--- a/libpurple/protocols/yahoo/yahoo_packet.c Wed Mar 25 07:12:28 2009 +0000 +++ b/libpurple/protocols/yahoo/yahoo_packet.c Thu Mar 26 03:40:59 2009 +0000 @@ -201,6 +201,8 @@ } pos += 2; + if (pos + 1 > len) break; + /* Skip over garbage we've noticed in the mail notifications */ if (data[0] == '9' && data[pos] == 0x01) pos++;