fix(parse-http): ignore announcements from peers with invalid announc…

…ement ports. (#513)
webtorrent · Mar 12, 2024 · fe75272 · fe75272
1 parent ea1e78e
commit fe75272
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/server/parse-http.js b/lib/server/parse-http.js
@@ -22,7 +22,7 @@ export default function (req, opts) {
     params.peer_id = bin2hex(params.peer_id)
 
     params.port = Number(params.port)
-    if (!params.port) throw new Error('invalid port')
+    if (!params.port || params.port <= 0 || params.port > 65535) throw new Error('invalid port')
 
     params.left = Number(params.left)
     if (Number.isNaN(params.left)) params.left = Infinity