===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/openssl/ca.c,v
retrieving revision 1.26
retrieving revision 1.27
diff -c -r1.26 -r1.27
*** src/usr.bin/openssl/ca.c	2018/02/07 05:47:55	1.26
--- src/usr.bin/openssl/ca.c	2019/07/03 03:24:02	1.27
***************
*** 1,4 ****
! /* $OpenBSD: ca.c,v 1.26 2018/02/07 05:47:55 jsing Exp $ */
  /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
   * All rights reserved.
   *
--- 1,4 ----
! /* $OpenBSD: ca.c,v 1.27 2019/07/03 03:24:02 deraadt Exp $ */
  /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
   * All rights reserved.
   *
***************
*** 1109,1115 ****
  				k = snprintf(pempath, sizeof(pempath),
  				    "%s/%s.pem", outdir, serialstr);
  				free(serialstr);
! 				if (k == -1 || k >= sizeof(pempath)) {
  					BIO_printf(bio_err,
  					    "certificate file name too long\n");
  					goto err;
--- 1109,1115 ----
  				k = snprintf(pempath, sizeof(pempath),
  				    "%s/%s.pem", outdir, serialstr);
  				free(serialstr);
! 				if (k < 0 || k >= sizeof(pempath)) {
  					BIO_printf(bio_err,
  					    "certificate file name too long\n");
  					goto err;