Fix compilation with NSS.

diff --git a/src/lib/crypt_ops/crypto_dh_nss.c b/src/lib/crypt_ops/crypto_dh_nss.c
index e0bed5c7e707a118a2d27d4cf5c600d2c55e6454..a0378077d6c09775db1b781f7c25fbef2582a37f 100644 (file)
--- a/src/lib/crypt_ops/crypto_dh_nss.c
+++ b/src/lib/crypt_ops/crypto_dh_nss.c
@@ -25,7 +25,7 @@ ENABLE_GCC_WARNING("-Wstrict-prototypes")
 
 static int dh_initialized = 0;
 static SECKEYDHParams tls_dh_param, circuit_dh_param;
-static unsigned char tls_dh_prime_data[DH1024_KEY_LEN];
+static unsigned char tls_dh_prime_data[DH1024_KEY_LEN * 2];
 static unsigned char circuit_dh_prime_data[DH1024_KEY_LEN];
 static unsigned char dh_generator_data[1];
 
@@ -39,7 +39,7 @@ crypto_dh_init_nss(void)
   r = base16_decode((char*)tls_dh_prime_data,
                     sizeof(tls_dh_prime_data),
                     TLS_DH_PRIME, strlen(TLS_DH_PRIME));
-  tor_assert(r == DH1024_KEY_LEN);
+  tor_assert(r == DH1024_KEY_LEN * 2);
   r = base16_decode((char*)circuit_dh_prime_data,
                     sizeof(circuit_dh_prime_data),
                     OAKLEY_PRIME_2, strlen(OAKLEY_PRIME_2));
@@ -47,7 +47,7 @@ crypto_dh_init_nss(void)
   dh_generator_data[0] = DH_GENERATOR;
 
   tls_dh_param.prime.data = tls_dh_prime_data;
-  tls_dh_param.prime.len = DH1024_KEY_LEN;
+  tls_dh_param.prime.len = DH1024_KEY_LEN * 2;
   tls_dh_param.base.data = dh_generator_data;
   tls_dh_param.base.len = 1;