pull up r20478 from trunk

 r20478@cathode-dark-space:  raeburn | 2008-06-26 20:22:43 -0400
 ticket: new
 target_version: 1.6.4

 Fix off-by-one error in range check on file descriptor number.

ticket: 5995
version_fixed: 1.6.4
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@20587 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/os/sendto_kdc.c b/src/lib/krb5/os/sendto_kdc.c
index 661c2cbea6df03234d4b3a5fbbc690749c0b219d..6a3faf94b58f0f03dcbef9a8120cc822c2ab03b3 100644 (file)
--- a/src/lib/krb5/os/sendto_kdc.c
+++ b/src/lib/krb5/os/sendto_kdc.c
@@ -654,7 +654,7 @@ start_connection (struct conn_state *state,
        dprint("socket: %m creating with af %d\n", state->err, ai->ai_family);
        return -1;              /* try other hosts */
     }
-    if (fd > FD_SETSIZE) {
+    if (fd >= FD_SETSIZE) {
        close(fd);
        state->err = EMFILE;
        dprint("socket: fd %d too high\n", fd);