From 515b8bebb6dfdf173f65beda6eb5f62f7e84c87d Mon Sep 17 00:00:00 2001
From: Bruno Jesus <00cpxxx@gmail.com>
Date: Fri, 30 May 2014 21:59:08 -0300
Subject: [PATCH] kernel32: Limit the environment variable size to 32767 in
 GetEnvironmentVariable.

---
 dlls/kernel32/environ.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/dlls/kernel32/environ.c b/dlls/kernel32/environ.c
index b6b3124cbcd..14283f8b9f0 100644
--- a/dlls/kernel32/environ.c
+++ b/dlls/kernel32/environ.c
@@ -176,6 +176,8 @@ DWORD WINAPI GetEnvironmentVariableA( LPCSTR name, LPSTR value, DWORD size )
         return 0;
     }
 
+    /* limit the size to sane values */
+    size = min(size, 32767);
     if (!(valueW = HeapAlloc(GetProcessHeap(), 0, size * sizeof(WCHAR))))
         return 0;