forgotten part

diff --git a/sapi/cgi/fastcgi.c b/sapi/cgi/fastcgi.c
index 85855036d31e9a97124a2373d3cf877059b687e0..d0700623519feb9b7a5b300d3785bd6301e5c238 100644 (file)
--- a/sapi/cgi/fastcgi.c
+++ b/sapi/cgi/fastcgi.c
@@ -717,6 +717,10 @@ static int fcgi_read_request(fcgi_request *req)
                padding = hdr.paddingLength;
 
                while (hdr.type == FCGI_PARAMS && len > 0) {
+                       if (len + padding > FCGI_MAX_LENGTH) {
+                               return 0;
+                       }
+
                        if (safe_read(req, buf, len+padding) != len+padding) {
                                req->keep = 0;
                                return 0;