CGI params is limited to 100

[aboudreault]

Though the max cgi params is very big and that there are only few cases that need more, I'm going to remove that limit and put this dynamic rather than static.

[aboudreault]

Fixed and committed in r10645.

[rouault]

I'm wondering if the results of the realloc shoudln't be checked ? There might be a risk that an attacker would provide a huge number of cgi parameters to cause a segfault and perhaps worse

[aboudreault]

umm... that's right. I'm going to add a check tomorrow to prevent this.

[tamas]

I've also added a fix for the mapscript problems introduced with the change above, see: r10648

[warmerdam]

One more fix in the php bindings (r10649).

[aboudreault]

Thanks for fixing bindings guys. I've added realloc checks in r10659 to prevent seg fault.

[aboudreault]

FYI, I had concerns about the way I did it in r10659. I've modified a little bit in r10664 to be sure. Anyway, this will probably be changed during the MALLOC ticket #3559.