From 341829195e0c845cf26339768f275f021b69fedc Mon Sep 17 00:00:00 2001
From: tb <>
Date: Mon, 15 Dec 2025 12:09:46 +0000
Subject: BN_get_word(): return (BN_ULONG)-1 on error rather than BN_MASK2

While the latter is more general in that it also works on 1-complement
achitectures, we don't care about that. Adjust documentation and the
only error check for it in libcrypto.

ok deraadt
---
 src/lib/libcrypto/ec/ec_curve.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/lib/libcrypto/ec')

diff --git a/src/lib/libcrypto/ec/ec_curve.c b/src/lib/libcrypto/ec/ec_curve.c
index 2838965c1e..fda2681704 100644
--- a/src/lib/libcrypto/ec/ec_curve.c
+++ b/src/lib/libcrypto/ec/ec_curve.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ec_curve.c,v 1.59 2025/11/02 13:06:30 tb Exp $ */
+/* $OpenBSD: ec_curve.c,v 1.60 2025/12/15 12:09:46 tb Exp $ */
 /* ====================================================================
  * Copyright (c) 1998-2010 The OpenSSL Project.  All rights reserved.
  *
@@ -1392,7 +1392,7 @@ ec_curve_from_group(const EC_GROUP *group)
 	if ((cofactor = EC_GROUP_get0_cofactor(group)) != NULL) {
 		BN_ULONG cofactor_word;
 
-		if ((cofactor_word = BN_get_word(cofactor)) == BN_MASK2)
+		if ((cofactor_word = BN_get_word(cofactor)) == (BN_ULONG)-1)
 			goto err;
 		if (cofactor_word > INT_MAX)
 			goto err;
-- 
cgit v1.2.3-55-g6feb