From 9b464e09326e6df53e0d12bbd43c3f387aa9b784 Mon Sep 17 00:00:00 2001 From: Derrick Hammer Date: Wed, 24 Jan 2024 01:51:29 -0500 Subject: [PATCH] fix: ensure we actually have a full cid --- encoding/cid.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/encoding/cid.go b/encoding/cid.go index 5894f4f..ee4161f 100644 --- a/encoding/cid.go +++ b/encoding/cid.go @@ -279,6 +279,10 @@ func initCID(bytes []byte) (*CID, error) { return NewCID(cidType, *hash, 0), nil } + if len(bytes) < 34 { + return nil, errors.New("invalid cid") + } + hashBytes := bytes[1:34] hash := NewMultihash(hashBytes)