merge-file: enforce MAX_XDIFF_SIZE on incoming files

diff --git a/builtin/merge-file.c b/builtin/merge-file.c
index 232b76857cf4f6dbd9bec12fa12266e1afc90a5c..04ae36a4528848fcdd10e0f11abdd8b01a2fd167 100644 (file)
--- a/builtin/merge-file.c
+++ b/builtin/merge-file.c
@@ -75,7 +75,8 @@ int cmd_merge_file(int argc, const char **argv, const char *prefix)
                        names[i] = argv[i];
                if (read_mmfile(mmfs + i, fname))
                        return -1;
-               if (buffer_is_binary(mmfs[i].ptr, mmfs[i].size))
+               if (mmfs[i].size > MAX_XDIFF_SIZE ||
+                   buffer_is_binary(mmfs[i].ptr, mmfs[i].size))
                        return error("Cannot merge binary files: %s",
                                        argv[i]);
        }