VPs coming from packets are tainted

diff --git a/src/lib/radius_decode.c b/src/lib/radius_decode.c
index 75c490e4ff34284315c4a633ab8bd974eaae9934..72f5a3d050b04c1e9c4eabafd6675ce4aade2985 100644 (file)
--- a/src/lib/radius_decode.c
+++ b/src/lib/radius_decode.c
@@ -1405,6 +1405,7 @@ ssize_t fr_radius_decode_pair_value(TALLOC_CTX *ctx, vp_cursor_t *cursor, fr_dic
                return -1;
        }
        vp->type = VT_DATA;
+       vp->vp_tainted = true;
        fr_cursor_append(cursor, vp);
 
        return attr_len;
@@ -1457,6 +1458,7 @@ ssize_t fr_radius_decode_pair(TALLOC_CTX *ctx, vp_cursor_t *cursor, fr_dict_attr
                vp = fr_pair_afrom_da(ctx,da);
                if (!vp) return -1;
                fr_cursor_append(cursor, vp);
+               vp->vp_tainted = true;          /* not REALLY necessary, but what the heck */
 
                return 2;
        }