From e72665eec00a00bfe4f44e2057fac95da529287f Mon Sep 17 00:00:00 2001
From: pedro martelletto <pedro@ambientworks.net>
Date: Fri, 5 Dec 2014 09:41:33 +0100
Subject: [PATCH] fix i2d_X509_NAME() error checking

use int instead of size_t to store the return of i2d_X509_NAME(), fixing
a < 0 check for error.

ok patrick@
---
 sbin/iked/ikev2.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sbin/iked/ikev2.c b/sbin/iked/ikev2.c
index c2bf3573a90..84b5b6ad311 100644
--- a/sbin/iked/ikev2.c
+++ b/sbin/iked/ikev2.c
@@ -1118,7 +1118,7 @@ ikev2_policy2id(struct iked_static_id *polid, struct iked_id *id, int srcid)
 	struct in6_addr		 in6;
 	X509_NAME		*name = NULL;
 	u_int8_t		*p;
-	size_t			 len;
+	int			 len;
 
 	/* Fixup the local Id if not specified */
 	if (srcid && polid->id_type == 0) {