Also check lobbies length in TimeoutPeer store method.

poki · Sep 6, 2023 · 6c28610 · 6c28610
1 parent 8c2b172
commit 6c28610
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/internal/signaling/stores/postgres.go b/internal/signaling/stores/postgres.go
@@ -299,12 +299,18 @@ func (s *PostgresStore) ListLobbies(ctx context.Context, game, filter string) ([
 }
 
 func (s *PostgresStore) TimeoutPeer(ctx context.Context, peerID, secret, gameID string, lobbies []string) error {
-
 	if len(peerID) > 20 {
 		logger := logging.GetLogger(ctx)
 		logger.Warn("peer id too long", zap.String("peerID", peerID))
 		return ErrInvalidPeerID
 	}
+	for _, lobby := range lobbies {
+		if len(lobby) > 20 {
+			logger := logging.GetLogger(ctx)
+			logger.Warn("lobby code too long", zap.String("lobbyCode", lobby))
+			return ErrInvalidLobbyCode
+		}
+	}
 
 	now := util.Now(ctx)
 	_, err := s.DB.Exec(ctx, `