always a number.

Closes #965
This commit is contained in:
tt2468
2022-07-25 08:00:48 -07:00
parent f95865c2c4
commit 02ccd0b76f
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/websocketserver/WebSocketServer.cpp
View File

@ -445,6 +445,12 @@ void WebSocketServer::onMessage(websocketpp::connection_hdl hdl,
goto skipProcessing;
}
if (!incomingMessage["op"].is_number()) {
ret.closeCode = WebSocketCloseCode::UnknownOpCode;
ret.closeReason = "Your `op` is not a number.";
goto skipProcessing;
}
ProcessMessage(session, ret, incomingMessage["op"], incomingMessage["d"]);
skipProcessing: