1 files changed, 2 insertions, 2 deletions

diff --git a/lib/sitecing_util.cc b/lib/sitecing_util.cc
index 5466b28..f892a60 100644
--- a/lib/sitecing_util.cc
+++ b/lib/sitecing_util.cc
@@ -35,55 +35,55 @@ namespace sitecing {
                 if(s[1]=='.' && s[2]=='/') {
                     s+=2;
                     continue;
                 }
             }
             if(opts&restrict_dotdot) {
                 if(
                                 ( rv.empty() && s[0]=='.' && s[1]=='.' && s[2]=='/' )// "^../"
                         || ( s[0]=='/' && s[1]=='.' && s[2]=='.' && (s[3]==0 || s[3]=='/') ) // "/..(/|$)"
                   )
                     throw utility_restricted_sequence(CODEPOINT,"restricted updir sequence encountered");
             }
             rv += *s;
             if( (*s) != '/' )
                 notslash=rv.length();
         }
         if(!(opts&strip_trailing_slash))
             notslash++;
         if(notslash<rv.length())
             rv.erase(notslash); // XXX: check the logic of stripping/not strippling trailing slash
         return rv;
     }
 
     string strip_prefix(const string& str,const string& prefix) {
-        if(str.compare(0,prefix.length(),prefix))
+        if( (str.length()<prefix.length()) || str.compare(0,prefix.length(),prefix))
             throw utility_no_prefix(CODEPOINT,"no such prefix");
         return str.substr(prefix.length());
     }
 
     string strip_suffix(const string& str,const string& suffix) {
-        if(str.compare(str.length()-suffix.length(),suffix.length(),suffix))
+        if( (str.length()<suffix.length()) || str.compare(str.length()-suffix.length(),suffix.length(),suffix))
             throw utility_no_suffix(CODEPOINT,"no such suffix");
         return str.substr(0,str.length()-suffix.length());
     }
 
     string dir_name(const string& filename) {
         string::size_type sl = filename.find_last_of('/');
         if(sl==string::npos)
             return ""; // no slashes -- no dir.
         string::size_type nosl = filename.find_last_not_of('/',sl);
         if(nosl==string::npos)
             return ""; // only slashes -- no dir. XXX: only slashes after the last slash... does it mean no dir?
         return filename.substr(0,nosl+1);
     }
 
     void make_path(const string& path,mode_t mode) {
         struct stat st;
         for(string::size_type sl=0;sl!=string::npos;sl=path.find('/',sl+1)) {
             if(!sl)
                 continue;
             string p = path.substr(0,sl);
             if(stat(p.c_str(),&st) || !S_ISDIR(st.st_mode)) {
                 if(mkdir(p.c_str(),mode))
                     throw konforka::exception(CODEPOINT,"failed to mkdir()");
             }