make maxbits signed as BN_num_bits is signed

diff --git a/lib/dns/dst_internal.h b/lib/dns/dst_internal.h
index d4b1f7a48603ed08b25421d0f94cef71802c4edc..d9d756722339197d991e5edcb2afac34ca169cf9 100644 (file)
--- a/lib/dns/dst_internal.h
+++ b/lib/dns/dst_internal.h
@@ -170,7 +170,7 @@ struct dst_func {
         */
        isc_result_t (*sign)(dst_context_t *dctx, isc_buffer_t *sig);
        isc_result_t (*verify)(dst_context_t *dctx, const isc_region_t *sig);
-       isc_result_t (*verify2)(dst_context_t *dctx, unsigned int maxbits,
+       isc_result_t (*verify2)(dst_context_t *dctx, int maxbits,
                                const isc_region_t *sig);
        isc_result_t (*computesecret)(const dst_key_t *pub,
                                      const dst_key_t *priv,

diff --git a/lib/dns/opensslrsa_link.c b/lib/dns/opensslrsa_link.c
index 0e3b0c9c7a034e12db2ecd420c582a0ced38788c..fa6b7d615b4113ad27cb56403e50e22a91410836 100644 (file)
--- a/lib/dns/opensslrsa_link.c
+++ b/lib/dns/opensslrsa_link.c
@@ -511,7 +511,7 @@ opensslrsa_sign(dst_context_t *dctx, isc_buffer_t *sig) {
 }
 
 static isc_result_t
-opensslrsa_verify2(dst_context_t *dctx, unsigned int maxbits, const isc_region_t *sig) {
+opensslrsa_verify2(dst_context_t *dctx, int maxbits, const isc_region_t *sig) {
        dst_key_t *key = dctx->key;
        int status = 0;
 #if USE_EVP