From 76dd9ab56d3f3e34ab22c0bbfbfddbf0686e7f40 Mon Sep 17 00:00:00 2001 From: Richard Fuchs Date: Fri, 9 May 2025 07:36:42 -0400 Subject: [PATCH] MT#55283 fix off by one bug Closes #1937 Change-Id: I9362e05165648820506eb2c95267e9a245fb32d9 --- lib/bencode.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/bencode.c b/lib/bencode.c index 7bb0a4e3c..3ef6cee71 100644 --- a/lib/bencode.c +++ b/lib/bencode.c @@ -698,7 +698,7 @@ static ssize_t __bencode_string(const char *s, ssize_t offset, size_t len) { if (s + offset == end || end != s + pos) return -2; - if (pos + sl > len) + if (pos + sl >= len) return -1; return pos + sl + 1;