From 7fccc2b75f64f416ba1c7fd4f5072ae33b44d578 Mon Sep 17 00:00:00 2001
From: "Sergio R. Caprile" <scaprile@gmail.com>
Date: Wed, 2 Sep 2026 12:51:31 -0300
Subject: [PATCH] add safety checks for month

---
 mongoose.c | 2 +-
 src/util.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/mongoose.c b/mongoose.c
index cd763321..a9e71c33 100644
--- a/mongoose.c
+++ b/mongoose.c
@@ -26163,7 +26163,7 @@ uint64_t mg_timegm(unsigned int year, unsigned int month, unsigned int day,
   const uint64_t day_secs = 86400;
   const uint64_t year_secs = 31536000;
   unsigned int y, ly;
-  if (year < 1970) return 0;
+  if (year < 1970 || month == 0 || month > 12) return 0;
   y = year - 1900;
   ly = month > 2 ? y + 1 : y;
   return (uint64_t) sec + 60 * min + 3600 * hour +
diff --git a/src/util.c b/src/util.c
index 7539f09f..baafdd11 100644
--- a/src/util.c
+++ b/src/util.c
@@ -16,7 +16,7 @@ uint64_t mg_timegm(unsigned int year, unsigned int month, unsigned int day,
   const uint64_t day_secs = 86400;
   const uint64_t year_secs = 31536000;
   unsigned int y, ly;
-  if (year < 1970) return 0;
+  if (year < 1970 || month == 0 || month > 12) return 0;
   y = year - 1900;
   ly = month > 2 ? y + 1 : y;
   return (uint64_t) sec + 60 * min + 3600 * hour +