Skip to content

Commit aada6cb

Browse files
committed
Prevent SAKE from returning unsanitized Miis
1 parent cbd2475 commit aada6cb

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

sake/storage.go

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -244,11 +244,12 @@ func getMyRecords(moduleName string, profileId uint32, gameInfo common.GameInfo,
244244
return &errorResponse
245245

246246
case "mariokartwii/FriendInfo":
247+
mii, _ := database.GetMKWFriendInfoSanitized(pool, ctx, profileId)
247248
// Mario Kart Wii friend info
248249
values = map[string]StorageValue{
249250
"ownerid": uintValue(profileId),
250251
"recordid": intValue(int32(profileId)),
251-
"info": binaryDataValueBase64(database.GetMKWFriendInfo(pool, ctx, profileId)),
252+
"info": binaryDataValueBase64(mii),
252253
}
253254
}
254255

@@ -330,11 +331,12 @@ func searchForRecords(moduleName string, gameInfo common.GameInfo, request Stora
330331
return &errorResponse
331332
}
332333

334+
mii, _ := database.GetMKWFriendInfoSanitized(pool, ctx, uint32(ownerId))
333335
values = []map[string]StorageValue{
334336
{
335337
"ownerid": uintValue(uint32(ownerId)),
336338
"recordid": intValue(int32(ownerId)),
337-
"info": binaryDataValueBase64(database.GetMKWFriendInfo(pool, ctx, uint32(ownerId))),
339+
"info": binaryDataValueBase64(mii),
338340
},
339341
}
340342

0 commit comments

Comments
 (0)