CHANGES

@@ -6,6 +6,7 @@ OpenLDAP 2.4.59 Engineering
 	Fixed slapd syncrepl handling of add+delete on single value attr (ITS#9295)
 	Fixed slapd-mdb cursor init check (ITS#9526)
 	Fixed slapd-mdb deletion of context entry (ITS#9531)
+	Fixed slapd-mdb off-by-one affecting search scope (ITS#9557)
 	Fixed slapo-pcache locking during expiration (ITS#9529)
 	Contrib
 		Fixed slapo-autogroup to not thrash thread context (ITS#9494)

servers/slapd/back-mdb/search.c

@@ -406,7 +406,7 @@ mdb_waitfixup( Operation *op, ww_ctx *ww, MDB_cursor *mci, MDB_cursor *mcd, IdSc
 		ww->data.mv_data = NULL;
 	} else if ( isc->scopes[0].mid > 1 ) {	/* candidate-based search */
 		int i;
-		for ( i=1; i<isc->scopes[0].mid; i++ ) {
+		for ( i=1; i<=isc->scopes[0].mid; i++ ) {
 			if ( !isc->scopes[i].mval.mv_data )
 				continue;
 			key.mv_data = &isc->scopes[i].mid;