nope. header length is 4

diff --git a/src/protocols/radius/decode.c b/src/protocols/radius/decode.c
index d7faf796573bb693ef0f93f4d81f82f91437c6dc..2566775f5b536057c04deb714d406640009de785 100644 (file)
--- a/src/protocols/radius/decode.c
+++ b/src/protocols/radius/decode.c
@@ -887,7 +887,7 @@ static ssize_t decode_extended_fragments(TALLOC_CTX *ctx, fr_pair_list_t *out,
        last_frag = false;
 
        while (frag < end) {
-               if (last_frag || ((end - frag) < 2) ||
+               if (last_frag || ((end - frag) < 4) ||
                    (frag[0] != attr[0]) ||
                    (frag[1] < 4) ||                   /* too short for long-extended */
                    (frag[2] != attr[2]) ||