From 5533e38fbbdb7d91dc7de2dea7881cc46c6a2350 Mon Sep 17 00:00:00 2001 From: Arun Prakash Jana Date: Sun, 1 Mar 2020 18:59:27 +0530 Subject: [PATCH] Guard against too many key-value pairs --- src/nnn.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/nnn.c b/src/nnn.c index b31418cf..fdc4c3aa 100644 --- a/src/nnn.c +++ b/src/nnn.c @@ -2915,7 +2915,7 @@ static bool parsekvpair(kv **arr, char **envcpy, const uchar id, ushort *items) ++nextkey; } - if (!maxitems) + if (!maxitems || maxitems > 100) return FALSE; *arr = calloc(maxitems, sizeof(kv));