Synopsis: Off-by-one error in openssh session NetBSD versions: 1.5,1.5.1,1.5.2 Thanks to: Jun-ichiro itojun Hagino Reported in NetBSD Security Advisory: NetBSD-SA2002-004 *** channels.c.orig Tue Mar 12 23:27:16 2002 --- channels.c Tue Mar 12 23:41:14 2002 *************** Channel * *** 160,166 **** channel_lookup(int id) { Channel *c; ! if (id < 0 || id > channels_alloc) { log("channel_lookup: %d: bad id", id); return NULL; } --- 160,166 ---- channel_lookup(int id) { Channel *c; ! if (id < 0 || id >= channels_alloc) { log("channel_lookup: %d: bad id", id); return NULL; }