vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-31 14:48:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: reject malformed inspected tcp ports

Browse Source
This commit is contained in:
Peter Steinberger
2026-05-28 12:15:23 -04:00
parent 982e2cf0ef
commit c00ac952a8
2 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
src/infra/ports-inspect.ts
View File

@@ -76,19 +76,27 @@ function normalizeTcpHost(host: string): string {
return normalized.startsWith("::ffff:") ? normalized.slice("::ffff:".length) : normalized;
}
function parseTcpPort(raw: string | undefined): number | null {
if (!raw || !/^\d+$/.test(raw)) {
return null;
}
const port = Number(raw);
return Number.isSafeInteger(port) && port >= 0 && port <= 65_535 ? port : null;
}
function parseTcpEndpoint(raw: string): { host: string; port: number } | null {
const endpoint = raw.trim();
const bracketMatch = endpoint.match(/^\[([^\]]+)\]:(\d+)$/);
if (bracketMatch) {
const port = Number.parseInt(bracketMatch[2], 10);
return Number.isFinite(port) ? { host: normalizeTcpHost(bracketMatch[1]), port } : null;
const port = parseTcpPort(bracketMatch[2]);
return port === null ? null : { host: normalizeTcpHost(bracketMatch[1]), port };
}
const lastColon = endpoint.lastIndexOf(":");
if (lastColon <= 0 || lastColon >= endpoint.length - 1) {
return null;
}
const port = Number.parseInt(endpoint.slice(lastColon + 1), 10);
if (!Number.isFinite(port)) {
const port = parseTcpPort(endpoint.slice(lastColon + 1));
if (port === null) {
return null;
}
return { host: normalizeTcpHost(endpoint.slice(0, lastColon)), port };

2
src/infra/ports.test.ts
View File

@@ -206,6 +206,8 @@ describeUnix("inspectPortUsage", () => {
"p111\ncnode\nnTCP 127.0.0.1:50123->127.0.0.1:18789 (ESTABLISHED)\n" +
"p222\ncnode\nnTCP 127.0.0.1:18789->127.0.0.1:50123 (ESTABLISHED)\n" +
"p444\ncnode\nnTCP 127.0.0.1:50125->[::ffff:127.0.0.1]:18789 (ESTABLISHED)\n" +
"p555\ncnode\nnTCP 127.0.0.1:50126->127.0.0.1:18789abc (ESTABLISHED)\n" +
"p666\ncnode\nnTCP 127.0.0.1:50127->127.0.0.1:99999 (ESTABLISHED)\n" +
"p333\ncBrowser\nnTCP 127.0.0.1:50124->198.51.100.7:18789 (ESTABLISHED)\n",
stderr: "",
code: 0,