@@ -, +, @@ 

 (CVE-2017-13089)

---

 src/http.c | 3 +++

 1 file changed, 3 insertions(+)

--- a/src/http.c	

+++ a/src/http.c	

@@ -973,6 +973,9 @@ skip_short_body (int fd, wgint contlen, bool chunked)

               remaining_chunk_size = strtol (line, &endl, 16);

               xfree (line);

+              if (remaining_chunk_size < 0)

+                return false;

+

               if (remaining_chunk_size == 0)

                 {

                   line = fd_read_line (fd);

--