From a2d130bc5bc48831777a9712627cf6b67d76c901 Mon Sep 17 00:00:00 2001
From: Denis Skvortsov <denis.l.skvortsov@kaspersky.com>
Date: Wed, 22 Jul 2026 12:03:58 +0300
Subject: [PATCH] Fix for trans_force_read_s Bounds Check Uses Wrong Pointer

---
 common/trans.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/common/trans.c b/common/trans.c
index 312495c7..98422406 100644
--- a/common/trans.c
+++ b/common/trans.c
@@ -471,7 +471,8 @@ trans_force_read_s(struct trans *self, struct stream *in_s, int size)
     int rcvd;
 
     if (self->status != TRANS_STATUS_UP ||
-            size < 0 || !s_check_rem_out(in_s, size))
+            size < 0 || 
+            in_s->end + size > in_s->data + in_s->size)
     {
         return 1;
     }