From: Martin Willi <martin@revosec.ch>
Date: Fri, 18 Jun 2010 07:15:45 +0000 (+0200)
Subject: Fix use of snprintf() in pluto subjectAltName enumeration
X-Git-Tag: 4.4.1~4
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b8aeaea80c41550982bd06da2e46ba0297d5e945;p=thirdparty%2Fstrongswan.git

Fix use of snprintf() in pluto subjectAltName enumeration
---

diff --git a/src/pluto/x509.c b/src/pluto/x509.c
index 1c26d733a0..2b86812463 100644
--- a/src/pluto/x509.c
+++ b/src/pluto/x509.c
@@ -393,6 +393,10 @@ void list_x509cert_chain(const char *caption, cert_t* cert,
 				{
 					written = snprintf(pos, len, ", %Y", id);
 				}
+				if (written < 0 || written >= len)
+				{
+					break;
+				}
 				pos += written;
 				len -= written;
 			}