tree 2c1384b4b5eb366570df2a4db9de2bc7653f8dcf
parent e397e3efacaeab1bc6cacc0dfdc259768aebfd8e
author Petteri Aimonen <jpa@git.mail.kapsi.fi> 1579542584 +0200
committer Petteri Aimonen <jpa@git.mail.kapsi.fi> 1579543153 +0200

Verify stream size before allocating string / bytes.

This stops ridicuously large mallocs from getting through
on length-limited streams or buffers. Typically you should
also override realloc() to limit allocation size yourself
if dealing with untrusted data in pointer mode, but this
at least limits the potential denial-of-service attacks.