Return correct Suite B curve, fix comment.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/=4412)

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 67b06f261a8e3be3b4fec40bffec88c85c88415b..994ae85247064b7abf19846df701f3c835b5a270 100644 (file)
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -218,7 +218,7 @@ uint16_t tls1_ec_nid2curve_id(int nid)
  * Get curves list, if "sess" is set return client curves otherwise
  * preferred list.
  * Sets |num_curves| to the number of curves in the list, i.e.,
- * the length of |pcurves| is 2 * num_curves.
+ * the length of |pcurves| is num_curves.
  * Returns 1 on success and 0 if the client curves list has invalid format.
  * The latter indicates an internal error: we should not be accepting such
  * lists in the first place.
@@ -245,7 +245,7 @@ int tls1_get_curvelist(SSL *s, int sess, const uint16_t **pcurves,
             break;
 
         case SSL_CERT_FLAG_SUITEB_192_LOS:
-            *pcurves = suiteb_curves + 2;
+            *pcurves = suiteb_curves + 1;
             pcurveslen = 1;
             break;
         default: