Set limits on string/octet attributes

diff --git a/src/lib/valuepair.c b/src/lib/valuepair.c
index 1a557c64a0d7413efb67527a675f5e1449b3e4d0..8d8ed531b2266e02e666be9beb73a3f6881aa0ec 100644 (file)
--- a/src/lib/valuepair.c
+++ b/src/lib/valuepair.c
@@ -1511,10 +1511,20 @@ static VALUE_PAIR *pairmake_any(const char *attribute, const char *value,
                vp->type = PW_TYPE_OCTETS;
                /* FALL-THROUGH */
                
-       case PW_TYPE_STRING:
        case PW_TYPE_OCTETS:
        case PW_TYPE_ABINARY:
                vp->length = size >> 1;
+               if (vp->length > sizeof(vp->vp_octets)) {
+                       vp->length = sizeof(vp->vp_octets);
+               }
+               break;
+
+       case PW_TYPE_STRING:
+               vp->length = size >> 1;
+               memset(&vp->vp_strvalue, 0, sizeof(vp->vp_strvalue));
+               if (vp->length >= sizeof(vp->vp_strvalue)) {
+                       vp->length = sizeof(vp->vp_strvalue) - 1;
+               }
                break;
        }