system bus limit: use max_replies_per_connection=128 by default

This addresses CVE-2014-3638.

Bug: https://bugs.freedesktop.org/show_bug.cgi?id=81053
Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>

diff --git a/bus/config-parser.c b/bus/config-parser.c
index a6a8e1cfbfce8dcd58e7ade3d8d59ad5b9c2f928..7217531cc51052c9990ef1df9f6388ea62ed90cf 100644 (file)
--- a/bus/config-parser.c
+++ b/bus/config-parser.c
@@ -467,7 +467,7 @@ bus_config_parser_new (const DBusString      *basedir,
       /* this is effectively a limit on message queue size for messages
        * that require a reply
        */
-      parser->limits.max_replies_per_connection = 1024*8;
+      parser->limits.max_replies_per_connection = 128;
     }
       
   parser->refcount = 1;