From 5772a5483c1bb60149b55df6650444da7fa46c23 Mon Sep 17 00:00:00 2001
From: Lonami Exo <totufals@hotmail.com>
Date: Wed, 13 Feb 2019 09:16:34 +0100
Subject: [PATCH] Check dc_id in resolve_bot_file_id

---
 telethon/utils.py | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/telethon/utils.py b/telethon/utils.py
index 8e9d8a2f..b692cdf0 100644
--- a/telethon/utils.py
+++ b/telethon/utils.py
@@ -905,6 +905,16 @@ def resolve_bot_file_id(file_id):
     data = data[:-1]
     if len(data) == 24:
         file_type, dc_id, media_id, access_hash = struct.unpack('<iiqq', data)
+
+        if not (1 <= dc_id <= 5):
+            # Valid `file_id`'s must have valid DC IDs. Since this method is
+            # called when sending a file and the user may have entered a path
+            # they believe is correct but the file doesn't exist, this method
+            # may detect a path as "valid" bot `file_id` even when it's not.
+            # By checking the `dc_id`, we greatly reduce the chances of this
+            # happening.
+            return None
+
         attributes = []
         if file_type == 3 or file_type == 9:
             attributes.append(types.DocumentAttributeAudio(
@@ -942,6 +952,9 @@ def resolve_bot_file_id(file_id):
         (file_type, dc_id, media_id, access_hash,
             volume_id, secret, local_id) = struct.unpack('<iiqqqqi', data)
 
+        if not (1 <= dc_id <= 5):
+            return None
+
         # Thumbnails (small) always have ID 0; otherwise size 'x'
         photo_size = 's' if media_id or access_hash else 'x'
         return types.Photo(id=media_id, access_hash=access_hash, sizes=[