(nettle_mpz_set_sexp): In the first check against

limit, added some margin to allow for sign octets.

Rev: src/nettle/sexp2bignum.c:1.3

sexp2bignum.c

@@ -38,10 +38,12 @@ nettle_mpz_set_sexp(mpz_t x, unsigned limit, const struct sexp_iterator *i)
       && i->atom_length
       && !i->display)
     {
-      if (limit && (8 * i->atom_length > limit))
+      /* Allow some extra here, for leading sign octets. */
+      if (limit && (8 * i->atom_length > (16 + limit)))
 	return 0;
       
       nettle_mpz_set_str_256_s(x, i->atom_length, i->atom);
+      /* FIXME: How to interpret a limit for negative numbers? */
       return !limit || mpz_sizeinbase(x, 2) <= limit;
     }
   else