--- common/packets.c.old	2006-08-03 01:46:33.000000000 +0100
+++ common/packets.c	2006-08-03 02:00:58.000000000 +0100
@@ -577,8 +577,10 @@
 	  chunk->total_length, chunk->chunk_length);
 
   if (chunk->total_length < 0
+      || chunk->chunk_length < 0
       || chunk->total_length >= MAX_ATTRIBUTE_BLOCK
       || chunk->offset < 0
+      || chunk->offset > chunk->total_length
       || chunk->offset + chunk->chunk_length > chunk->total_length
       || (chunk->offset != 0
           && chunk->total_length != pplayer->attribute_block_buffer.length)) {