nip19: guard against broken TLVs.

fixes https://github.com/nbd-wtf/go-nostr/issues/161
2025-09-02 12:30:17 +02:00 · 2024-12-18 11:53:10 -03:00
parent 2dba8fc3e0
commit d0476edd06
1 changed files with 4 additions and 0 deletions
--- a/nip19/utils.go
+++ b/nip19/utils.go
@@ -18,6 +18,10 @@ func readTLVEntry(data []byte) (typ uint8, value []byte) {

 	typ = data[0]
 	length := int(data[1])
+	if len(data) < 2+length {
+		return typ, nil
+	}
+
 	value = data[2 : 2+length]
 	return
 }