It should return 0 for failure, not -1; the call site was expecting 0 anyway. Change-Id: I24ab5d3695b8ac438e40be1a4fd74ecd3b845f5a Reviewed-on: https://boringssl-review.googlesource.com/1914 Reviewed-by: Adam Langley <agl@google.com>