--- sourceforge.net/trunk/rdesktop/rdp.c 2004/09/11 19:17:48 772 +++ sourceforge.net/trunk/rdesktop/rdp.c 2004/09/11 22:57:42 773 @@ -1071,6 +1071,7 @@ uint8 ctype; uint16 clen; uint32 len; + static int max_size; uint32 roff, rlen; @@ -1085,7 +1086,8 @@ if (ctype & RDP_MPPC_COMPRESSED) { - + if (len > RDP_MPPC_DICT_SIZE) + error("error decompressed packet size exceeds max\n"); if (mppc_expand(s->p, clen, ctype, &roff, &rlen) == -1) error("error while decompressing packet\n");