fix: DecodeRLP can panic

filecoin-project · Aug 23, 2023 · 0e1e1af · 0e1e1af
1 parent 3ad5dc8
commit 0e1e1af
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/venus-shared/actors/types/rlp.go b/venus-shared/actors/types/rlp.go
@@ -155,6 +155,9 @@ func decodeLength(data []byte, lenInBytes int) (length int, err error) {
 	if err := binary.Read(r, binary.BigEndian, &decodedLength); err != nil {
 		return 0, fmt.Errorf("invalid rlp data: cannot parse string length: %w", err)
 	}
+	if decodedLength < 0 {
+		return 0, fmt.Errorf("invalid rlp data: negative string length")
+	}
 
 	totalLength := lenInBytes + int(decodedLength)
 	if totalLength < 0 || totalLength > len(data) {