--- src/common/dcc.c.orig	2003-12-12 16:49:28.523536903 -0800
+++ src/common/dcc.c	2003-12-12 16:50:50.339644657 -0800
@@ -1659,6 +1659,11 @@
 			 * sending file.
 			 */
 			dcc = find_dcc_from_id (pasvid, TYPE_SEND);
+			/* defensive check for malformed requests */
+			if( dcc == NULL ) {
+			  dcc_malformed( sess, nick, word_eol[4] + 2 );
+			  return;
+			}
 			dcc->addr = addr;
 			dcc->port = port;
 			dcc_connect(dcc);