From 5533e38fbbdb7d91dc7de2dea7881cc46c6a2350 Mon Sep 17 00:00:00 2001
From: Arun Prakash Jana <engineerarun@gmail.com>
Date: Sun, 1 Mar 2020 18:59:27 +0530
Subject: [PATCH] Guard against too many key-value pairs

---
 src/nnn.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/nnn.c b/src/nnn.c
index b31418cf..fdc4c3aa 100644
--- a/src/nnn.c
+++ b/src/nnn.c
@@ -2915,7 +2915,7 @@ static bool parsekvpair(kv **arr, char **envcpy, const uchar id, ushort *items)
 		++nextkey;
 	}
 
-	if (!maxitems)
+	if (!maxitems || maxitems > 100)
 		return FALSE;
 
 	*arr = calloc(maxitems, sizeof(kv));
-- 
2.50.0