Limited value must never go under zero

diff --git a/nest/limit.h b/nest/limit.h
index 5838ad3b8d16a916cac73a85a9fb11e3032dff75..f8d4b212e3ee3e15b84f7ba370ea830b476d15ab 100644 (file)
--- a/nest/limit.h
+++ b/nest/limit.h
@@ -32,6 +32,7 @@ static inline int limit_push(struct limit *l, void *data)
 
 static inline void limit_pop(struct limit *l)
 {
+  ASSERT_DIE(l->count > 0);
   --l->count;
 }