Fix use of snprintf() in pluto subjectAltName enumeration

diff --git a/src/pluto/x509.c b/src/pluto/x509.c
index 1c26d733a064ff3ef34a28f408cad19e8b2725a0..2b86812463e01c374cd5a677305801797525875a 100644 (file)
--- a/src/pluto/x509.c
+++ b/src/pluto/x509.c
@@ -393,6 +393,10 @@ void list_x509cert_chain(const char *caption, cert_t* cert,
                                {
                                        written = snprintf(pos, len, ", %Y", id);
                                }
+                               if (written < 0 || written >= len)
+                               {
+                                       break;
+                               }
                                pos += written;
                                len -= written;
                        }