fixup

nodejs · May 13, 2024 · 88fe124 · 88fe124
1 parent 3823134
commit 88fe124
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/lib/web/websocket/receiver.js b/lib/web/websocket/receiver.js
@@ -12,7 +12,8 @@ const {
   websocketMessageReceived,
   utf8Decode,
   isControlFrame,
-  isTextBinaryFrame
+  isTextBinaryFrame,
+  isContinuationFrame
 } = require('./util')
 const { WebsocketFrameSend } = require('./frame')
 const { closeWebSocketConnection } = require('./connection')
@@ -121,6 +122,11 @@ class ByteParser extends Writable {
           return
         }
 
+        if (isContinuationFrame(opcode) && this.#fragments.length === 0) {
+          failWebsocketConnection(this.ws, 'Unexpected continuation frame')
+          return
+        }
+
         if (payloadLength <= 125) {
           this.#info.payloadLength = payloadLength
           this.#state = parserStates.READ_DATA