2 files changed, 10 insertions, 13 deletions

diff --git a/src/lib/libcrypto/asn1/a_bitstr.c b/src/lib/libcrypto/asn1/a_bitstr.c
index 82fd53231f..9eee97e33d 100644
--- a/src/lib/libcrypto/asn1/a_bitstr.c
+++ b/src/lib/libcrypto/asn1/a_bitstr.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: a_bitstr.c,v 1.46 2026/01/04 09:30:57 tb Exp $ */
+/* $OpenBSD: a_bitstr.c,v 1.47 2026/01/04 09:51:42 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -184,16 +184,7 @@ i2c_ASN1_BIT_STRING(ASN1_BIT_STRING *a, unsigned char **pp)
         if (a == NULL)
                 return (0);
 
-        if (a->length == INT_MAX)
-                return (0);
-
-        ret = a->length + 1;
-
-        if (pp == NULL)
-                return (ret);
-
         len = a->length;
-
         if (len > 0) {
                 if (a->flags & ASN1_STRING_FLAG_BITS_LEFT) {
                         bits = (int)a->flags & 0x07;
@@ -227,6 +218,14 @@ i2c_ASN1_BIT_STRING(ASN1_BIT_STRING *a, unsigned char **pp)
         } else
                 bits = 0;
 
+        if (len > INT_MAX - 1)
+                return (0);
+
+        ret = len + 1;
+
+        if (pp == NULL)
+                return (ret);
+
         p = *pp;
 
         *(p++) = (unsigned char)bits;
diff --git a/src/regress/lib/libcrypto/asn1/Makefile b/src/regress/lib/libcrypto/asn1/Makefile
index 1bb9da8585..23a01ab600 100644
--- a/src/regress/lib/libcrypto/asn1/Makefile
+++ b/src/regress/lib/libcrypto/asn1/Makefile
@@ -1,4 +1,4 @@
-#       $OpenBSD: Makefile,v 1.29 2026/01/04 09:42:32 tb Exp $
+#       $OpenBSD: Makefile,v 1.30 2026/01/04 09:51:42 tb Exp $
 
 PROGS = \
         asn1api \
@@ -22,8 +22,6 @@ CFLAGS+=	-Wall -Wundef -Werror
 CFLAGS+=        -I${.CURDIR}/../../../../lib/libcrypto/asn1
 CFLAGS+=        -I${.CURDIR}/../../../../lib/libcrypto/bytestring
 
-REGRESS_EXPECTED_FAILURES += run-regress-asn1basic
-
 LDADD_asn1basic = ${CRYPTO_INT}
 LDADD_asn1object = ${CRYPTO_INT}
 LDADD_asn1time = ${CRYPTO_INT}