Resolver: fixed off-by-one read in ngx_resolver_copy().

It is believed to be harmless, see a similar change 077a890a76ff.

Reported-by: geeknik <geeknik@protonmail.ch>

diff --git a/src/core/ngx_resolver.c b/src/core/ngx_resolver.c
index c76c17852af07c68a18f79aded07318a7e2e4f80..f8f677878ac21fcb29dd02298a69c4a4e74c164a 100644 (file)
--- a/src/core/ngx_resolver.c
+++ b/src/core/ngx_resolver.c
@@ -2757,7 +2757,7 @@ ngx_resolver_process_srv(ngx_resolver_t *r, u_char *buf, size_t n,
 
         case NGX_RESOLVE_SRV:
 
-            if (i + 6 > n) {
+            if (i + 6 >= n) {
                 goto short_response;
             }