From e1eadda6bfb157157c049eade52d3bdd3787696f Mon Sep 17 00:00:00 2001
From: Martin Boehm <martin.boehm@1mbsoftware.net>
Date: Mon, 25 Feb 2019 14:09:24 +0100
Subject: [PATCH] Make upper limit for gap in xpub address derivation

---
 api/xpub.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/api/xpub.go b/api/xpub.go
index 0ad492a0..b257c9cb 100644
--- a/api/xpub.go
+++ b/api/xpub.go
@@ -15,6 +15,7 @@ import (
 
 const xpubLen = 111
 const defaultAddressesGap = 20
+const maxAddressesGap = 10000
 
 const txInput = 1
 const txOutput = 2
@@ -244,6 +245,9 @@ func (w *Worker) getXpubData(xpub string, page int, txsOnPage int, option GetAdd
 	)
 	if gap <= 0 {
 		gap = defaultAddressesGap
+	} else if gap > maxAddressesGap {
+		// limit the maximum gap to protect against unreasonably big values that could cause high load of the server
+		gap = maxAddressesGap
 	}
 	// gap is increased one as there must be gap of empty addresses before the derivation is stopped
 	gap++