X-Git-Url: https://git.draconx.ca/gitweb/upkg.git/blobdiff_plain/76b8a4bf05701afcd1be69ff4490a7c6be431dc4..4165687b9036344270342acae34fe5086b0bf949:/src/engine/music.gob

diff --git a/src/engine/music.gob b/src/engine/music.gob
index b4ed7d2..f0bde09 100644
--- a/src/engine/music.gob
+++ b/src/engine/music.gob
@@ -108,7 +108,6 @@ class Engine:Music from U:Object (dynamic)
 	override (U:Object) int deserialize(U:Object *uo)
 	{
 		struct upkg_file *f = uo->pkg_file;
-		Self *self = SELF(uo);
 		size_t rc, pos = 0, buflen;
 		unsigned char buf[32];
 		long size;
@@ -130,7 +129,7 @@ class Engine:Music from U:Object (dynamic)
 		}
 
 		rc = upkg_decode_index(&size, buf+pos, buflen-pos);
-		if (rc == 0 || size < 0)
+		if (rc == 0 || size < 0 || size > f->len - pos)
 			return -1;
 		pos += rc;