--- protocol.c.orig 2004-01-18 17:13:57.000000000 +0100 +++ protocol.c 2006-07-16 11:27:40.000000000 +0200 @@ -626,6 +626,9 @@ if (currentData + sizeof (ENetProtocolCommandHeader) > & host -> receivedData [host -> receivedDataLength]) return 0; + if (command -> header.commandLength < 0) + return 0; + command -> header.commandLength = ENET_NET_TO_HOST_32 (command -> header.commandLength); if (currentData + command -> header.commandLength > & host -> receivedData [host -> receivedDataLength])