silence coverity - reviewed by Evan over jabber

diff --git a/lib/isc/netaddr.c b/lib/isc/netaddr.c
index acb44acebdc17be7ea3af29b54c9c0aef686a1f2..dcbfba42eae881e7e482c406b9727db205eb8599 100644 (file)
--- a/lib/isc/netaddr.c
+++ b/lib/isc/netaddr.c
@@ -240,7 +240,7 @@ isc_netaddr_prefixok(const isc_netaddr_t *na, unsigned int prefixlen) {
                        return (ISC_R_FAILURE);
                nbytes++;
        }
-       if (memcmp(p + nbytes, zeros, ipbytes - nbytes) != 0)
+       if (nbytes < ipbytes && memcmp(p + nbytes, zeros, ipbytes - nbytes) != 0)
                return (ISC_R_FAILURE);
        return (ISC_R_SUCCESS);
 }