From 1202494479073f5c27e06bc3ce042ccc003be7a9 Mon Sep 17 00:00:00 2001 From: Roman Khimov Date: Mon, 12 Apr 2021 12:14:33 +0300 Subject: [PATCH] state: reject too big transfers, fix #1900 --- pkg/core/state/nep5.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkg/core/state/nep5.go b/pkg/core/state/nep5.go index a87685293..606052c12 100644 --- a/pkg/core/state/nep5.go +++ b/pkg/core/state/nep5.go @@ -188,6 +188,9 @@ func NEP5TransferFromNotification(ne NotificationEvent, txHash util.Uint256, hei if !ok { return nil, errors.New("wrong amount type") } + if len(bs) > amountSize { + return nil, errors.New("integer overflow") + } amount = emit.BytesToInt(bs) } toAddr := parseUint160(to)