]> git.ipfire.org Git - thirdparty/freeradius-server.git/commit
Annotate tainted data (CID #1455247) (#4686)
authorJames Jones <jejones3141@gmail.com>
Tue, 23 Aug 2022 15:25:15 +0000 (10:25 -0500)
committerGitHub <noreply@github.com>
Tue, 23 Aug 2022 15:25:15 +0000 (11:25 -0400)
commit2e818e2ebf89b94b06f0565e1dabbbf4375d4f0b
tree10a978455f5d37f1fa007a5e85ff30454a40bc13
parent637ef1b898dbf3350eebed8738cd2600d992ce81
Annotate tainted data (CID #1455247) (#4686)

data, not *data, controls the loop in fr_radius_decode(). The packet
length is checked against byte-swapped data from the packet, but
discrepancies are errors, so it's not set to a tainted value.
src/protocols/radius/decode.c