adam/znc
1
0
Fork 0
mirror of https://github.com/znc/znc.git synced 2026-08-10 19:02:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2014 from MarkLee131/fix/parseservertime-clamp-range

Browse Source 
Utils: reject out-of-range years in ParseServerTime
This commit is contained in:
Alexey Sokolov
2026-04-27 01:43:24 +01:00
committed by GitHub
parent 7456cbaf02 7c47afa888
commit 866303eef0
2 changed files with 38 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Utils.cpp
+13 -2
View File
@@ -568,10 +568,21 @@ CString CUtils::FormatServerTime(const timeval& tv) {
timeval CUtils::ParseServerTime(const CString& sTime) {
using namespace std::chrono;
system_clock::time_point tp;
cctz::parse("%Y-%m-%dT%H:%M:%E*SZ", sTime, cctz::utc_time_zone(), &tp);
struct timeval tv;
memset(&tv, 0, sizeof(tv));
// Reject obviously out-of-range years up front so we don't hand cctz
// an input whose internal `seconds * 1_000_000` conversion would
// overflow signed int64 (UB). A 5-digit year is plenty for any
// legitimate IRCv3 @time tag.
CString sYear = sTime.Token(0, false, "-");
if (sYear.length() > 5) {
return tv;
}
system_clock::time_point tp;
if (!cctz::parse("%Y-%m-%dT%H:%M:%E*SZ", sTime, cctz::utc_time_zone(),
&tp)) {
return tv;
}
microseconds usec = duration_cast<microseconds>(tp.time_since_epoch());
tv.tv_sec = usec.count() / 1000000;
tv.tv_usec = usec.count() % 1000000;