jpeg pushed a commit to branch master. http://git.enlightenment.org/core/efl.git/commit/?id=6ace8313728b31f602af8af90dbcb686031be562
commit 6ace8313728b31f602af8af90dbcb686031be562 Author: Jean-Philippe Andre <jp.an...@samsung.com> Date: Mon Oct 27 22:16:53 2014 +0900 Evas cserve2: Check message size Fixes CID 1039570 --- src/bin/evas/evas_cserve2_usage.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/bin/evas/evas_cserve2_usage.c b/src/bin/evas/evas_cserve2_usage.c index b1946ad..449c9fd 100644 --- a/src/bin/evas/evas_cserve2_usage.c +++ b/src/bin/evas/evas_cserve2_usage.c @@ -133,6 +133,10 @@ _server_read(int *size) if (n < 0) return NULL; + // We don't expect large messages + if (sr_size < 0 || sr_size > 0x10000) + return NULL; + sr_buf = malloc(sr_size); get_data: --