Use a new signed int ii instead of j (which is unsigned) to handle the return value from sk_SSL_CIPHER_find().
diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c index 7a87da6..bfb7051 100644 --- a/ssl/s3_lib.c +++ b/ssl/s3_lib.c
@@ -2043,7 +2043,7 @@ { SSL_CIPHER *c,*ret=NULL; STACK_OF(SSL_CIPHER) *prio, *allow; - int i,ok; + int i,ii,ok; unsigned int j; #ifndef OPENSSL_NO_TLSEXT #ifndef OPENSSL_NO_EC @@ -2291,10 +2291,10 @@ #endif /* OPENSSL_NO_TLSEXT */ if (!ok) continue; - j=sk_SSL_CIPHER_find(allow,c); - if (j >= 0) + ii=sk_SSL_CIPHER_find(allow,c); + if (ii >= 0) { - ret=sk_SSL_CIPHER_value(allow,j); + ret=sk_SSL_CIPHER_value(allow,ii); break; } }