Security Bugfix

http://www.securityfocus.com/archive/1/345844/2003-11-24/2003-11-30/0

1 files changed, 11 insertions, 0 deletions

diff --git a/src/resize.c b/src/resize.c
index 6b5cef4..cae0f71 100644
--- a/src/resize.c
+++ b/src/resize.c
@@ -682,6 +682,17 @@ int wi, he, hi;
   if (wi == 0)
     he = hi = 0;
 
+  if (wi > 1000)
+    {
+      Msg(0, "Window width too large, truncated");
+      wi = 1000;
+    }
+  if (he > 1000)
+    {
+      Msg(0, "Window height too large, truncated");
+      he = 1000;
+    }
+
   if (p->w_width == wi && p->w_height == he && p->w_histheight == hi)
     {
       debug("ChangeWindowSize: No change.\n");