dns: Fix offset check in ndr_pull_component

Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Fri Nov  4 17:25:16 CET 2011 on sn-devel-104

diff --git a/librpc/ndr/ndr_dns.c b/librpc/ndr/ndr_dns.c
index 1004db0042fb57127a70fa18bf7314c40f47f522..27d849377735ba225a1dd1433423f20d92c71270 100644 (file)
--- a/librpc/ndr/ndr_dns.c
+++ b/librpc/ndr/ndr_dns.c
@@ -88,7 +88,7 @@ static enum ndr_err_code ndr_pull_component(struct ndr_pull *ndr,
                                              "reserved lenght field: 0x%02x",
                                              (len &0xC));
                }
-               if (*offset + len + 2 > ndr->data_size) {
+               if (*offset + len + 1 > ndr->data_size) {
                        return ndr_pull_error(ndr, NDR_ERR_STRING,
                                              "BAD DNS NAME component, "\
                                              "length too long");