Decode: restrict timezone offset values (#696)

Don't allow hours greater than 24 and minutes greater than 60 per RFC 3339.
2021-12-02 17:59:32 -06:00
parent 9bf9be681e
commit f53bc740c1
2 changed files with 15 additions and 0 deletions
@@ -2632,6 +2632,14 @@ world'`,
 			desc: `invalid number of seconds digits with trailing digit`,
 			data: `a=0000-01-01 00:00:000000Z3`,
 		},
+		{
+			desc: `invalid zone offset hours`,
+			data: `a=0000-01-01 00:00:00+25:00`,
+		},
+		{
+			desc: `invalid zone offset minutes`,
+			data: `a=0000-01-01 00:00:00+00:61`,
+		},
 		{
 			desc: `invalid character in zone offset hours`,
 			data: `a=0000-01-01 00:00:00+0Z:00`,