Ensure that len > 0

diff --git a/src/lib/valuepair.c b/src/lib/valuepair.c
index 2f2c73c7e65f3a965cc8c3a6c517bbf0c48968bf..f6f4abcacfc7d6999718492d163cde422db4140a 100644 (file)
--- a/src/lib/valuepair.c
+++ b/src/lib/valuepair.c
@@ -1626,7 +1626,7 @@ VALUE_PAIR *pairread(const char **ptr, FR_TOKEN *eol)
        /*
         *      We may have Foo-Bar:= stuff, so back up.
         */
-       if (attr[len - 1] == ':') {
+       if ((len > 0) && (attr[len - 1] == ':')) {
                p--;
                len--;
        }