aufs: bugfix, dirren off-by-one

These "+1" were left accidentally when refining the lookup routine.
Signed-off-by: J. R. Okajima <hooanon05g@gmail.com>
(cherry picked from commit 4177c438179671556de7312107c8aa766ea3d658)

fs/aufs/dirren.c

@@ -1202,8 +1202,8 @@ int au_dr_lkup_name(struct au_do_lookup_args *lkup, aufs_bindex_t btgt)
 	err = 0;
 	if (!lkup->dirren.drinfo)
 		goto out;
-	AuDebugOn(lkup->dirren.ninfo < btgt + 1);
-	drinfo = lkup->dirren.drinfo[btgt + 1];
+	AuDebugOn(lkup->dirren.ninfo <= btgt);
+	drinfo = lkup->dirren.drinfo[btgt];
 	if (!drinfo)
 		goto out;
 
@@ -1232,8 +1232,8 @@ int au_dr_lkup_h_ino(struct au_do_lookup_args *lkup, aufs_bindex_t bindex,
 	match = 1;
 	if (!lkup->dirren.drinfo)
 		goto out;
-	AuDebugOn(lkup->dirren.ninfo < bindex + 1);
-	drinfo = lkup->dirren.drinfo[bindex + 1];
+	AuDebugOn(lkup->dirren.ninfo <= bindex);
+	drinfo = lkup->dirren.drinfo[bindex];
 	if (!drinfo)
 		goto out;