--- src/search.c Tue Jun 26 10:55:17 2001 +++ src/search.c Wed May 8 15:17:12 2002 @@ -1403,6 +1403,13 @@ */ if(!UDM_STRNCMP(token,"q=")){ char str[UDMSTRSIZ]=""; + /* Really temporary security fix */ + if(strlen(token) > 512) + { + printf("Query string too long\n"); + exit(1); + } + /* q1-- */ query_words=strdup(UdmUnescapeCGIQuery(str,token+2)); query_url_escaped=strdup(UdmEscapeURL(str,query_words)); query_form_escaped=UdmHtmlSpecialChars(query_words);