evo: fast-fail MnNetInfo::AddEntry() if invalid characters found

Author: kwvg

src/evo/netinfo.cpp

@@ -12,13 +12,25 @@ namespace {
 static std::unique_ptr<const CChainParams> g_main_params{nullptr};
 static const CService empty_service{CService()};
 
+static constexpr std::string_view SAFE_CHARS_IPPORT{"1234567890.[]:"};
+
 const bool IsNodeOnMainnet() { return Params().NetworkIDString() == CBaseChainParams::MAIN; }
 const CChainParams& MainParams()
 {
     // TODO: use real args here
     if (!g_main_params) g_main_params = CreateChainParams(ArgsManager{}, CBaseChainParams::MAIN);
     return *g_main_params;
 }
+
+bool MatchCharsFilter(const std::string& input, const std::string_view& filter)
+{
+    for (char c : input) {
+        if (filter.find(c) == std::string::npos) {
+            return false;
+        }
+    }
+    return true;
+}
 } // anonymous namespace
 
 bool NetInfoEntry::operator==(const NetInfoEntry& rhs) const
@@ -138,6 +150,10 @@ NetInfoStatus MnNetInfo::AddEntry(const std::string& input)
     if (!IsEmpty()) {
         return NetInfoStatus::MaxLimit;
     }
+    // Contains invalid characters, unlikely to pass Lookup(), fast-fail
+    if (!MatchCharsFilter(input, SAFE_CHARS_IPPORT)) {
+        return NetInfoStatus::BadInput;
+    }
     if (auto service = Lookup(input, /*portDefault=*/Params().GetDefaultPort(), /*fAllowLookup=*/false); service.has_value()) {
         const auto ret = ValidateService(service.value());
         if (ret == NetInfoStatus::Success) {