From ff89a727d478e89d69e9cf8560fbffa3a4e088a0 Mon Sep 17 00:00:00 2001
From: Love Hornquist Astrand <lha@h5l.org>
Date: Thu, 30 Jul 2009 19:19:35 +0200
Subject: [PATCH] Fix bounced condition

---
 lib/krb5/pkinit.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/lib/krb5/pkinit.c b/lib/krb5/pkinit.c
index 373953539..af5568f44 100644
--- a/lib/krb5/pkinit.c
+++ b/lib/krb5/pkinit.c
@@ -1457,8 +1457,11 @@ pk_rd_pa_reply_dh(krb5_context context,
 #endif
     }
 	
-    if (dh_gen_keylen >= 0) {
+    if (dh_gen_keylen <= 0) {
 	ret = EINVAL;
+	krb5_set_error_message(context, ret,
+			       N_("PKINIT: resulting DH key <= 0", ""));
+	dh_gen_keylen = 0;
 	goto out;
     }