From d0191cb5ed5665e5b5dc5f16524614b4b780dc36 Mon Sep 17 00:00:00 2001
From: eugene <elzeigel@gmail.com>
Date: Fri, 30 Jul 2021 11:41:11 -0400
Subject: [PATCH] rpcserver: validate FinalCltvDelta and CltvLimit for REST

Missed this check in PR #5293.
---
 rpcserver.go | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/rpcserver.go b/rpcserver.go
index 92d21cc1b..a15235b92 100644
--- a/rpcserver.go
+++ b/rpcserver.go
@@ -4339,6 +4339,14 @@ func (r *rpcServer) extractPaymentIntent(rpcPayReq *rpcPaymentRequest) (rpcPayme
 			return payIntent, err
 		}
 
+		// Do bounds checking with the block padding.
+		err = routing.ValidateCLTVLimit(
+			payIntent.cltvLimit, payIntent.cltvDelta, true,
+		)
+		if err != nil {
+			return payIntent, err
+		}
+
 		return payIntent, nil
 	}