--- ntp-4.2.4p5/ntpd/ntp_crypto.c.cve-2009-0021	2009-01-13 13:59:22.000000000 -0500
+++ ntp-4.2.4p5/ntpd/ntp_crypto.c	2009-01-13 13:59:37.000000000 -0500
@@ -1612,7 +1612,7 @@ crypto_verify(
 	 */
 	EVP_VerifyInit(&ctx, peer->digest);
 	EVP_VerifyUpdate(&ctx, (u_char *)&ep->tstamp, vallen + 12);
-	if (!EVP_VerifyFinal(&ctx, (u_char *)&ep->pkt[i], siglen, pkey))
+	if (EVP_VerifyFinal(&ctx, (u_char *)&ep->pkt[i], siglen, pkey) <= 0)
 		return (XEVNT_SIG);
 
 	if (peer->crypto & CRYPTO_FLAG_VRFY) {