--- a/libpurple/protocols/gg/lib/dcc7.c Thu May 22 18:35:00 2014 -0500 +++ b/libpurple/protocols/gg/lib/dcc7.c Mon Jun 16 23:01:47 2014 +0200 @@ -1540,7 +1540,7 @@ if (gg_fix32(pkt->magic) != GG_DCC7_RELAY_REPLY || gg_fix32(pkt->rcount) < 1 || - gg_fix32(pkt->rcount > 256) || + gg_fix32(pkt->rcount) > 256 || gg_fix32(pkt->len) < sizeof(*pkt) + gg_fix32(pkt->rcount) * sizeof(srv)) {