File 0300-bnc425457-2169514-limit_message_size.patch of Package sblim-sfcb
diff -up ./msgqueue.c.orig ./msgqueue.c
--- ./msgqueue.c.orig 2008-12-05 22:49:40.000000000 -0700
+++ ./msgqueue.c 2008-12-05 22:52:41.000000000 -0700
@@ -290,6 +290,9 @@ static int spRcvMsg(int *s, int *from, v
mqg->eintr=0;
if (*length) {
+ if (*length > 100000000UL) {
+ return spHandleError(s, em);
+ }
*data = malloc(spMsg.totalSize + 8);
if(*data == NULL) {
return spHandleError(s, em);