fixed panic identified in fuzzing

drand · Jan 9, 2024 · 070afae · 070afae
1 parent 52b3df7
commit 070afae
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/internal/dkg/actions_passive.go b/internal/dkg/actions_passive.go
@@ -29,6 +29,9 @@ func (d *Process) Packet(ctx context.Context, packet *drand.GossipPacket) (*dran
 
 	packetName := packetName(packet)
 	packetSig := hex.EncodeToString(packet.Metadata.Signature)
+	if len(packetSig) < 8 {
+		return nil, errors.New("packet signature is too short")
+	}
 	shortSig := packetSig[0:8]
 	d.log.Debugw("processing DKG gossip packet", "type", packetName, "sig", shortSig)
 	_, span := tracer.NewSpan(ctx, fmt.Sprintf("packet.%s", packetName))