From 2cbd4d98673d99cd7cb10715656b6d3727342e77 Mon Sep 17 00:00:00 2001
From: Kurt Roeckx <kurt@roeckx.be>
Date: Thu, 23 Jun 2016 09:37:51 +0200
Subject: Avoid signed overflow

Found by afl

Reviewed-by: Rich Salz <rsalz@openssl.org>

MR: #3013
(cherry picked from commit 5bea15ebb359c91a1bb7569620ead14bb71cfb81)
---
 crypto/asn1/x_long.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crypto/asn1/x_long.c b/crypto/asn1/x_long.c
index 3aed44a3dd..98562a18ba 100644
--- a/crypto/asn1/x_long.c
+++ b/crypto/asn1/x_long.c
@@ -178,8 +178,8 @@ static int long_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
     }
     ltmp = (long)utmp;
     if (neg) {
-        ltmp++;
         ltmp = -ltmp;
+        ltmp--;
     }
     if (ltmp == it->size) {
         ASN1err(ASN1_F_LONG_C2I, ASN1_R_INTEGER_TOO_LARGE_FOR_LONG);
-- 
cgit v1.2.3