fix(prudp): Check for matching user PID and ticket source PID

This commit is contained in:
Daniel López Guimaraes 2025-02-13 21:50:11 +00:00
parent 6ec50052cd
commit f34f86f7b7
No known key found for this signature in database
GPG key ID: 6AC74DE3DEF050E0

View file

@ -509,6 +509,10 @@ func (pep *PRUDPEndPoint) readKerberosTicket(payload []byte) ([]byte, types.PID,
return nil, 0, 0, err return nil, 0, 0, err
} }
if userPID != ticket.SourcePID {
return nil, 0, 0, errors.New("User PID and ticket source PID mismatch")
}
_, err = checkDataStream.ReadUInt32LE() // * CID of secure server station url _, err = checkDataStream.ReadUInt32LE() // * CID of secure server station url
if err != nil { if err != nil {
return nil, 0, 0, err return nil, 0, 0, err