--- rdesktop-1.8.4/orders.c.old 2019-01-02 14:03:25.000000000 +0000 +++ rdesktop-1.8.4/orders.c 2019-01-09 17:13:26.170000000 +0000 @@ -1266,7 +1266,7 @@ in_uint16_le(s, flags); /* used by bmpcache2 */ in_uint8(s, type); - if (!s_check_rem(s, length + 7)) + if (!s_check_rem(s, (sint16) length + 7)) { rdp_protocol_error("process_secondary_order(), next order pointer would overrun stream", &packet); }