diff --git a/ChangeLog b/ChangeLog
index 58a9382a..0029c93b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2011-08-14  Nicolas François  <nicolas.francois@centraliens.net>
+
+	* src/su.c: Add annotations to indicate that su_failure() does
+	not return.
+
 2011-07-30  Nicolas François  <nicolas.francois@centraliens.net>
 
 	* lib/commonio.c: Display PID as unsigned long.
diff --git a/src/su.c b/src/su.c
index 84ac42b9..03ad6348 100644
--- a/src/su.c
+++ b/src/su.c
@@ -131,7 +131,7 @@ static RETSIGTYPE die (int);
 static bool iswheel (const char *);
 #endif				/* !USE_PAM */
 static bool restricted_shell (const char *shellname);
-static void su_failure (const char *tty, bool su_to_root);
+static /*@noreturn@*/void su_failure (const char *tty, bool su_to_root);
 static struct passwd * check_perms (void);
 #ifdef USE_PAM
 static void check_perms_pam (struct passwd *pw);
@@ -207,7 +207,7 @@ static bool restricted_shell (const char *shellname)
 	return true;
 }
 
-static void su_failure (const char *tty, bool su_to_root)
+static /*@noreturn@*/void su_failure (const char *tty, bool su_to_root)
 {
 	sulog (tty, false, caller_name, name);	/* log failed attempt */
 #ifdef USE_SYSLOG