From e61682dfb20f25ed4d9b6cf62cc1de833c61a557 Mon Sep 17 00:00:00 2001
From: CPunch <sethtstubbs@gmail.com>
Date: Mon, 18 Dec 2023 04:41:53 -0600
Subject: [PATCH] fix: out-of-bounds index in itemDeleteHandler()

---
 src/Items.cpp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/Items.cpp b/src/Items.cpp
index 70a6b9e..df7cb40 100644
--- a/src/Items.cpp
+++ b/src/Items.cpp
@@ -416,6 +416,9 @@ static void itemDeleteHandler(CNSocket* sock, CNPacketData* data) {
 
     Player* plr = PlayerManager::getPlayer(sock);
 
+    if (itemdel->iSlotNum < 0 || itemdel->iSlotNum >= AINVEN_COUNT)
+        return; // sanity check
+
     resp.eIL = itemdel->eIL;
     resp.iSlotNum = itemdel->iSlotNum;