From 1483b8582ce2c77717dea5c369efe56c93cef998 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Sun, 24 Sep 2017 01:46:36 +0100 Subject: Return correct Suite B curve, fix comment. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/=4412) --- ssl/t1_lib.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'ssl/t1_lib.c') diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c index 67b06f261a..994ae85247 100644 --- a/ssl/t1_lib.c +++ b/ssl/t1_lib.c @@ -218,7 +218,7 @@ uint16_t tls1_ec_nid2curve_id(int nid) * Get curves list, if "sess" is set return client curves otherwise * preferred list. * Sets |num_curves| to the number of curves in the list, i.e., - * the length of |pcurves| is 2 * num_curves. + * the length of |pcurves| is num_curves. * Returns 1 on success and 0 if the client curves list has invalid format. * The latter indicates an internal error: we should not be accepting such * lists in the first place. @@ -245,7 +245,7 @@ int tls1_get_curvelist(SSL *s, int sess, const uint16_t **pcurves, break; case SSL_CERT_FLAG_SUITEB_192_LOS: - *pcurves = suiteb_curves + 2; + *pcurves = suiteb_curves + 1; pcurveslen = 1; break; default: -- cgit v1.2.3