Also for the SELECT

matrix-org · Aug 29, 2023 · 008ffb8 · 008ffb8
1 parent 073c847
commit 008ffb8
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/state/device_data_table.go b/state/device_data_table.go
@@ -55,7 +55,14 @@ func (t *DeviceDataTable) Select(userID, deviceID string, swap bool) (result *in
 			return err
 		}
 		// unmarshal to swap
-		if err = cbor.Unmarshal(row.Data, &result); err != nil {
+		opts := cbor.DecOptions{
+			MaxMapPairs: 1000000000, // 1 billion :(
+		}
+		decMode, err := opts.DecMode()
+		if err != nil {
+			return err
+		}
+		if err = decMode.Unmarshal(row.Data, &result); err != nil {
 			return err
 		}
 		result.UserID = userID