diff --git a/ChangeLog b/ChangeLog
index fdd857292..05592977c 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -26,6 +26,9 @@
    - markus@cvs.openbsd.org 2002/02/23 17:59:02
      [kex.c kexdh.c kexgex.c]
      don't allow garbage after payload.
+   - stevesk@cvs.openbsd.org 2002/02/24 16:09:52
+     [sshd.c]
+     use u_char* here; ok markus@
 
 20020225
  - (bal) Last AIX patch.  Moved aix_usrinfo() outside of do_setuserconext()
@@ -7699,4 +7702,4 @@
  - Wrote replacements for strlcpy and mkdtemp
  - Released 1.0pre1
 
-$Id: ChangeLog,v 1.1880 2002/02/26 17:58:29 mouring Exp $
+$Id: ChangeLog,v 1.1881 2002/02/26 18:00:48 mouring Exp $
diff --git a/sshd.c b/sshd.c
index 4b049e387..21a5f9c19 100644
--- a/sshd.c
+++ b/sshd.c
@@ -40,7 +40,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: sshd.c,v 1.226 2002/02/11 16:19:39 markus Exp $");
+RCSID("$OpenBSD: sshd.c,v 1.227 2002/02/24 16:09:52 stevesk Exp $");
 
 #include <openssl/dh.h>
 #include <openssl/bn.h>
@@ -1434,7 +1434,7 @@ do_ssh1_kex(void)
 	}
 	if (rsafail) {
 		int bytes = BN_num_bytes(session_key_int);
-		char *buf = xmalloc(bytes);
+		u_char *buf = xmalloc(bytes);
 		MD5_CTX md;
 
 		log("do_connection: generating a fake encryption key");