MT#55283 fix off by one bug

Closes #1937

Change-Id: I9362e05165648820506eb2c95267e9a245fb32d9
(cherry picked from commit 76dd9ab56d)
(cherry picked from commit caffdca6d6)

daemon/bencode.c

@@ -692,7 +692,7 @@ static ssize_t __bencode_string(const char *s, ssize_t offset, size_t len) {
 	if (s + offset == end || end != s + pos)
 		return -2;
 
-	if (pos + sl > len)
+	if (pos + sl >= len)
 		return -1;
 
 	return pos + sl + 1;