Applied-Software/ghostty
5
0
Fork 0
mirror of https://github.com/ghostty-org/ghostty.git synced 2025-07-16 08:46:08 +03:00
Code Issues Packages Projects Releases Wiki Activity

termio/exec: limit max apc string length

Browse Source
This commit is contained in:
Mitchell Hashimoto
2023-08-18 13:56:33 -07:00
parent 6e061fb344
commit bddf8a8cb3
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/termio/Exec.zig
View File

@ -1107,6 +1107,14 @@ const StreamHandler = struct {
} }
try self.apc_data.append(self.alloc, byte); try self.apc_data.append(self.alloc, byte);
// Prevent DoS attack.
const limit = 100 * 1024 * 1024; // 100MB
if (self.apc_data.items.len > limit) {
log.warn("APC command too large, ignoring", .{});
self.apc_state = .ignore;
self.apc_data.clearAndFree(self.alloc);
}
} }
pub fn apcEnd(self: *StreamHandler) !void { pub fn apcEnd(self: *StreamHandler) !void {