diff --git a/CHANGES b/CHANGES
index e9749d1a38..3c4a32c3a3 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5.2.0-dev.352 | 2022-11-21 09:10:28 -0700
+
+  * Fix logic error in vfmt() when growing the buffer (Michael Dopheide)
+
 5.2.0-dev.350 | 2022-11-21 09:09:09 -0700
 
   * Added NTLM challenge and response (nadavkluger)
diff --git a/VERSION b/VERSION
index 91859db707..f8df61922f 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-5.2.0-dev.350
+5.2.0-dev.352
diff --git a/src/util.cc b/src/util.cc
index 6b047f703d..ae3a9d12b7 100644
--- a/src/util.cc
+++ b/src/util.cc
@@ -1630,7 +1630,7 @@ const char* vfmt(const char* format, va_list al)
 	va_copy(alc, al);
 	int n = vsnprintf(buf, buf_len, format, al);
 
-	if ( n > 0 && buf_len < n )
+	if ( n > 0 && buf_len <= n )
 		{ // Not enough room, grow the buffer.
 		buf_len = n + 32;
 		buf = (char*)safe_realloc(buf, buf_len);