rpcrt4: Fix the buffer bounds check

[Dmitry Timoshkov]

Hello,

Changelog:
    rpcrt4: Fix the buffer bounds check.

---
 dlls/rpcrt4/ndr_marshall.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/rpcrt4/ndr_marshall.c b/dlls/rpcrt4/ndr_marshall.c
index 26a55b1..b1b8fa3 100644
--- a/dlls/rpcrt4/ndr_marshall.c
+++ b/dlls/rpcrt4/ndr_marshall.c
@@ -759,7 +759,7 @@ unsigned char *WINAPI NdrConformantStringUnmarshall( PMIDL_STUB_MESSAGE pStubMsg
 
   /* verify the buffer is safe to access */
   if ((pStubMsg->Buffer + bufsize < pStubMsg->Buffer) ||
-      (pStubMsg->Buffer + bufsize < pStubMsg->BufferEnd))
+      (pStubMsg->Buffer + bufsize > pStubMsg->BufferEnd))
   {
     ERR("bufsize 0x%x exceeded buffer end %p of buffer %p\n", bufsize,
         pStubMsg->BufferEnd, pStubMsg->Buffer);
-- 
1.5.2.3