fix(coap-server): ignore incoming requests with an invalid source port (

#1188) * fix(coap-server): ignore incoming messages with an invalid source port * fixup! fix(coap-server): ignore incoming messages with an invalid source port * fixup! fix(coap-server): ignore incoming messages with an invalid source port
eclipse-thingweb · Dec 12, 2023 · f22fe0c · f22fe0c
1 parent 1db1c11
commit f22fe0c
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/packages/binding-coap/src/coap-server.ts b/packages/binding-coap/src/coap-server.ts
@@ -435,6 +435,14 @@ export default class CoapServer implements ProtocolServer {
     }
 
     private async handleRequest(req: IncomingMessage, res: OutgoingMessage) {
+        const sourcePort = req.rsinfo.port;
+        const hasInvalidPortRange = sourcePort < 1 || sourcePort > 65535;
+        if (hasInvalidPortRange) {
+            // Ignore requests with an invalid source port
+            // See https://github.com/eclipse-thingweb/node-wot/issues/1182
+            return;
+        }
+
         const origin = this.formatRequestOrigin(req);
 
         debug(