opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix unbounded memory usage in matrix media download (#1405)

Browse source
This commit is contained in:
Tejas1Koli 2026-03-12 13:51:20 +05:30
parent b4d00c631d
commit 882a3e1b87
1 changed files with 13 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
pkg/channels/matrix/matrix.go
View file

@ -12,6 +12,7 @@ import (
"strings"
"sync"
"time"
"io"
"github.com/gomarkdown/markdown"
mdhtml "github.com/gomarkdown/markdown/html"
@ -726,10 +727,21 @@ func (c *MatrixChannel) downloadMedia(
reqCtx, cancel := context.WithTimeout(dlCtx, 20*time.Second)
defer cancel()
data, err := c.client.DownloadBytes(reqCtx, parsed)
const maxMediaSize = 100 * 1024 * 1024 // 100MB cap
resp, err := c.client.Download(reqCtx, parsed)
if err != nil {
return "", err
}
defer resp.Body.Close()
data, err := io.ReadAll(io.LimitReader(resp.Body, int64(maxMediaSize)+1))
if err != nil {
return "", fmt.Errorf("read matrix media: %w", err)
}
if len(data) > maxMediaSize {
return "", fmt.Errorf("media exceeds size limit of %d bytes", maxMediaSize)
}
// Encrypted attachments put URL in msgEvt.File and require client-side decryption.
if msgEvt != nil && msgEvt.File != nil && msgEvt.URL == "" {