From fa57093459ee0f184473b0f26869aaaf2830e34a Mon Sep 17 00:00:00 2001
From: aozhiwei <aozhiwei@kingsome.cn>
Date: Tue, 8 Nov 2022 12:47:33 +0800
Subject: [PATCH] 1

---
 webapp/controller/BlockChainController.class.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/webapp/controller/BlockChainController.class.php b/webapp/controller/BlockChainController.class.php
index 57dc8f18..b335d115 100644
--- a/webapp/controller/BlockChainController.class.php
+++ b/webapp/controller/BlockChainController.class.php
@@ -408,6 +408,12 @@ class BlockChainController extends BaseAuthedController {
         $chipIds = explode('|', getReqVal('chip_ids', ''));
         $slotIds = explode('|', getReqVal('slot_ids', ''));
 
+        if (count($chipIds) != count($slotIds) ||
+            count($chipIds) < 0) {
+            myself()->_rspErr(101, 'chip_ids paramater error');
+            return;
+        }
+
         switch ($type) {
         case 1:
         {