From c874b9f2af0db9d974d22e04c533710049f2fc4c Mon Sep 17 00:00:00 2001 From: Christopher Jeffrey Date: Mon, 4 Apr 2016 00:23:45 -0700 Subject: [PATCH] fail on large invs. --- lib/bcoin/protocol/parser.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/bcoin/protocol/parser.js b/lib/bcoin/protocol/parser.js index d40cdb93..7fe11f41 100644 --- a/lib/bcoin/protocol/parser.js +++ b/lib/bcoin/protocol/parser.js @@ -455,6 +455,8 @@ Parser.parseInv = function parseInv(p) { count = p.readVarint(); + assert(count < 50000, 'Item count too high.'); + for (i = 0; i < count; i++) { items.push({ type: p.readU32(),