From 4302cfcbd69b969128805f2e19883fd2a8237120 Mon Sep 17 00:00:00 2001
From: Steven Tang <yc@steventang.net>
Date: Fri, 12 Aug 2022 17:25:43 +1000
Subject: [PATCH] fix: 500 on POST /api/heartbeats

---
 routes/api/heartbeat.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/routes/api/heartbeat.go b/routes/api/heartbeat.go
index 68e1bff..58574d8 100644
--- a/routes/api/heartbeat.go
+++ b/routes/api/heartbeat.go
@@ -79,6 +79,12 @@ func (h *HeartbeatApiHandler) Post(w http.ResponseWriter, r *http.Request) {
 	machineName := r.Header.Get("X-Machine-Name")
 
 	for _, hb := range heartbeats {
+		if hb == nil {
+			w.WriteHeader(http.StatusBadRequest)
+			w.Write([]byte("invalid heartbeat object"))
+			return
+		}
+
 		hb.OperatingSystem = opSys
 		hb.Editor = editor
 		hb.Machine = machineName