fix bug: endPos is greater than the boundary

chenjunbiao · chenjunbiao · commit 9ff8b37c0841 · 2021-03-30T17:12:12.000+08:00
diff --git a/primitive_decoder.go b/primitive_decoder.go
@@ -54,7 +54,7 @@ func DecodePrimitivePacket(buf []byte) (packet *PrimitivePacket, endPos int, siz
 
 	logger.Debugf(">>> sizeL=%v, length=%v, pos=%v, endPos=%v", sizeL, p.length, pos, endPos)
 
-	if pos > endPos {
+	if pos > endPos || endPos > len(buf) || pos > len(buf) {
 		return nil, 0, sizeL, fmt.Errorf("beyond the boundary, pos=%v, endPos=%v", pos, endPos)
 	}
 	p.valBuf = buf[pos:endPos]

Original file line number	Diff line number	Diff line change
`@@ -54,7 +54,7 @@ func DecodePrimitivePacket(buf []byte) (packet *PrimitivePacket, endPos int, siz`
`54`	`54`
`55`	`55`	`logger.Debugf(">>> sizeL=%v, length=%v, pos=%v, endPos=%v", sizeL, p.length, pos, endPos)`
`56`	`56`
`57`		`- if pos > endPos {`
	`57`	`+ if pos > endPos \|\| endPos > len(buf) \|\| pos > len(buf) {`
`58`	`58`	`return nil, 0, sizeL, fmt.Errorf("beyond the boundary, pos=%v, endPos=%v", pos, endPos)`
`59`	`59`	`}`
`60`	`60`	`p.valBuf = buf[pos:endPos]`