Guard against too many key-value pairs

xorllc · Mar 1, 2020 · 5533e38 · 5533e38
1 parent db129c9
commit 5533e38
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/nnn.c b/src/nnn.c
@@ -2915,7 +2915,7 @@ static bool parsekvpair(kv **arr, char **envcpy, const uchar id, ushort *items)
 		++nextkey;
 	}
 
-	if (!maxitems)
+	if (!maxitems || maxitems > 100)
 		return FALSE;
 
 	*arr = calloc(maxitems, sizeof(kv));