From a149d83bff7ebc9760d8d2eac68a2e6bd4a49f8a Mon Sep 17 00:00:00 2001
From: Chris Conlon <chris@wolfssl.com>
Date: Fri, 9 Sep 2016 16:11:56 -0600
Subject: [PATCH] include MAX_RSA_INT_SZ in wc_RsaKeyToPublicDer(), for
 4096-bit keys

---
 wolfcrypt/src/asn.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c
index 884e66ae5..2d203439d 100644
--- a/wolfcrypt/src/asn.c
+++ b/wolfcrypt/src/asn.c
@@ -5572,7 +5572,7 @@ static int SetRsaPublicKey(byte* output, RsaKey* key,
     n[0] = ASN_INTEGER;
     nSz  = SetLength(rawLen, n + 1) + 1;  /* int tag */
 
-    if ( (nSz + rawLen) < MAX_RSA_INT_SZ) {
+    if ( (nSz + rawLen) <= MAX_RSA_INT_SZ) {
         if (leadingBit)
             n[nSz] = 0;
 #ifdef HAVE_USER_RSA