From cd36431b0c7eb4dde64ac173a7c0812a91a6a22f Mon Sep 17 00:00:00 2001
From: Charles Kerr <charles@transmissionbt.com>
Date: Thu, 28 May 2009 13:02:03 +0000
Subject: [PATCH] (trunk libT) fix off-by-one in tr_ssha1() reported by lightix
 @ http://forum.transmissionbt.com/viewtopic.php?f=2&t=7684#p37556

---
 libtransmission/crypto.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libtransmission/crypto.c b/libtransmission/crypto.c
index 1b85450ca..68a696dd8 100644
--- a/libtransmission/crypto.c
+++ b/libtransmission/crypto.c
@@ -375,7 +375,7 @@ tr_ssha1( const void * plaintext )
     uint8_t sha[SHA_DIGEST_LENGTH];
     char buf[2*SHA_DIGEST_LENGTH + saltval_len + 2];
 
-    for( i=0; i<=saltval_len; ++i )
+    for( i=0; i<saltval_len; ++i )
         salt[i] = salter[ tr_cryptoRandInt( salter_len ) ];
 
     tr_sha1( sha, plaintext, strlen( plaintext ), salt, saltval_len, NULL );