fix Debian bug #202667: crash when a message's filename overflows an int

[mmh] / sbr / folder_read.c

diff --git a/sbr/folder_read.c b/sbr/folder_read.c
index 0d0129320158fcf21c808c466bb7c79a0fa8bc74..2e67917257f57944b649045848b76a4a33f32a11 100644 (file)
--- a/sbr/folder_read.c
+++ b/sbr/folder_read.c
@@ -3,6 +3,10 @@
  * folder_read.c -- initialize folder structure and read folder
  *
  * $Id$
+ *
+ * This code is Copyright (c) 2002, by the authors of nmh.  See the
+ * COPYRIGHT file in the root directory of the nmh distribution for
+ * complete copyright information.
  */
 
 #include <h/mh.h>
@@ -66,7 +70,7 @@ folder_read (char *name)
        adios (NULL, "unable to allocate storage");
 
     while ((dp = readdir (dd))) {
-       if ((msgnum = m_atoi (dp->d_name))) {
+       if ((msgnum = m_atoi (dp->d_name)) && msgnum > 0) {
            /*
             * Check if we need to allocate more
             * temporary elements for message names.