libpurple/protocols/msn/slplink.c

changeset 23534
a0ad4f673b3f
parent 23532
bc03c7494ba4
parent 23199
c8a241b5a5b5
child 23822
7c6240967429
--- a/libpurple/protocols/msn/slplink.c	Thu Jun 26 09:14:42 2008 +0000
+++ b/libpurple/protocols/msn/slplink.c	Thu Jun 26 19:05:27 2008 +0000
@@ -593,7 +593,7 @@
 	}
 	else if (slpmsg->size)
 	{
-		if (offset < 0 || (offset + len) > slpmsg->size)
+		if (G_MAXSIZE - len < offset || (offset + len) > slpmsg->size)
 		{
 			purple_debug_error("msn",
 				"Oversized slpmsg - msgsize=%lld offset=%" G_GSIZE_FORMAT " len=%" G_GSIZE_FORMAT "\n",

mercurial