Check U16 bounds of /config/networkopenduration

hanskroner · Nov 9, 2019 · 54efc6e · 54efc6e
1 parent 46dcde9
commit 54efc6e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rest_configuration.cpp b/rest_configuration.cpp
@@ -1922,7 +1922,7 @@ int DeRestPluginPrivate::modifyConfig(const ApiRequest &req, ApiResponse &rsp)
     {
         int seconds = map["networkopenduration"].toInt(&ok);
 
-        if (!ok)
+        if (!ok || seconds < 0 || seconds > UINT16_MAX)
         {
             rsp.list.append(errorToMap(ERR_INVALID_VALUE, QString("/config/networkopenduration"), QString("invalid value, %1, for parameter, networkopenduration").arg(map["networkopenduration"].toString())));
             rsp.httpStatus = HttpStatusBadRequest;