Actually, that was perfectly correct. The fault is in the checking

elsewhere.

diff --git a/crypto/engine/hw_cswift.c b/crypto/engine/hw_cswift.c
index 3818e1ca850cda42c9caaff11828a2b9670b3b80..77608b898394af9590341091b0b42ca82e157144 100644 (file)
--- a/crypto/engine/hw_cswift.c
+++ b/crypto/engine/hw_cswift.c
@@ -696,7 +696,7 @@ static int cswift_dsa_verify(const unsigned char *dgst, int dgst_len,
        BIGNUM *dsa_g = NULL;
        BIGNUM *dsa_key = NULL;
        BIGNUM *argument = NULL;
-       int to_return = 0;      /* Expect failure */
+       int to_return = -1;
        int acquired = 0;
 
        if((ctx = BN_CTX_new()) == NULL)