Use fallthrough statement attribute (moar)

lib/hx509/cert.c

@@ -2438,12 +2438,12 @@ hx509_verify_path(hx509_context context,
 		 * EE checking below.
 		 */
 		type = EE_CERT;
-                fallthrough
                 /* FALLTHROUGH */
+                fallthrough
 	    }
-            fallthrough
 	}
         /* FALLTHROUGH */
+        fallthrough
 	case EE_CERT:
 	    /*
 	     * If there where any proxy certificates in the chain

lib/hx509/cms.c

@@ -182,8 +182,8 @@ fill_CMSIdentifier(const hx509_cert cert,
 						   &id->u.subjectKeyIdentifier);
 	if (ret == 0)
 	    break;
-        fallthrough
 	/* FALLTHROUGH */
+        fallthrough
     case CMS_ID_NAME: {
 	hx509_name name;
 

lib/hx509/file.c

@@ -230,8 +230,8 @@ hx509_pem_read(hx509_context context,
 		where = INDATA;
 		goto indata;
 	    }
-            fallthrough
 	    /* FALLTHROUGH */
+            fallthrough
 	case INHEADER:
 	    if (buf[0] == '\0') {
 		where = INDATA;