sbuf: check more strictly sbcopy() bounds with offset

We shouldn't be reading undefined data, check that the data to read
remains within sb_cc limit.

Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/src/sbuf.c b/src/sbuf.c
index 3f20729..71b2ddb 100644
--- a/src/sbuf.c
+++ b/src/sbuf.c
@@ -169,7 +169,7 @@ void sbcopy(struct sbuf *sb, int off, int len, char *to)
     char *from;
 
     g_assert(len >= 0);
-    g_assert(len <= sb->sb_cc);
+    g_assert(len + off <= sb->sb_cc);
 
     from = sb->sb_rptr + off;
     if (from >= sb->sb_data + sb->sb_datalen)