--- ntp-4.2.4p5/ntpd/ntp_crypto.c.cve-2009-0021 2009-01-13 13:59:22.000000000 -0500 +++ ntp-4.2.4p5/ntpd/ntp_crypto.c 2009-01-13 13:59:37.000000000 -0500 @@ -1612,7 +1612,7 @@ crypto_verify( */ EVP_VerifyInit(&ctx, peer->digest); EVP_VerifyUpdate(&ctx, (u_char *)&ep->tstamp, vallen + 12); - if (!EVP_VerifyFinal(&ctx, (u_char *)&ep->pkt[i], siglen, pkey)) + if (EVP_VerifyFinal(&ctx, (u_char *)&ep->pkt[i], siglen, pkey) <= 0) return (XEVNT_SIG); if (peer->crypto & CRYPTO_FLAG_VRFY) {