]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
Another cbor negative limit fix
authorNick Porter <nick@portercomputing.co.uk>
Tue, 24 Dec 2024 10:31:15 +0000 (10:31 +0000)
committerNick Porter <nick@portercomputing.co.uk>
Tue, 24 Dec 2024 10:31:15 +0000 (10:31 +0000)
src/lib/util/cbor.c

index a2ac6862b1f465865febc29f56e471e258aea1b5..f0e109e068ad4c2a6a33231de62fbd525581df4a 100644 (file)
@@ -844,7 +844,7 @@ static ssize_t cbor_decode_int64(int64_t *out, fr_dbuff_t *dbuff, fr_type_t type
                slen = cbor_decode_integer(&value, info, &work_dbuff);
                if (slen < 0) return_slen;
 
-               if (value > ((uint64_t) 1) << 63) goto invalid; /* greater than! */
+               if (value >= ((uint64_t) 1) << 63) goto invalid; /* greater than! */
 
                /*
                 *      Convert 0..(2^63-1) into -0..-(2^63-1)