From d393c329c3bd4f643c32dac47f40d2ea783f034d Mon Sep 17 00:00:00 2001 From: astaxie Date: Thu, 26 Sep 2013 21:06:37 +0800 Subject: [PATCH] protect parts's len --- controller.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/controller.go b/controller.go index 74c55b74..8bb64176 100644 --- a/controller.go +++ b/controller.go @@ -312,6 +312,10 @@ func (c *Controller) GetSecureCookie(Secret, key string) (string, bool) { parts := strings.SplitN(val, "|", 3) + if len(parts) != 3 { + return "", false + } + vs := parts[0] timestamp := parts[1] sig := parts[2]