From e443058d80b8ebed5aee76d047c2453ee7691e76 Mon Sep 17 00:00:00 2001 From: Richard Fuchs Date: Fri, 9 May 2025 07:36:42 -0400 Subject: [PATCH] MT#55283 fix off by one bug Closes #1937 Change-Id: I9362e05165648820506eb2c95267e9a245fb32d9 (cherry picked from commit 76dd9ab56d3f3e34ab22c0bbfbfddbf0686e7f40) (cherry picked from commit 3ee2327c599cd885aa60655370e25564e37a091c) --- daemon/bencode.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/daemon/bencode.c b/daemon/bencode.c index ac220e603..f110a2946 100644 --- a/daemon/bencode.c +++ b/daemon/bencode.c @@ -711,7 +711,7 @@ static ssize_t __bencode_string(const char *s, ssize_t offset, size_t len) { if (s + offset == end || end != s + pos) return -2; - if (pos + sl > len) + if (pos + sl >= len) return -1; return pos + sl + 1;