commit d96009fda3731b706044f1203e1b786826055d8e
from: Markus Uhlin <markus@nifty-networks.net>
date: Sat Nov 29 19:40:56 2025 UTC

Array bounds checking

commit - 36cebc78ffac6e7997a803052b331de40c1ecb0e
commit + d96009fda3731b706044f1203e1b786826055d8e
blob - 2589f5af4203c57d522ac63b6c4028c9b1ac2d14
blob + f35b1db3f906b20a1b17cd5aab55522e7caf37c7
--- FICS/command.c
+++ FICS/command.c
@@ -412,7 +412,8 @@ printusage(int p, char *command_str)
 	int	 command;
 	int	 i, parlen, UseLang = parray[p].language;
 
-	if ((command = match_command(command_str, p)) < 0) {
+	if ((command = match_command(command_str, p)) < 0 ||
+	    command >= (int)ARRAY_SIZE(command_list)) {
 		pprintf(p, "  UNKNOWN COMMAND\n");
 		return;
 	}