- stevesk@cvs.openbsd.org 2002/08/27 17:13:56

     [ssh-rsa.c]
     RSA_public_decrypt() returns -1 on error so len must be signed;
     ok markus@

diff --git a/ChangeLog b/ChangeLog
index 72fe21d12f0f67a3f4011bc5e81b9a350aec6dc0..45672eaf3755f789c2905a55f2f9e1a94a7248d6 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -31,6 +31,10 @@
      [session.c]
      send signal name (not signal number) in "exit-signal" message; noticed
      by galb@vandyke.com
+   - stevesk@cvs.openbsd.org 2002/08/27 17:13:56
+     [ssh-rsa.c]
+     RSA_public_decrypt() returns -1 on error so len must be signed; 
+     ok markus@
 
 20020820
  - OpenBSD CVS Sync

diff --git a/ssh-rsa.c b/ssh-rsa.c
index 44287fa260fd4aa7446bec7c7732650eda754268..d7b2918f938851f03dbee7f2067ded974a244f1c 100644 (file)
--- a/ssh-rsa.c
+++ b/ssh-rsa.c
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: ssh-rsa.c,v 1.25 2002/08/02 22:20:30 markus Exp $");
+RCSID("$OpenBSD: ssh-rsa.c,v 1.26 2002/08/27 17:13:56 stevesk Exp $");
 
 #include <openssl/evp.h>
 #include <openssl/err.h>
@@ -211,7 +211,8 @@ static int
 openssh_RSA_verify(int type, u_char *hash, u_int hashlen,
     u_char *sigbuf, u_int siglen, RSA *rsa)
 {
-       u_int ret, rsasize, len, oidlen = 0, hlen = 0;
+       u_int ret, rsasize, oidlen = 0, hlen = 0;
+       int len;
        const u_char *oid = NULL;
        u_char *decrypted = NULL;