Index: lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp
===================================================================
--- lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp
+++ lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp
@@ -579,7 +579,7 @@
     return ((Value - 4) >> 2) & 0xff;
   case ARM::fixup_arm_thumb_cb: {
     // CB instructions can only branch to offsets in [0, 126] in multiples of 2
-    if (Ctx && ((int64_t)Value < 0 || Value > 0x3e || Value & 1)) {
+    if (Ctx && ((int64_t)Value < 0 || Value > 0x80 || Value & 1)) {
       Ctx->reportError(Fixup.getLoc(), "out of range pc-relative fixup value");
       return 0;
     }
Index: test/MC/ARM/thumb-cb-negative-offsets.s
===================================================================
--- test/MC/ARM/thumb-cb-negative-offsets.s
+++ test/MC/ARM/thumb-cb-negative-offsets.s
@@ -17,3 +17,10 @@
   .space 1000
 label1:
   .word 4
+
+@ CHECK: out of range pc-relative fixup value
+  cbz r0, label2
+  cbnz r0, label2
+  .space 126
+label2:
+  .word 4