p2p/discover: apply netrestrict in discv5 response handler (#25304)

2022-07-15 18:37:51 +02:00
parent e3df3d34cf
commit a9ef135e2d
1 changed files with 3 additions and 0 deletions
@@ -407,6 +407,9 @@ func (t *UDPv5) verifyResponseNode(c *callV5, r *enr.Record, distances []uint, s
 	if err := netutil.CheckRelayIP(c.node.IP(), node.IP()); err != nil {
 		return nil, err
 	}
+	if t.netrestrict != nil && !t.netrestrict.Contains(node.IP()) {
+		return nil, errors.New("not contained in netrestrict list")
+	}
 	if c.node.UDP() <= 1024 {
 		return nil, errLowPort
 	}