iarv/mc-webui
1
0
Fork 1
mirror of https://github.com/MarekWo/mc-webui.git synced 2026-03-28 17:42:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: Validate GPS coordinates from advert payloads

Browse Source 
Discard NaN, Infinity, and out-of-range lat/lon values from
struct.unpack to prevent JSON parse errors in browser.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
MarekWo
2026-02-22 13:10:34 +01:00
parent 247b11e1e9
commit 587bc8cb9f
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/contacts_cache.py
View File

@@ -11,6 +11,7 @@ Each line: {"public_key": "...", "name": "...", "first_seen": ts, "last_seen": t
import json
import logging
import math
import struct
import time
from pathlib import Path
@@ -184,6 +185,11 @@ def parse_advert_payload(pkt_payload_hex: str):
if has_location:
if len(raw) >= 109:
lat, lon = struct.unpack('<ff', raw[101:109])
# Validate: discard NaN, Infinity, and out-of-range values
if (math.isnan(lat) or math.isnan(lon) or
math.isinf(lat) or math.isinf(lon) or
not (-90 <= lat <= 90) or not (-180 <= lon <= 180)):
lat, lon = 0.0, 0.0
name_offset += 8
if not has_name: