mirror of
https://github.com/LCE-Hub/LCE-Emerald-Launcher.git
synced 2026-07-25 18:47:10 +00:00
f4f438f688
two changes: 1. run_relay_proxy bound TcpListener to 0.0.0.0:61000. any LAN host could connect to this port and their bytes were piped to the upstream relay - no authentication of the local peer. changed to 127.0.0.1:61000 since the game process connects on loopback. 2. read_line read byte-by-byte into a Vec<u8> with no size cap. a malicious peer (relay or LAN) sending an unbounded line without \n could OOM the launcher. capped at 8 KiB (relay control lines are tiny - HOST/JOIN tokens + small id). |
||
|---|---|---|
| .. | ||
| commands | ||
| networking | ||
| platform | ||
| config.rs | ||
| lib.rs | ||
| main.rs | ||
| playtime.rs | ||
| state.rs | ||
| types.rs | ||
| util.rs | ||
| workshop_server.rs | ||