put some obsurd limit on client_gets() input. So somebody can't blow you

out of memeory.

diff --git a/citadel/sysdep.c b/citadel/sysdep.c
index ad9d0f820726c95ecda6fc023e93fb0df2c5a3b5..31ec472721db67f1c4902281863812ce27a26a72 100644 (file)
--- a/citadel/sysdep.c
+++ b/citadel/sysdep.c
@@ -662,6 +662,8 @@ int client_gets(char **retbuf)
         retval = client_read(b+i, 1);
         if (retval != 1 || b[i] == '\n')
           break;
+        if (i == 1024*1024) // set some obscene upper limit
+          break;
         i++;
         if (i >= sz)
           {