Fix CVE-2022-3602 in punycode decoder.

[openssl.git] / crypto / punycode.c

diff --git a/crypto/punycode.c b/crypto/punycode.c
index 385b4b1df46a385312c3028c77d17a822200cc70..5e211af6d99dce676351e109d0d30637c6bc4c1c 100644 (file)
--- a/crypto/punycode.c
+++ b/crypto/punycode.c
@@ -181,7 +181,7 @@ int ossl_punycode_decode(const char *pEncoded, const size_t enc_len,
         n = n + i / (written_out + 1);
         i %= (written_out + 1);
 
-        if (written_out > max_out)
+        if (written_out >= max_out)
             return 0;
 
         memmove(pDecoded + i + 1, pDecoded + i,