Avoid accepting suspiciously long URLs from the renderer. These can take down...

chrome/common/common_param_traits.cc

Index: chrome/common/common_param_traits.cc
===================================================================
--- chrome/common/common_param_traits.cc	(revision 35371)
+++ chrome/common/common_param_traits.cc	(working copy)
@@ -5,6 +5,7 @@
 #include "chrome/common/common_param_traits.h"
 
 #include "base/gfx/rect.h"
+#include "chrome/common/chrome_constants.h"
 #include "googleurl/src/gurl.h"
 #ifndef EXCLUDE_SKIA_DEPENDENCIES
 #include "third_party/skia/include/core/SkBitmap.h"
@@ -99,7 +100,7 @@
 
 bool ParamTraits<GURL>::Read(const Message* m, void** iter, GURL* p) {
   std::string s;
-  if (!m->ReadString(iter, &s)) {
+  if (!m->ReadString(iter, &s) || s.length() > chrome::kMaxURLChars) {
     *p = GURL();
     return false;
   }