X-Git-Url: https://www.bearssl.org/gitweb//home/git/?p=BearSSL;a=blobdiff_plain;f=src%2Fint%2Fi15_mulacc.c;h=7a073ac67f950d58875189ed0206523af8869c35;hp=69f4696ba4fd324da013bf43a936d36b579ac475;hb=966078b3373a273f8417ede42ecab32a414dc109;hpb=c1e540575c63e09e6ab25c0c7826601d77b18d97

diff --git a/src/int/i15_mulacc.c b/src/int/i15_mulacc.c
index 69f4696..7a073ac 100644
--- a/src/int/i15_mulacc.c
+++ b/src/int/i15_mulacc.c
@@ -38,9 +38,9 @@ br_i15_mulacc(uint16_t *d, const uint16_t *a, const uint16_t *b)
 	 * Announced bit length of d[] will be the sum of the announced
 	 * bit lengths of a[] and b[]; but the lengths are encoded.
 	 */
-	dl = (a[0] & 15) + (d[0] & 15);
+	dl = (a[0] & 15) + (b[0] & 15);
 	dh = (a[0] >> 4) + (b[0] >> 4);
-	d[0] = (dh << 4) + dl + (~(uint16_t)(dl - 15) >> 15);
+	d[0] = (dh << 4) + dl + (~(uint32_t)(dl - 15) >> 31);
 
 	for (u = 0; u < blen; u ++) {
 		uint32_t f;