diff options
Diffstat (limited to 'src/or/command.c')
| -rw-r--r-- | src/or/command.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/or/command.c b/src/or/command.c index 36de2d15cb..834d47e871 100644 --- a/src/or/command.c +++ b/src/or/command.c @@ -695,7 +695,7 @@ command_process_link_auth_cell(cell_t *cell, or_connection_t *conn) goto err; } len = ntohs(get_uint16(cell->payload)); - if (len < 2 || 2+len > CELL_PAYLOAD_SIZE) { + if (len < 2 || len > CELL_PAYLOAD_SIZE - 2) { log_fn(LOG_PROTOCOL_WARN, LD_OR, "Bad length field (%d) on LINK_AUTH cell;" " closing the connection", (int)len); goto err; |