From 75be55d7bd43bb415847f3e871bb81c8699a2967 Mon Sep 17 00:00:00 2001 From: Kim Alvefur Date: Tue, 19 Apr 2016 12:33:58 +0200 Subject: mod_bosh: Reject fractional 'wait' (See #343) --- plugins/mod_bosh.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'plugins') diff --git a/plugins/mod_bosh.lua b/plugins/mod_bosh.lua index 1f928eed..d317e4b9 100644 --- a/plugins/mod_bosh.lua +++ b/plugins/mod_bosh.lua @@ -261,7 +261,7 @@ function stream_callbacks.streamopened(context, attr) response:send(tostring(close_reply)); return; end - if not rid or (not wait and attr.wait or wait < 0) then + if not rid or (not wait and attr.wait or wait < 0 or wait % 1 ~= 0) then log("debug", "BOSH client sent invalid rid or wait attributes: rid=%s, wait=%s", tostring(attr.rid), tostring(attr.wait)); local close_reply = st.stanza("body", { xmlns = xmlns_bosh, type = "terminate", ["xmlns:stream"] = xmlns_streams, condition = "bad-request" }); -- cgit v1.2.3