From 88f9012805a53f3067a6da849b5628b3bcb32981 Mon Sep 17 00:00:00 2001
From: "Alexander G. M. Smith" <agmsmith@ncf.ca>
Date: Fri, 22 May 2015 11:05:39 -0400
Subject: [PATCH] BMessage: fix an off-by-one error in SetCurrentSpecifier.

You could set the index to be past the end of the Specifier array.

Signed-off-by: Augustin Cavalier <waddlesplash@gmail.com>
Fixes #12087.
---
 src/kits/app/Message.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/kits/app/Message.cpp b/src/kits/app/Message.cpp
index 6ece8943c8..04df69fe94 100644
--- a/src/kits/app/Message.cpp
+++ b/src/kits/app/Message.cpp
@@ -1456,7 +1456,7 @@ BMessage::SetCurrentSpecifier(int32 index)
 	if (result != B_OK)
 		return result;
 
-	if (index > count)
+	if (index >= count)
 		return B_BAD_INDEX;
 
 	fHeader->current_specifier = index;