sizeof(new_nt_encrypted) is allowed

diff --git a/src/modules/rlm_mschap/rlm_mschap.c b/src/modules/rlm_mschap/rlm_mschap.c
index 430cd7aabbddcfc001df60f23d74dc350e302153..3509bd6f5a1d42096d93c19e3716f4771d450244 100644 (file)
--- a/src/modules/rlm_mschap/rlm_mschap.c
+++ b/src/modules/rlm_mschap/rlm_mschap.c
@@ -1730,7 +1730,7 @@ static rlm_rcode_t CC_HINT(nonnull) mod_authenticate(void *instance, REQUEST *re
                                return RLM_MODULE_INVALID;
                        }
 
-                       if ((new_nt_enc_len + nt_enc->vp_length - 4) >= sizeof(new_nt_encrypted)) {
+                       if ((new_nt_enc_len + nt_enc->vp_length - 4) > sizeof(new_nt_encrypted)) {
                                REDEBUG("Unpacked MS-CHAP-NT-Enc-PW length > 516");
                                return RLM_MODULE_INVALID;
                        }