From 641626029aa42988431e6b9b4b25971d7af63578 Mon Sep 17 00:00:00 2001
From: noctuum <25441068+noctuum@users.noreply.github.com>
Date: Sun, 13 Sep 2026 08:26:40 +0500
Subject: [PATCH] Fix a one byte write past address_copy

The index bound was the buffer size, not the last writable index.
---
 src/command_ip.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/command_ip.cc b/src/command_ip.cc
index 185ff37d..6988a37c 100644
--- a/src/command_ip.cc
+++ b/src/command_ip.cc
@@ -131,7 +131,7 @@ ipv4_range_parse(const char* address, uint32_t* address_start, uint32_t* address
   // copy everything up to '#'  to address_copy and work from there
   while(address[address_start_index] != '#' && address[address_start_index] != '\r' &&
         address[address_start_index] != '\n' && address[address_start_index] != '\0' &&
-        address_start_index < 4096 ) {
+        address_start_index < 4095 ) {
 
     address_copy[address_start_index] = address[address_start_index];
     address_start_index++;