From 0dd931bae2b730c38078896a5f70da4dbd02488d Mon Sep 17 00:00:00 2001
From: sashass1315 <sashass1315@gmail.com>
Date: Mon, 9 Feb 2026 18:55:55 +0200
Subject: [PATCH] trie: correct off-by-one in embedded node size validation

---
 trie/node.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/trie/node.go b/trie/node.go
index 3f14f07d63..bff2d0516a 100644
--- a/trie/node.go
+++ b/trie/node.go
@@ -225,7 +225,7 @@ func decodeRef(buf []byte) (node, []byte, error) {
 	case kind == rlp.List:
 		// 'embedded' node reference. The encoding must be smaller
 		// than a hash in order to be valid.
-		if size := len(buf) - len(rest); size > hashLen {
+		if size := len(buf) - len(rest); size >= hashLen {
 			err := fmt.Errorf("oversized embedded node (size is %d bytes, want size < %d)", size, hashLen)
 			return nil, buf, err
 		}