Fix missing validation in Nanos::nanoEquipHandler()

2022-02-08 12:48:58 +01:00 · 2022-02-08 12:48:58 +01:00 · 6412a9a89e
parent f376c68115
commit 6412a9a89e
1 changed files with 3 additions and 0 deletions
--- a/src/Nanos.cpp
+++ b/src/Nanos.cpp
@ -226,6 +226,9 @@ static void nanoEquipHandler(CNSocket* sock, CNPacketData* data) {
    if (nano->iNanoSlotNum > 2 || nano->iNanoSlotNum < 0)
        return;

+    if (nano->iNanoID < 0 || nano->iNanoID >= NANO_COUNT)
+        return;
+
    resp.iNanoID = nano->iNanoID;
    resp.iNanoSlotNum = nano->iNanoSlotNum;