Chore: fix socks reader overflow & update dependencies

2019-05-06 21:00:29 +08:00
parent f352f4479e
commit cff4841f3e
3 changed files with 26 additions and 23 deletions
--- a/component/socks5/socks5.go
+++ b/component/socks5/socks5.go
@ -166,8 +166,9 @@ func readAddr(r io.Reader, b []byte) (Addr, error) {
 		if err != nil {
 			return nil, err
 		}
-		_, err = io.ReadFull(r, b[2:2+b[1]+2])
-		return b[:1+1+b[1]+2], err
+		domainLength := uint16(b[1])
+		_, err = io.ReadFull(r, b[2:2+domainLength+2])
+		return b[:1+1+domainLength+2], err
 	case AtypIPv4:
 		_, err = io.ReadFull(r, b[1:1+net.IPv4len+2])
 		return b[:1+net.IPv4len+2], err