From: Richard Levitte <levitte@openssl.org>
Date: Wed, 15 Mar 2006 09:57:16 +0000 (+0000)
Subject: tlsext_ecpointformatlist_length is unsigned, so check if it's less
X-Git-Tag: OpenSSL_0_9_8k^2~1504
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=a4ff392503fbc9ccd50fb425a69e50a64058314c;p=oweals%2Fopenssl.git

tlsext_ecpointformatlist_length is unsigned, so check if it's less
than zero will only result in pissing of some compilers...
---

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index cdcc0598c2..a46e573ff6 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -632,7 +632,7 @@ int ssl_check_serverhello_tlsext(SSL *s)
 		size_t i;
 		unsigned char *list;
 		int found_uncompressed = 0;
-		if ((s->session->tlsext_ecpointformatlist == NULL) || (s->session->tlsext_ecpointformatlist_length <= 0))
+		if ((s->session->tlsext_ecpointformatlist == NULL) || (s->session->tlsext_ecpointformatlist_length == 0))
 			{
 			SSLerr(SSL_F_TLS1_CHECK_SERVERHELLO_TLSEXT,SSL_R_TLS_INVALID_ECPOINTFORMAT_LIST);
 			return -1;