From 7cc06bd1c682b2d9e533cf5f70be8214248b3886 Mon Sep 17 00:00:00 2001 From: Andrey Sidorov Date: Sat, 27 Jul 2024 21:50:11 +1000 Subject: [PATCH] don't read past the buffer length --- lib/packets/packet.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/packets/packet.js b/lib/packets/packet.js index 152d3d98c8..42241ae950 100644 --- a/lib/packets/packet.js +++ b/lib/packets/packet.js @@ -610,8 +610,9 @@ class Packet { parseVector() { const bufLen = this.readLengthCodedNumber(); + const vectorEnd = this.offset + bufLen; const result = []; - while (this.offset < this.end) { + while (this.offset < vectorEnd && this.offset < this.end) { result.push(this.readFloat()); } return result;