num is an unsigned long, but since it was transfered from

crypto/sha/sha_locl.h, where it is in fact an int, we need to check
for less-than-zero as if it was an int...

diff --git a/fips/sha1/fips_sha_locl.h b/fips/sha1/fips_sha_locl.h
index 84f65584591ef8e85aba173647b169fe01af08c8..154140d8318255a3c5f1cabef787b4484625d562 100644 (file)
--- a/fips/sha1/fips_sha_locl.h
+++ b/fips/sha1/fips_sha_locl.h
@@ -336,7 +336,7 @@ void HASH_BLOCK_HOST_ORDER (SHA_CTX *c, const void *d, FIPS_SHA_SIZE_T num)
        c->h3=(c->h3+B)&0xffffffffL;
        c->h4=(c->h4+C)&0xffffffffL;
 
-       if (--num <= 0) break;
+       if ((int)(--num) <= 0) break;
 
        A=c->h0;
        B=c->h1;
@@ -466,7 +466,7 @@ void HASH_BLOCK_DATA_ORDER (SHA_CTX *c, const void *p, FIPS_SHA_SIZE_T num)
        c->h3=(c->h3+B)&0xffffffffL;
        c->h4=(c->h4+C)&0xffffffffL;
 
-       if (--num <= 0) break;
+       if ((int)(--num) <= 0) break;
 
        A=c->h0;
        B=c->h1;