From 9f575bd416e1f7afbd11d4b221074f34bb89605c Mon Sep 17 00:00:00 2001
From: Dan Engelbrecht <dan.engelbrecht@epicgames.com>
Date: Thu, 4 Sep 2025 13:17:25 +0200
Subject: add validation of compact binary payloads before reading them (#483)

* add validation of compact binary payloads before reading them
---
 src/zencore/compactbinaryutil.cpp | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 src/zencore/compactbinaryutil.cpp

(limited to 'src/zencore/compactbinaryutil.cpp')

diff --git a/src/zencore/compactbinaryutil.cpp b/src/zencore/compactbinaryutil.cpp
new file mode 100644
index 000000000..c8cde21c3
--- /dev/null
+++ b/src/zencore/compactbinaryutil.cpp
@@ -0,0 +1,33 @@
+// Copyright Epic Games, Inc. All Rights Reserved.
+
+#include <zencore/compactbinaryutil.h>
+
+#include <zencore/compress.h>
+#include <zencore/filesystem.h>
+
+namespace zen {
+
+CbObject
+ValidateAndReadCompactBinaryObject(const SharedBuffer&& Payload, CbValidateError& OutError)
+{
+	if (Payload.GetSize() > 0)
+	{
+		if (OutError = ValidateCompactBinary(Payload.GetView(), CbValidateMode::Default); OutError == CbValidateError::None)
+		{
+			return CbObject(std::move(Payload));
+		}
+	}
+	return CbObject();
+}
+
+CbObject
+ValidateAndReadCompactBinaryObject(const CompressedBuffer&& Payload, CbValidateError& OutError)
+{
+	if (CompositeBuffer Decompressed = Payload.DecompressToComposite())
+	{
+		return ValidateAndReadCompactBinaryObject(std::move(Decompressed).Flatten(), OutError);
+	}
+	return CbObject();
+}
+
+}  // namespace zen
-- 
cgit v1.2.3