MirrorHub/construct
0
0
Fork 0
mirror of https://github.com/matrix-construct/construct synced 2024-06-10 14:08:56 +02:00
Code Issues Releases Wiki Activity

ircd:Ⓜ️:user::devices: Drop updates from unknown users.

Browse source
This commit is contained in:
Jason Volk 2020-04-06 10:45:29 -07:00
parent 9a0a3dfbf1
commit dcd50f3427
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
matrix/user_devices.cc
View file

@ -59,6 +59,19 @@ ircd::m::user::devices::update(const device_list_update &update)
json::at<"user_id"_>(update)
};
// Don't create unknown users on this codepath since there's no efficient
// check if this is just spam; updates for unknowns are just dropped here.
if(!exists(user))
{
log::derror
{
log, "Refusing device update for unknown user %s",
string_view{user.user_id},
};
return false;
}
const m::user::devices devices
{
user