Add some more sanity checks about content-length.

1 files changed, 2 insertions, 2 deletions

diff --git a/mbox.c b/mbox.c
index a715c191..07dc7e6a 100644
--- a/mbox.c
+++ b/mbox.c
@@ -155,7 +155,7 @@ int mmdf_parse_mailbox (CONTEXT *ctx)
       {
 	tmploc = loc + hdr->content->length;
 
-	if (tmploc < ctx->size)
+	if (0 < tmploc && tmploc < ctx->size)
 	{
 	  if (fseek (ctx->fp, tmploc, SEEK_SET) != 0 ||
 	      fgets (buf, sizeof (buf) - 1, ctx->fp) == NULL ||
@@ -298,7 +298,7 @@ int mbox_parse_mailbox (CONTEXT *ctx)
 	loc = ftell (ctx->fp);
 	tmploc = loc + curhdr->content->length + 1;
 
-	if (tmploc < ctx->size)
+	if (0 < tmploc && tmploc < ctx->size)
 	{
 	  /*
 	   * check to see if the content-length looks valid.  we expect to