From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Wed, 22 Jan 2014 14:41:50 +0000 (+0100)
Subject: corrected s check in _dsa_generate_dss_pq
X-Git-Tag: gnutls_3_3_0pre0~300
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=98bb5f07fc0d75af420a132fced50977d8e9b8d5;p=thirdparty%2Fgnutls.git

corrected s check in _dsa_generate_dss_pq
---

diff --git a/lib/nettle/int/dsa-keygen-fips186.c b/lib/nettle/int/dsa-keygen-fips186.c
index 0bcc7eed7a..09ad132a86 100644
--- a/lib/nettle/int/dsa-keygen-fips186.c
+++ b/lib/nettle/int/dsa-keygen-fips186.c
@@ -96,7 +96,7 @@ _dsa_generate_dss_pq(struct dsa_public_key *pub,
   mpz_set_ui(r, 1);
   mpz_mul_2exp (r, r, q_bits - 1);
 
-  if (mpz_cmp(s, r) < 0)
+  if (mpz_cmp(s, r) >= 0)
     goto fail;
 
   cert->qseed_length = sizeof(cert->qseed);