From e815865399bd6c72cff74c7ca485d40abacc693e Mon Sep 17 00:00:00 2001
From: defanor <defanor@uberspace.net>
Date: Tue, 28 Dec 2021 09:47:44 +0300
Subject: Fix integer overflow on stanzas_out_acknowledged > stanzas_out_count

---
 src/rexmpp.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/rexmpp.c b/src/rexmpp.c
index f041765..d7e1364 100644
--- a/src/rexmpp.c
+++ b/src/rexmpp.c
@@ -1142,8 +1142,8 @@ rexmpp_err_t rexmpp_send (rexmpp_t *s, xmlNodePtr node)
 
   if (rexmpp_xml_is_stanza(node)) {
     if (s->sm_state == REXMPP_SM_ACTIVE) {
-      if (s->stanzas_out_count - s->stanzas_out_acknowledged >=
-          s->stanza_queue_size) {
+      if (s->stanzas_out_count >=
+          s->stanza_queue_size + s->stanzas_out_acknowledged) {
         xmlFreeNode(node);
         rexmpp_log(s, LOG_ERR, "The stanza queue is full, not sending.");
         return REXMPP_E_STANZA_QUEUE_FULL;
-- 
cgit v1.2.3