check chunk length before deserialization

ian-shim · Feb 28, 2025 · 7a425ab · 7a425ab
1 parent 9fe61b5
commit 7a425ab
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/encoding/serialization.go b/encoding/serialization.go
@@ -35,6 +35,9 @@ func (c *Frame) SerializeGnark() ([]byte, error) {
 }
 
 func (c *Frame) DeserializeGnark(data []byte) (*Frame, error) {
+	if len(data) < bn254.SizeOfG1AffineCompressed {
+		return nil, fmt.Errorf("chunk length must be at least %d: %d given", bn254.SizeOfG1AffineCompressed, len(data))
+	}
 	var f Frame
 	buf := data
 	err := f.Proof.Unmarshal(buf[:bn254.SizeOfG1AffineCompressed])