From 8b663e4d7c1fe277fc732065f0757034b4ced939 Mon Sep 17 00:00:00 2001
From: Neels Hofmeyr <nhofmeyr@sysmocom.de>
Date: Wed, 25 Oct 2023 21:53:47 +0200
Subject: [PATCH] mgcp_parse_audio_port_pt(): fix buffer overflow

Change-Id: I18c78d15eb1593f404b4741248225b68878b463f
---
 src/libosmo-mgcp-client/mgcp_client.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/libosmo-mgcp-client/mgcp_client.c b/src/libosmo-mgcp-client/mgcp_client.c
index 5df4560cb..b5897a659 100644
--- a/src/libosmo-mgcp-client/mgcp_client.c
+++ b/src/libosmo-mgcp-client/mgcp_client.c
@@ -319,7 +319,7 @@ static int mgcp_parse_audio_port_pt(struct mgcp_response *r, char *line)
 	pt_str = strtok(line, " ");
 	while (1) {
 		/* Do not allow excessive payload types */
-		if (count > ARRAY_SIZE(r->codecs))
+		if (count >= ARRAY_SIZE(r->codecs))
 			goto response_parse_failure_pt;
 
 		pt_str = strtok(NULL, " ");