From 7d991866031240caa98d881e374ee3a0dc3bae7c Mon Sep 17 00:00:00 2001
From: Jonathan Dowland <jmtd@debian.org>
Date: Thu, 2 Apr 2026 21:10:14 +0100
Subject: [PATCH] Revert "real fix for possible CVE with negative length"

This reverts commit 5e98e6e2e69e19d69b01f5abe910714411d0f878.

Fixes #355.
---
 src/libduc/buffer.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/libduc/buffer.c b/src/libduc/buffer.c
index dcce82d..ec1029c 100644
--- a/src/libduc/buffer.c
+++ b/src/libduc/buffer.c
@@ -47,7 +47,7 @@ void buffer_free(struct buffer *b)
 // Add item to buffer, but grow by doubling if needed
 static int buffer_put(struct buffer *b, const void *data, size_t len)
 {
-	if(b->ptr + len <= b->len) {
+	if(b->ptr + len > b->max) {
 		while(b->len + len > b->max) {
 			b->max *= 2;
 		}