(macro GET): Check sign of parsed

numbers.

Rev: src/nettle/sexp2dsa.c:1.2
Rev: src/nettle/sexp2rsa.c:1.9

1 files changed, 6 insertions, 2 deletions

diff --git a/sexp2dsa.c b/sexp2dsa.c
index e7731cc6..357b3cf8 100644
--- a/sexp2dsa.c
+++ b/sexp2dsa.c
@@ -35,8 +35,12 @@
 
 #include <string.h>
 
-#define GET(x, l, v) \
-do { if (!nettle_mpz_set_sexp((x), (l), (v))) return 0; } while(0)
+#define GET(x, l, v)				\
+do {						\
+  if (!nettle_mpz_set_sexp((x), (l), (v))	\
+      || mpz_sgn(x) <= 0)			\
+    return 0;					\
+} while(0)
 
 /* Iterator should point past the algorithm tag, e.g.
  *