ensure valid range param

rockuw · rockuw · commit 0f0f8208957d · 2022-09-07T20:26:01.000+08:00
diff --git a/src/code/handler.go b/src/code/handler.go
@@ -33,6 +33,10 @@ func parseRange(r string) (int64, int64, error) {
 		return 0, 0, err
 	}
 
+	if sz := endPos + 1 - beginPos; sz <= 0 || sz > 50*1024*1024 {
+		return 0, 0, fmt.Errorf("invalid range: %s", r)
+	}
+
 	return beginPos, endPos + 1, nil
 }
 

Original file line number	Diff line number	Diff line change
`@@ -33,6 +33,10 @@ func parseRange(r string) (int64, int64, error) {`
`33`	`33`	`return 0, 0, err`
`34`	`34`	`}`
`35`	`35`
	`36`	`+ if sz := endPos + 1 - beginPos; sz <= 0 \|\| sz > 5010241024 {`
	`37`	`+ return 0, 0, fmt.Errorf("invalid range: %s", r)`
	`38`	`+ }`
	`39`	`+`
`36`	`40`	`return beginPos, endPos + 1, nil`
`37`	`41`	`}`
`38`	`42`