p2p/rlpx: 2KB maximum size for handshake messages (#30029)

Co-authored-by: Felix Lange <fjl@twurst.com>
buddh0 · Jun 20, 2024 · 27654d3 · 27654d3
1 parent 00675c5
commit 27654d3
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/p2p/rlpx/rlpx.go b/p2p/rlpx/rlpx.go
@@ -604,6 +604,11 @@ func (h *handshakeState) readMsg(msg interface{}, prv *ecdsa.PrivateKey, r io.Re
 	}
 	size := binary.BigEndian.Uint16(prefix)
 
+	// baseProtocolMaxMsgSize = 2 * 1024
+	if size > 2048 {
+		return nil, errors.New("message too big")
+	}
+
 	// Read the handshake packet.
 	packet, err := h.rbuf.read(r, int(size))
 	if err != nil {