Check size of buffer for raw attributes

diff --git a/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c b/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c
index caaa62edb8986a122de9bf69b650af81b9556b29..ef86f2ccb567ae0254489a6387c779e2874befb2 100644 (file)
--- a/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c
+++ b/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c
@@ -234,6 +234,7 @@ static VALUE_PAIR *diameter2vp(REQUEST *request, SSL *ssl,
                raw:
                                vp = paircreate_raw(vp->attribute,
                                                    PW_TYPE_OCTETS, vp);
+                               if (size >= 253) size = 253;
                                vp->length = size;
                                memcpy(vp->vp_octets, data, vp->length);
                                break;