plugin: reject negative file indexes

Reported by Joe Doyle of Trail of Bits.
2026-09-04 15:17:04 +00:00 · 2026-08-29 19:30:10 +02:00
parent e8d1b2f216
commit 352cb3e133
2 changed files with 20 additions and 0 deletions
@@ -399,6 +399,9 @@ ReadLoop:
 			if err != nil {
 				return p.fatalf("failed to parse recipient-stanza stanza argument: %v", err)
 			}
+			if i < 0 {
+				return p.fatalf("unexpected file index %d, previous was %d", i, len(files)-1)
+			}
 			ss := &age.Stanza{Type: s.Args[1], Args: s.Args[2:], Body: s.Body}
 			switch i {
 			case len(files):