Check length of ascend secrets

diff --git a/src/lib/radius.c b/src/lib/radius.c
index ac638ce2e4db509d87f60e40ccaff90ffe3dde0c..1797a17c84142f01debf3d77d4b35c7a2987ae33 100644 (file)
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -1003,6 +1003,7 @@ static ssize_t vp2data_any(const RADIUS_PACKET *packet,
                 *      always fits.
                 */
        case FLAG_ENCRYPT_ASCEND_SECRET:
+               if (len != 16) return 0;
                make_secret(ptr, packet->vector, secret, data);
                len = AUTH_VECTOR_LEN;
                break;