Fix TextPacket vulnerability

Fixed by: mc-zone.ru
pmmp · Jan 14, 2024 · 03879b4 · 03879b4
1 parent 1015502
commit 03879b4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/TextPacket.php b/src/TextPacket.php
@@ -117,6 +117,9 @@ protected function decodePayload(PacketSerializer $in) : void{
 			case self::TYPE_JUKEBOX_POPUP:
 				$this->message = $in->getString();
 				$count = $in->getUnsignedVarInt();
+				if ($count > 5){
+					throw new PacketDecodeException("Too many TextPacket::TYPE_JUKEBOX_POPUP");
+				}
 				for($i = 0; $i < $count; ++$i){
 					$this->parameters[] = $in->getString();
 				}