From: Nick Porter <nick@portercomputing.co.uk>
Date: Tue, 24 Dec 2024 10:31:15 +0000 (+0000)
Subject: Another cbor negative limit fix
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a74fd6460b981a87c4022261a8fdf2e8114dbe62;p=thirdparty%2Ffreeradius-server.git

Another cbor negative limit fix
---

diff --git a/src/lib/util/cbor.c b/src/lib/util/cbor.c
index a2ac6862b1f..f0e109e068a 100644
--- a/src/lib/util/cbor.c
+++ b/src/lib/util/cbor.c
@@ -844,7 +844,7 @@ static ssize_t cbor_decode_int64(int64_t *out, fr_dbuff_t *dbuff, fr_type_t type
 		slen = cbor_decode_integer(&value, info, &work_dbuff);
 		if (slen < 0) return_slen;
 
-		if (value > ((uint64_t) 1) << 63) goto invalid; /* greater than! */
+		if (value >= ((uint64_t) 1) << 63) goto invalid; /* greater than! */
 
 		/*
 		 *	Convert 0..(2^63-1) into -0..-(2^63-1)