From: Alan T. DeKok <aland@freeradius.org>
Date: Mon, 14 Sep 2015 12:50:00 +0000 (-0400)
Subject: Set explicit length for MS-CHAP-MPPE-Key
X-Git-Tag: release_3_0_10~107
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=00f041d6599929abc85d0d8abe355974ad6581d4;p=thirdparty%2Ffreeradius-server.git

Set explicit length for MS-CHAP-MPPE-Key

Because it's encrypted with the same method as User-Password,
BUT it contains binary data.  So it may have embedded zeros.
Which means the decoder needs to make it a fixed length,
instead of looking for zeros
---

diff --git a/share/dictionary.microsoft b/share/dictionary.microsoft
index 87c54ef3916..18d3abc307c 100644
--- a/share/dictionary.microsoft
+++ b/share/dictionary.microsoft
@@ -32,7 +32,7 @@ VALUE	MS-MPPE-Encryption-Types	RC4-40or128-bit-Allowed	6
 ATTRIBUTE	MS-RAS-Vendor				9	integer	# content is Vendor-ID
 ATTRIBUTE	MS-CHAP-Domain				10	string
 ATTRIBUTE	MS-CHAP-Challenge			11	octets
-ATTRIBUTE	MS-CHAP-MPPE-Keys			12	octets  encrypt=1
+ATTRIBUTE	MS-CHAP-MPPE-Keys			12	octets[24]  encrypt=1
 ATTRIBUTE	MS-BAP-Usage				13	integer
 ATTRIBUTE	MS-Link-Utilization-Threshold		14	integer # values are 1-100
 ATTRIBUTE	MS-Link-Drop-Time-Limit			15	integer