1 files changed, 2 insertions, 2 deletions

diff --git a/kexgexs.c b/kexgexs.c
index 8c5adf7e4..3caab12de 100644
--- a/kexgexs.c
+++ b/kexgexs.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: kexgexs.c,v 1.26 2015/12/04 16:41:28 markus Exp $ */
+/* $OpenBSD: kexgexs.c,v 1.27 2016/05/31 23:46:14 dtucker Exp $ */
 /*
  * Copyright (c) 2000 Niels Provos.  All rights reserved.
  * Copyright (c) 2001 Markus Friedl.  All rights reserved.
@@ -89,7 +89,7 @@ input_kex_dh_gex_request(int type, u_int32_t seq, void *ctxt)
         nbits = MIN(DH_GRP_MAX, nbits);
 
         if (kex->max < kex->min || kex->nbits < kex->min ||
-            kex->max < kex->nbits) {
+            kex->max < kex->nbits || kex->max < DH_GRP_MIN) {
                 r = SSH_ERR_DH_GEX_OUT_OF_RANGE;
                 goto out;
         }