From 83fb1d7227e2f81d8568fa2a1c3f0d15c164035b Mon Sep 17 00:00:00 2001
From: kenjiro <>
Date: Sun, 30 Aug 2026 12:23:16 +0000
Subject: libssl: avoid narrowing return value in dtls1_ctrl

dtls1_ctrl() and ssl3_ctrl() return long, but the intermediate return
value was stored in an int. Use long to avoid truncating values returned
by ssl3_ctrl().

CID 497395

From Yuji Hashimoto

ok tb jsing
---
 src/lib/libssl/d1_lib.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src')

diff --git a/src/lib/libssl/d1_lib.c b/src/lib/libssl/d1_lib.c
index fa546b381c..7f6dd1d1c5 100644
--- a/src/lib/libssl/d1_lib.c
+++ b/src/lib/libssl/d1_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: d1_lib.c,v 1.66 2026/05/16 08:20:41 jsing Exp $ */
+/* $OpenBSD: d1_lib.c,v 1.67 2026/08/30 12:23:16 kenjiro Exp $ */
 /*
  * DTLS implementation written by Nagendra Modadugu
  * (nagendra@cs.stanford.edu) for the OpenSSL project 2005.
@@ -233,7 +233,7 @@ dtls1_clear(SSL *s)
 long
 dtls1_ctrl(SSL *s, int cmd, long larg, void *parg)
 {
-	int ret = 0;
+	long ret = 0;
 
 	switch (cmd) {
 	case DTLS_CTRL_GET_TIMEOUT:
-- 
cgit v1.2.3-55-g6feb