From: Alban Crequy <alban.crequy@collabora.co.uk>
Date: Thu, 10 Jul 2014 14:08:06 +0000 (+0100)
Subject: system bus limit: use max_replies_per_connection=128 by default
X-Git-Tag: dbus-1.8.8~10
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5bc7f9519ebc6117ba300c704794b36b87c2194b;p=thirdparty%2Fdbus.git

system bus limit: use max_replies_per_connection=128 by default

This addresses CVE-2014-3638.

Bug: https://bugs.freedesktop.org/show_bug.cgi?id=81053
Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
---

diff --git a/bus/config-parser.c b/bus/config-parser.c
index a6a8e1cfb..7217531cc 100644
--- a/bus/config-parser.c
+++ b/bus/config-parser.c
@@ -467,7 +467,7 @@ bus_config_parser_new (const DBusString      *basedir,
       /* this is effectively a limit on message queue size for messages
        * that require a reply
        */
-      parser->limits.max_replies_per_connection = 1024*8;
+      parser->limits.max_replies_per_connection = 128;
     }
       
   parser->refcount = 1;