diff --git a/src/sbkeysync.c b/src/sbkeysync.c
index 0fd4c26..d68f675 100644
--- a/src/sbkeysync.c
+++ b/src/sbkeysync.c
@@ -280,8 +280,8 @@ static int sigdb_iterate(void *db_data, size_t len,
 			i + sizeof(*siglist) <= len &&
 			i + siglist->SignatureListSize > i &&
 			i + siglist->SignatureListSize <= len && !rc;
-			siglist = db_data + i,
-			i += siglist->SignatureListSize) {
+			i += siglist->SignatureListSize,
+			siglist = db_data + i) {
 
 		/* ensure that the header & sig sizes are sensible */
 		if (siglist->SignatureHeaderSize > siglist->SignatureListSize)