diff --git a/library/rsa.c b/library/rsa.c
index 7e75b2b..4958cad 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -1856,7 +1856,7 @@
         else
             slen = olen - hlen - 2;
     }
-    else if ( ( (size_t) saltlen ) > olen - hlen - 2 )
+    else if ( (saltlen < 0) || ((size_t) saltlen > olen - hlen - 2) )
     {
         return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
     }