p2p-proxy: better request length checking

ipfs · Dec 1, 2020 · a329e4f · a329e4f
1 parent 895b340
commit a329e4f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/corehttp/p2p_proxy.go b/core/corehttp/p2p_proxy.go
@@ -65,7 +65,7 @@ func parseRequest(request *http.Request) (*proxyRequest, error) {
 	}
 
 	split = strings.SplitN(path, "/", 7)
-	if split[3] != "x" || split[5] != "http" {
+	if len(split) < 7 || split[3] != "x" || split[5] != "http" {
 		return nil, fmt.Errorf("Invalid request path '%s'", path)
 	}