dns: Fix offset check in ndr_pull_component

[ira/wip.git] / librpc / ndr / ndr_dns.c

diff --git a/librpc/ndr/ndr_dns.c b/librpc/ndr/ndr_dns.c
index 1004db0042fb57127a70fa18bf7314c40f47f522..27d849377735ba225a1dd1433423f20d92c71270 100644 (file)
--- a/librpc/ndr/ndr_dns.c
+++ b/librpc/ndr/ndr_dns.c
@@ -88,7 +88,7 @@ static enum ndr_err_code ndr_pull_component(struct ndr_pull *ndr,
                                              "reserved lenght field: 0x%02x",
                                              (len &0xC));
                }
-               if (*offset + len + 2 > ndr->data_size) {
+               if (*offset + len + 1 > ndr->data_size) {
                        return ndr_pull_error(ndr, NDR_ERR_STRING,
                                              "BAD DNS NAME component, "\
                                              "length too long");