From 724205c1bc157b8933b1c63ec37014c2f07842ae Mon Sep 17 00:00:00 2001 From: Nakidai Date: Sun, 1 Feb 2026 20:41:03 +0300 Subject: Add validation Now there can't be single \r or \n in the message, erroneous nicks and channel names are rejected, and usernames are stripped on '@' --- peer.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'peer.c') diff --git a/peer.c b/peer.c index 3634834..13d0f2a 100644 --- a/peer.c +++ b/peer.c @@ -47,7 +47,9 @@ handle(struct Peer *peer) } *p = 0; - if (parse_message(peer->buf, &msg)) + if (memchr(peer->buf, '\n', sizeof(peer->buf)) + || memchr(peer->buf, '\r', sizeof(peer->buf)) + || parse_message(peer->buf, &msg)) { warnx("malformed input from %d", peer->fd); goto next; -- cgit 1.4.1