From 703667a98dcfbac81d38c2d611dae849302fd9f7 Mon Sep 17 00:00:00 2001
From: Michael Lotz <mmlr@mlotz.ch>
Date: Tue, 21 Nov 2017 21:27:35 +0100
Subject: [PATCH] RemoteEventStream: Guard against unreasonably large input.

---
 src/servers/app/drawing/interface/remote/RemoteEventStream.cpp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/servers/app/drawing/interface/remote/RemoteEventStream.cpp b/src/servers/app/drawing/interface/remote/RemoteEventStream.cpp
index c04a25af3b..11a6a0c9ec 100644
--- a/src/servers/app/drawing/interface/remote/RemoteEventStream.cpp
+++ b/src/servers/app/drawing/interface/remote/RemoteEventStream.cpp
@@ -169,6 +169,9 @@ RemoteEventStream::EventReceived(RemoteMessage& message)
 			if (message.Read(numBytes) != B_OK)
 				break;
 
+			if (numBytes > 1000)
+				break;
+
 			char* bytes = (char*)malloc(numBytes + 1);
 			if (bytes == NULL)
 				break;