fix(prudp): Check for matching user PID and ticket source PID

PretendoNetwork · Feb 13, 2025 · f34f86f · f34f86f
1 parent 6ec5005
commit f34f86f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/prudp_endpoint.go b/prudp_endpoint.go
@@ -509,6 +509,10 @@ func (pep *PRUDPEndPoint) readKerberosTicket(payload []byte) ([]byte, types.PID,
 		return nil, 0, 0, err
 	}
 
+	if userPID != ticket.SourcePID {
+		return nil, 0, 0, errors.New("User PID and ticket source PID mismatch")
+	}
+
 	_, err = checkDataStream.ReadUInt32LE() // * CID of secure server station url
 	if err != nil {
 		return nil, 0, 0, err