LBRYCommunity/lbrycrd
1
0
Fork 0
Code Issues 29 Pull requests 1 Projects Releases 32 Packages Wiki Activity

limit length of generated URI to 255 chars to prevent a DoS against the QR-Code dialog

Browse source
This commit is contained in:
Philip Kaufmann 2012-04-12 18:39:22 +02:00
parent 1e8c62b29c
commit b1a99c3a1f
1 changed files with 23 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
src/qt/qrcodedialog.cpp
View file

@ -35,6 +35,11 @@ QRCodeDialog::~QRCodeDialog()
void QRCodeDialog::genCode() void QRCodeDialog::genCode()
{ {
QString uri = getURI(); QString uri = getURI();
if (uri != "")
{
ui->lblQRCode->setText("");
QRcode *code = QRcode_encodeString(uri.toUtf8().constData(), 0, QR_ECLEVEL_L, QR_MODE_8, 1); QRcode *code = QRcode_encodeString(uri.toUtf8().constData(), 0, QR_ECLEVEL_L, QR_MODE_8, 1);
myImage = QImage(code->width + 8, code->width + 8, QImage::Format_RGB32); myImage = QImage(code->width + 8, code->width + 8, QImage::Format_RGB32);
myImage.fill(0xffffff); myImage.fill(0xffffff);
@ -49,6 +54,9 @@ void QRCodeDialog::genCode()
} }
QRcode_free(code); QRcode_free(code);
ui->lblQRCode->setPixmap(QPixmap::fromImage(myImage).scaled(300, 300)); ui->lblQRCode->setPixmap(QPixmap::fromImage(myImage).scaled(300, 300));
}
else
ui->lblQRCode->setText(tr("Resulting URI too long, try to reduce the text for label / message."));
} }
QString QRCodeDialog::getURI() QString QRCodeDialog::getURI()
@ -81,7 +89,11 @@ QString QRCodeDialog::getURI()
paramCount++; paramCount++;
} }
// limit URI length to 255 chars, to prevent a DoS of the QR-Code dialog
if (ret.length() < 256)
return ret; return ret;
else
return QString("");
} }
void QRCodeDialog::on_lnReqAmount_textChanged(const QString &arg1) void QRCodeDialog::on_lnReqAmount_textChanged(const QString &arg1)