fix: gosec: add uint32 overflow check

Signed-off-by: Christian Stewart <christian@aperture.us>
aperturerobotics · Aug 21, 2024 · 7945736 · 7945736
1 parent c638af9
commit 7945736
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/srpc/packet-rw.go b/srpc/packet-rw.go
@@ -5,6 +5,7 @@ import (
 	"context"
 	"encoding/binary"
 	"io"
+	"math"
 	"sync"
 
 	"github.com/pkg/errors"
@@ -42,8 +43,15 @@ func (r *PacketReadWriter) WritePacket(p *Packet) error {
 	defer r.writeMtx.Unlock()
 
 	msgSize := p.SizeVT()
+
+	// G115: integer overflow conversion int -> uint32 (gosec)
+	if msgSize > math.MaxUint32 {
+		return errors.New("message size exceeds maximum uint32 value")
+	}
+
 	data := make([]byte, 4+msgSize)
 	binary.LittleEndian.PutUint32(data, uint32(msgSize))
+
 	_, err := p.MarshalToSizedBufferVT(data[4:])
 	if err != nil {
 		return err