File 0300-bnc425457-2169514-limit_message_size.patch of Package sblim-sfcb
diff -up ./msgqueue.c.orig ./msgqueue.c --- ./msgqueue.c.orig 2008-12-05 22:49:40.000000000 -0700 +++ ./msgqueue.c 2008-12-05 22:52:41.000000000 -0700 @@ -290,6 +290,9 @@ static int spRcvMsg(int *s, int *from, v mqg->eintr=0; if (*length) { + if (*length > 100000000UL) { + return spHandleError(s, em); + } *data = malloc(spMsg.totalSize + 8); if(*data == NULL) { return spHandleError(s, em);