From b8aeaea80c41550982bd06da2e46ba0297d5e945 Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Fri, 18 Jun 2010 09:15:45 +0200
Subject: [PATCH] Fix use of snprintf() in pluto subjectAltName enumeration

---
 src/pluto/x509.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/pluto/x509.c b/src/pluto/x509.c
index 1c26d733a..2b8681246 100644
--- a/src/pluto/x509.c
+++ b/src/pluto/x509.c
@@ -393,6 +393,10 @@ void list_x509cert_chain(const char *caption, cert_t* cert,
 				{
 					written = snprintf(pos, len, ", %Y", id);
 				}
+				if (written < 0 || written >= len)
+				{
+					break;
+				}
 				pos += written;
 				len -= written;
 			}