Additional check for RFC attr passed to vsa encoder

diff --git a/src/lib/radius.c b/src/lib/radius.c
index dbb44ca51641218b23b1472c9caa49f70857ab45..8c3e8cf82caf1a76b7f9f4d349325bd8c8c63ec7 100644 (file)
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -1470,6 +1470,12 @@ int rad_vp2vsa(RADIUS_PACKET const *packet, RADIUS_PACKET const *original,
        VALUE_PAIR const *vp = *pvp;
 
        VERIFY_VP(vp);
+
+       if (vp->da->vendor == 0) {
+               fr_strerror_printf("rad_vp2vsa called with rfc attribute");
+               return -1;
+       }
+
        /*
         *      Double-check for WiMAX format.
         */