Merge r5 from branches/ircii-pana-1.1 (fixes for CVE-2007-3360).

git-svn-id: svn://svn.code.sf.net/p/bitchx/code/trunk@36 13b04d17-f746-0410-82c6-800466cd88b0
2008-05-07 10:26:50 +00:00
parent ec0201e8a5
commit a9267d0716
2 changed files with 7 additions and 3 deletions
--- a/source/parse.c
+++ b/source/parse.c
@@ -1908,7 +1908,7 @@ void parse_server(char *orig_line)
 	 * of compares.)  I will be doing more testing in the future on
 	 * a live client to see if this is a reasonable order.
 	 */
-	if ((numeric = atoi(comm)))
+	if ((numeric = atoi(comm)) > 0) /* numbered_command can't handle -ves */
 		numbered_command(from, numeric, ArgList);
 	else
 	{