stream: reject overly long URLs

1 files changed, 4 insertions, 0 deletions

diff --git a/stream/stream.c b/stream/stream.c
index 1e1c5eee4e..4759a01abe 100644
--- a/stream/stream.c
+++ b/stream/stream.c
@@ -20,6 +20,7 @@
 #include <stdlib.h>
 #include <sys/types.h>
 #include <unistd.h>
+#include <limits.h>
 #include <errno.h>
 
 #include <strings.h>
@@ -348,6 +349,9 @@ struct stream *stream_create(const char *url, int flags,
     struct stream *s = NULL;
     assert(url);
 
+    if (strlen(url) > INT_MAX / 8)
+        goto done;
+
     // Open stream proper
     bool unsafe = false;
     for (int i = 0; stream_list[i]; i++) {