From 4f6652f356f804403f46ecbbb8b90c1c03abbc64 Mon Sep 17 00:00:00 2001
From: selsta <selsta@sent.at>
Date: Tue, 9 Jun 2026 21:36:51 +0200
Subject: net: cap aggregate ZMQ receive size

---
 src/net/zmq.cpp | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'src/net/zmq.cpp')

diff --git a/src/net/zmq.cpp b/src/net/zmq.cpp
index 2b3ca8376..4a9d3e162 100644
--- a/src/net/zmq.cpp
+++ b/src/net/zmq.cpp
@@ -150,6 +150,12 @@ namespace zmq
                     if ((last = zmq_msg_recv(part.handle(), socket, flags)) < 0)
                         return last;
 
+                    if (max_message_size < payload.size() ||
+                        max_message_size - payload.size() < part.size())
+                    {
+                        errno = EMSGSIZE;
+                        return -1;
+                    }
                     payload.append(part.data(), part.size());
                     if (!zmq_msg_more(part.handle()))
                         break;
-- 
cgit v1.2.3