From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Mon, 9 Apr 2012 11:40:54 +0000 (+0200)
Subject: corrected DH generation check.
X-Git-Tag: gnutls_3_0_19~18
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4dd4038557f89f3384f3a3246b8601db4fe0fa63;p=thirdparty%2Fgnutls.git

corrected DH generation check.
---

diff --git a/lib/nettle/mpi.c b/lib/nettle/mpi.c
index 1e61275ab5..d4612b837a 100644
--- a/lib/nettle/mpi.c
+++ b/lib/nettle/mpi.c
@@ -427,7 +427,7 @@ gen_group (mpz_t * prime, mpz_t * generator, unsigned int nbits, unsigned int *q
   q_bytes = _gnutls_pk_bits_to_subgroup_bits (nbits);
   q_bytes /= 8;
 
-  if (q_bytes == 0 || q_bytes <= p_bytes)
+  if (q_bytes == 0 || q_bytes >= p_bytes)
     {
       gnutls_assert ();
       return GNUTLS_E_INVALID_REQUEST;