From: Wilfried Goesgens <dothebart@citadel.org>
Date: Thu, 6 Jun 2013 19:02:28 +0000 (+0200)
Subject: fix buffer overrun by 1
X-Git-Tag: v8.20~34
X-Git-Url: https://code.citadel.org/?p=citadel.git;a=commitdiff_plain;h=9ffb9ec198bda3a1af3a22aafdfd618563a03e2e

fix buffer overrun by 1
---

diff --git a/citadel/msgbase.c b/citadel/msgbase.c
index 5c10578c0..682f993a2 100644
--- a/citadel/msgbase.c
+++ b/citadel/msgbase.c
@@ -4855,6 +4855,10 @@ int CtdlDeleteMessages(char *room_name,		/* which room */
 			}
 			else {
 				while ((i < num_msgs) && (msglist[i] < dmsgnums[j])) i++;
+
+				if (i >= num_msgs)
+					continue;
+
 				if (msglist[i] == dmsgnums[j]) {
 					delete_this |= 0x01;
 				}