@@ -1,3 +1,8 @@

+Sun Oct 17 15:31:59 CEST 2004 (tk)

+----------------------------------

+  * libclamav/chmunpack.c: better handling of broken files (problem reported

+			   by Tomasz Papszun)

+

 Sun Oct 17 10:30:36 BST 2004 (njh)

 ----------------------------------

   * libclamav:		Added advice to report mails that can't be scanned

@@ -536,7 +536,7 @@ static int read_chunk(int fd, off_t offset, uint32_t chunk_len,

 	chunk_header_t *chunk_hdr;

 	int retval = FALSE;

-	if (chunk_len < 8) {

+	if (chunk_len < 8 || chunk_len > 33554432) {

 		return FALSE;

 	}