From 8c0486bd76d4f71614e2fc00dd0480168192f5a7 Mon Sep 17 00:00:00 2001
From: Vitaliy Filippov <vitalif@yourcmc.ru>
Date: Sat, 20 Jun 2026 11:37:01 +0300
Subject: [PATCH] Fix bounds check in kv_db (fix invalid input handling?)

---
 src/kv/kv_db.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/kv/kv_db.cpp b/src/kv/kv_db.cpp
index 491173f1..ac2c3848 100644
--- a/src/kv/kv_db.cpp
+++ b/src/kv/kv_db.cpp
@@ -233,7 +233,7 @@ static std::string read_string(uint8_t *data, int size, int *pos)
     }
     uint32_t len = *(uint32_t*)(data+*pos);
     *pos += sizeof(uint32_t);
-    if (*pos+len > size)
+    if (len > size-*pos)
     {
         *pos = -1;
         return "";