From d0476edd06bfb2a7a7f469526c77e5a06583f82d Mon Sep 17 00:00:00 2001 From: fiatjaf Date: Wed, 18 Dec 2024 11:53:10 -0300 Subject: [PATCH] nip19: guard against broken TLVs. fixes https://github.com/nbd-wtf/go-nostr/issues/161 --- nip19/utils.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/nip19/utils.go b/nip19/utils.go index 08aebe1..b182163 100644 --- a/nip19/utils.go +++ b/nip19/utils.go @@ -18,6 +18,10 @@ func readTLVEntry(data []byte) (typ uint8, value []byte) { typ = data[0] length := int(data[1]) + if len(data) < 2+length { + return typ, nil + } + value = data[2 : 2+length] return }