j=BN_bn2bin(&ret,p);
j=BN_bn2bin(ret,p);
static int RSA_eay_private_decrypt(int flen, const unsigned char *from,	     unsigned char *to, RSA *rsa, int padding)	{	BIGNUM f,ret;	int j,num=0,r= -1;	unsigned char *p;	unsigned char *buf=NULL;	BN_CTX *ctx=NULL;	int local_blinding = 0;	BN_BLINDING *blinding = NULL;	BN_init(&f);	BN_init(&ret);	ctx=BN_CTX_new();	if (ctx == NULL) goto err;	num=BN_num_bytes(rsa->n);	if ((buf=(unsigned char *)OPENSSL_malloc(num)) == NULL)		{		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,ERR_R_MALLOC_FAILURE);		goto err;		}	/* This check was for equality but PGP does evil things	 * and chops off the top '0' bytes */	if (flen > num)		{		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,RSA_R_DATA_GREATER_THAN_MOD_LEN);		goto err;		}	/* make data into a big number */	if (BN_bin2bn(from,(int)flen,&f) == NULL) goto err;	if (BN_ucmp(&f, rsa->n) >= 0)		{		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,RSA_R_DATA_TOO_LARGE_FOR_MODULUS);		goto err;		}	BLINDING_HELPER(rsa, ctx, goto err;);	blinding = rsa->blinding;		/* Now unless blinding is disabled, 'blinding' is non-NULL.	 * But the BN_BLINDING object may be owned by some other thread	 * (we don't want to keep it constant and we don't want to use	 * lots of locking to avoid race conditions, so only a single	 * thread can use it; other threads have to use local blinding	 * factors) */	if (!(rsa->flags & RSA_FLAG_NO_BLINDING))		{		if (blinding == NULL)			{			RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT, ERR_R_INTERNAL_ERROR);			goto err;			}		}		if (blinding != NULL)		{		if (blinding->thread_id != CRYPTO_thread_id())			{			/* we need a local one-time blinding factor */			blinding = setup_blinding(rsa, ctx);			if (blinding == NULL)				goto err;			local_blinding = 1;			}		}	if (blinding)		if (!BN_BLINDING_convert(&f, blinding, ctx)) goto err;	/* do the decrypt */	if ( (rsa->flags & RSA_FLAG_EXT_PKEY) ||		((rsa->p != NULL) &&		(rsa->q != NULL) &&		(rsa->dmp1 != NULL) &&		(rsa->dmq1 != NULL) &&		(rsa->iqmp != NULL)) )		{ if (!rsa->meth->rsa_mod_exp(&ret,&f,rsa)) goto err; }	else		{		MONT_HELPER(rsa, ctx, n, rsa->flags & RSA_FLAG_CACHE_PUBLIC, goto err);		if (!rsa->meth->bn_mod_exp(&ret,&f,rsa->d,rsa->n,ctx,				rsa->_method_mod_n))			goto err;		}	if (blinding)		if (!BN_BLINDING_invert(&ret, blinding, ctx)) goto err;	p=buf;	j=BN_bn2bin(&ret,p); /* j is only used with no-padding mode */	switch (padding)		{	case RSA_PKCS1_PADDING:		r=RSA_padding_check_PKCS1_type_2(to,num,buf,j,num);		break;#ifndef OPENSSL_NO_SHA        case RSA_PKCS1_OAEP_PADDING:	        r=RSA_padding_check_PKCS1_OAEP(to,num,buf,j,num,NULL,0);                break;#endif 	case RSA_SSLV23_PADDING:		r=RSA_padding_check_SSLv23(to,num,buf,j,num);		break;	case RSA_NO_PADDING:		r=RSA_padding_check_none(to,num,buf,j,num);		break;	default:		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,RSA_R_UNKNOWN_PADDING_TYPE);		goto err;		}	if (r < 0)		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,RSA_R_PADDING_CHECK_FAILED);err:	if (ctx != NULL) BN_CTX_free(ctx);	BN_clear_free(&f);	BN_clear_free(&ret);	if (local_blinding)		BN_BLINDING_free(blinding);	if (buf != NULL)		{		OPENSSL_cleanse(buf,num);		OPENSSL_free(buf);		}	return(r);	}