fixed possible DoS - there was no limit on the number of addr entries