commit 022782a1659fc7933b5f5dbdbe537234514778ee
from: Martijn van Duren <martijn@openbsd.org>
date: Wed Mar 30 21:30:18 2022 UTC

osmtpd_ltok_skip_sig_h_tag_value can be further out than end, because a header can contain a ';'

commit - 04225ff91820d9bfde83a32d1e5e60bb0050d3e2
commit + 022782a1659fc7933b5f5dbdbe537234514778ee
blob - 1f60e6ec2a3e32f5668ea56d4ab2049edea92ce7
blob + 8dfe64a3a999c61c092e1c44a4698c6cf6d49db7
--- main.c
+++ main.c
@@ -727,7 +727,7 @@ dkim_signature_parse_h(struct signature *sig, const ch
 		dkim_signature_state(sig, DKIM_PERMERROR, "Duplicate h tag");
 		return;
 	}
-	if (osmtpd_ltok_skip_sig_h_tag_value(start, 0) != end) {
+	if (osmtpd_ltok_skip_sig_h_tag_value(start, 0) < end) {
 		dkim_signature_state(sig, DKIM_PERMERROR, "Invalid h tag");
 		return;
 	}