dnssec/nsec: lookup for rset type withinin nsec3 type bitmap; minor bug fixed

diff --git a/lib/dnssec/nsec.c b/lib/dnssec/nsec.c
index a9a0532366c90af6c92f7c8194e3fc85e0167735..6f4af5332d6f42dc7971ebb7453e04c481ba0075 100644 (file)
--- a/lib/dnssec/nsec.c
+++ b/lib/dnssec/nsec.c
@@ -38,7 +38,7 @@ bool kr_nsec_bitmap_contains_type(const uint8_t *bm, uint16_t bm_size, uint16_t
        const uint8_t bitmap_bit_mask = 1 << (7 - (type_lo & 0x07));
 
        size_t bm_pos = 0;
-       while (bm_pos + 3 < bm_size) {
+       while (bm_pos + 3 <= bm_size) {
                uint8_t win = bm[bm_pos++];
                uint8_t win_size = bm[bm_pos++];
                /* Check remaining window length. */