From 4da64d119efa6dd7eaa105d918c2b3df74d8614b Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Tue, 29 Nov 2022 17:57:14 -0600
Subject: [PATCH] hx509: Return better error in CSR authorization functions

---
 lib/hx509/req.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lib/hx509/req.c b/lib/hx509/req.c
index c8fa42e5f..208d71f20 100644
--- a/lib/hx509/req.c
+++ b/lib/hx509/req.c
@@ -977,7 +977,7 @@ abitstring_check(abitstring a, size_t n, int idx)
     size_t bytes;
 
     if (idx >= n)
-        return EINVAL;
+        return HX509_NO_ITEM;
 
     bytes = (idx + 1) / CHAR_BIT + (((idx + 1) % CHAR_BIT) ? 1 : 0);
     if (a->feat_bytes < bytes)
@@ -996,7 +996,7 @@ abitstring_set(abitstring a, size_t n, int idx)
     size_t bytes;
 
     if (idx >= n)
-        return EINVAL;
+        return HX509_NO_ITEM;
 
     bytes = n / CHAR_BIT + ((n % CHAR_BIT) ? 1 : 0);
     if (a->feat_bytes < bytes) {
@@ -1026,7 +1026,7 @@ abitstring_reset(abitstring a, size_t n, int idx)
     size_t bytes;
 
     if (idx >= n)
-        return EINVAL;
+        return HX509_NO_ITEM;
 
     bytes = (idx + 1) / CHAR_BIT + (((idx + 1) % CHAR_BIT) ? 1 : 0);
     if (a->feat_bytes >= bytes &&