recording: reject a zero-length window

1 files changed, 5 insertions, 2 deletions

diff --git a/src/config.rs b/src/config.rs
index 95c1a18..e55226c 100644
--- a/src/config.rs
+++ b/src/config.rs
@@ -205,8 +205,11 @@ impl Config {
                 .parse()
                 .unwrap_or(true),
             recording_window_seconds: env::var("RECORDING_WINDOW_SECONDS")
-                .unwrap_or_else(|_| "900".into())
-                .parse()
+                .ok()
+                .and_then(|value| value.parse::<u64>().ok())
+                // 0 would divide by zero in the mixer; cap the ring so a typo
+                // cannot allocate an unbounded amount of memory.
+                .filter(|seconds| (1..=3600).contains(seconds))
                 .unwrap_or(900),
             copyparty_url: env::var("COPYPARTY_URL")
                 .unwrap_or_else(|_| "http://localhost:3939".into()),