Account for EAP header and EAP-MSCHAPv2 opcode

Found by Matt Dayman.

diff --git a/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c b/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c
index 94819cb64ea0acab96f2a4f5dd97b5e324b5e55f..2b20d769d267602e0b99473eedf9e24e643773cf 100644 (file)
--- a/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c
+++ b/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c
@@ -405,7 +405,7 @@ static int mschapv2_authenticate(void *arg, EAP_HANDLER *handler)
        /*
         *      Sanity check the response.
         */
-       if (eap_ds->response->length <= 4) {
+       if (eap_ds->response->length <= 5) {
                radlog(L_ERR, "rlm_eap_mschapv2: corrupted data");
                return 0;
        }