BN_get_word(): return (BN_ULONG)-1 on error rather than BN_MASK2

While the latter is more general in that it also works on 1-complement
achitectures, we don't care about that. Adjust documentation and the
only error check for it in libcrypto.

ok deraadt

1 files changed, 2 insertions, 2 deletions

diff --git a/src/lib/libcrypto/ec/ec_curve.c b/src/lib/libcrypto/ec/ec_curve.c
index 2838965c1e..fda2681704 100644
--- a/src/lib/libcrypto/ec/ec_curve.c
+++ b/src/lib/libcrypto/ec/ec_curve.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ec_curve.c,v 1.59 2025/11/02 13:06:30 tb Exp $ */
+/* $OpenBSD: ec_curve.c,v 1.60 2025/12/15 12:09:46 tb Exp $ */
 /* ====================================================================
  * Copyright (c) 1998-2010 The OpenSSL Project.  All rights reserved.
  *
@@ -1392,7 +1392,7 @@ ec_curve_from_group(const EC_GROUP *group)
         if ((cofactor = EC_GROUP_get0_cofactor(group)) != NULL) {
                 BN_ULONG cofactor_word;
 
-                if ((cofactor_word = BN_get_word(cofactor)) == BN_MASK2)
+                if ((cofactor_word = BN_get_word(cofactor)) == (BN_ULONG)-1)
                         goto err;
                 if (cofactor_word > INT_MAX)
                         goto err;