diff options
| author | Kim Alvefur <zash@zash.se> | 2020-07-17 08:29:03 +0200 |
|---|---|---|
| committer | Kim Alvefur <zash@zash.se> | 2020-07-17 08:29:03 +0200 |
| commit | f1fcdfc2467753cc0f1ba3f48a64401395cba9af (patch) | |
| tree | d407b4ff63fc3457177f98d85e96ef7affc4f76d /plugins | |
| parent | d89a99eb4320d5b2d6067fde78be6c5706cac4ab (diff) | |
| download | prosody-f1fcdfc2467753cc0f1ba3f48a64401395cba9af.tar.gz prosody-f1fcdfc2467753cc0f1ba3f48a64401395cba9af.zip | |
mod_proxy65: Limit dump of invalid data to 300 bytes (like mod_c2s)
Diffstat (limited to 'plugins')
| -rw-r--r-- | plugins/mod_proxy65.lua | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/plugins/mod_proxy65.lua b/plugins/mod_proxy65.lua index aacf6309..bac36b55 100644 --- a/plugins/mod_proxy65.lua +++ b/plugins/mod_proxy65.lua @@ -44,7 +44,7 @@ function listener.onincoming(conn, data) end -- else error, unexpected input conn:write("\5\255"); -- send (SOCKS version 5, no acceptable method) conn:close(); - module:log("debug", "Invalid SOCKS5 greeting received: %q", data); + module:log("debug", "Invalid SOCKS5 greeting received: %q", data:sub(1, 300)); else -- connection request --local head = string.char( 0x05, 0x01, 0x00, 0x03, 40 ); -- ( VER=5=SOCKS5, CMD=1=CONNECT, RSV=0=RESERVED, ATYP=3=DOMAIMNAME, SHA-1 size ) if #data == 47 and data:sub(1,5) == "\5\1\0\3\40" and data:sub(-2) == "\0\0" then @@ -66,7 +66,7 @@ function listener.onincoming(conn, data) else -- error, unexpected input conn:write("\5\1\0\3\0\0\0"); -- VER, REP, RSV, ATYP, BND.ADDR (sha), BND.PORT (2 Byte) conn:close(); - module:log("debug", "Invalid SOCKS5 negotiation received: %q", data); + module:log("debug", "Invalid SOCKS5 negotiation received: %q", data:sub(1, 300)); end end end |