From f9f6471b1ed431d638e40c60601bc61aa16f1092 Mon Sep 17 00:00:00 2001
From: selsta <selsta@sent.at>
Date: Wed, 22 Jul 2026 22:04:22 +0200
Subject: [PATCH] simplewallet: validate get_outs response size

---
 src/simplewallet/simplewallet.cpp | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/simplewallet/simplewallet.cpp b/src/simplewallet/simplewallet.cpp
index 39bf169f3..0ce71f571 100644
--- a/src/simplewallet/simplewallet.cpp
+++ b/src/simplewallet/simplewallet.cpp
@@ -6530,6 +6530,11 @@ bool simple_wallet::process_ring_members(const std::vector<tools::wallet2::pendi
         fail_msg_writer() << tr("failed to get output: ") << err;
         return false;
       }
+      if (res.outs.size() != req.outputs.size())
+      {
+        fail_msg_writer() << tr("daemon returned an invalid number of outputs");
+        return false;
+      }
       // make sure that returned block heights are less than blockchain height
       for (auto& res_out : res.outs)
       {