LonamiWebs/Telethon
1
1
Fork 0
mirror of https://github.com/LonamiWebs/Telethon.git synced 2025-07-15 02:22:22 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix MTProtoState to check if remote msg_id is correct (#3753)

Browse Source
This commit is contained in:
Stanislav 2022-05-18 09:59:55 +00:00 committed by GitHub
parent 2357116f01
commit 91b51b4769
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
telethon/_network/mtprotostate.py
View File

@ -52,7 +52,7 @@ class MTProtoState:
self.time_offset = 0 self.time_offset = 0
self.salt = 0 self.salt = 0
self.id = self._sequence = self._last_msg_id = None self.id = self._sequence = self._last_msg_id = self._last_remote_msg_id = None
self.reset() self.reset()
def reset(self): def reset(self):
@ -63,6 +63,7 @@ class MTProtoState:
self.id = struct.unpack('q', os.urandom(8))[0] self.id = struct.unpack('q', os.urandom(8))[0]
self._sequence = 0 self._sequence = 0
self._last_msg_id = 0 self._last_msg_id = 0
self._last_remote_msg_id = 0
def update_message_id(self, message): def update_message_id(self, message):
""" """
@ -158,6 +159,10 @@ class MTProtoState:
raise SecurityError('Server replied with a wrong session ID') raise SecurityError('Server replied with a wrong session ID')
remote_msg_id = reader.read_long() remote_msg_id = reader.read_long()
if remote_msg_id <= self._last_remote_msg_id:
raise SecurityError('Server replied with a wrong message ID')
self._last_remote_msg_id = remote_msg_id
remote_sequence = reader.read_int() remote_sequence = reader.read_int()
reader.read_int() # msg_len for the inner object, padding ignored reader.read_int() # msg_len for the inner object, padding ignored