From c14c476614e3134867ddb997bdfe5a41ba668175 Mon Sep 17 00:00:00 2001
From: Brian White <mscdex@mscdex.net>
Date: Tue, 12 Nov 2019 22:41:12 -0500
Subject: buffer: fix 6-byte writeUIntBE() range check

Fixes: https://github.com/nodejs/node/issues/30420

PR-URL: https://github.com/nodejs/node/pull/30459
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: David Carlier <devnexen@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
Reviewed-By: James M Snell <jasnell@gmail.com>
---
 lib/internal/buffer.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'lib')

diff --git a/lib/internal/buffer.js b/lib/internal/buffer.js
index 9d86a8e722..a14909e491 100644
--- a/lib/internal/buffer.js
+++ b/lib/internal/buffer.js
@@ -738,7 +738,7 @@ function writeUInt8(value, offset = 0) {
 
 function writeUIntBE(value, offset, byteLength) {
   if (byteLength === 6)
-    return writeU_Int48BE(this, value, offset, 0, 0xffffffffffffff);
+    return writeU_Int48BE(this, value, offset, 0, 0xffffffffffff);
   if (byteLength === 5)
     return writeU_Int40BE(this, value, offset, 0, 0xffffffffff);
   if (byteLength === 3)
-- 
cgit v1.2.3