p2p/discover: apply netrestrict in discv5 response handler (#25304)

ethereum · Jul 15, 2022 · a9ef135 · a9ef135
1 parent e3df3d3
commit a9ef135
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/p2p/discover/v5_udp.go b/p2p/discover/v5_udp.go
@@ -407,6 +407,9 @@ func (t *UDPv5) verifyResponseNode(c *callV5, r *enr.Record, distances []uint, s
 	if err := netutil.CheckRelayIP(c.node.IP(), node.IP()); err != nil {
 		return nil, err
 	}
+	if t.netrestrict != nil && !t.netrestrict.Contains(node.IP()) {
+		return nil, errors.New("not contained in netrestrict list")
+	}
 	if c.node.UDP() <= 1024 {
 		return nil, errLowPort
 	}