From 282eda719a303b4f5ae8ae05f0c11cac7b4a52ea Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Mon, 26 Oct 2026 22:16:34 +0100
Subject: reject and warn about too large delta blobs

---
 src/swarm/sync.rs | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'src/swarm/sync.rs')

diff --git a/src/swarm/sync.rs b/src/swarm/sync.rs
index 70ce28e..4e382ec 100644
--- a/src/swarm/sync.rs
+++ b/src/swarm/sync.rs
@@ -346,6 +346,11 @@ pub(crate) async fn handle_sync(
             return Ok(());
         }
     };
+    if payload.0.len() > crate::swarm::blob::MAX_SYNC_MESSAGE {
+        // Not decoded: a node of this version sends a delta instead.
+        warn!(peer = %peer, bytes = payload.0.len(), "Dropping a sync message larger than any sender should send");
+        return Ok(());
+    }
     state.stats.sync_received(payload.0.len());
 
     let applied = {
-- 
cgit v1.3.1