auth: Avoid off-by-one overflow during kbdint authentication

Based on incomplete !754

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Pavol Žáčik <pzacik@redhat.com>
Merge-Request: <https://gitlab.com/libssh/libssh-mirror/-/merge_requests/827>
This commit is contained in:
Jakub Jelen
2026-04-30 13:12:59 +02:00
parent 8e82aabc21
commit 45cd13469c

View File

@@ -2417,7 +2417,7 @@ ssh_userauth_kbdint_getprompt(ssh_session session, unsigned int i, char *echo)
ssh_set_error_invalid(session);
return NULL;
}
if (i > session->kbdint->nprompts) {
if (i >= session->kbdint->nprompts) {
ssh_set_error_invalid(session);
return NULL;
}