From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 15 Nov 2016 15:49:36 +0000 (-0500)
Subject: VPs coming from packets are tainted
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=13243cfa0ba1c36816c575daed79bf98a4bdfc2a;p=thirdparty%2Ffreeradius-server.git

VPs coming from packets are tainted
---

diff --git a/src/lib/radius_decode.c b/src/lib/radius_decode.c
index 75c490e4ff3..72f5a3d050b 100644
--- a/src/lib/radius_decode.c
+++ b/src/lib/radius_decode.c
@@ -1405,6 +1405,7 @@ ssize_t fr_radius_decode_pair_value(TALLOC_CTX *ctx, vp_cursor_t *cursor, fr_dic
 		return -1;
 	}
 	vp->type = VT_DATA;
+	vp->vp_tainted = true;
 	fr_cursor_append(cursor, vp);
 
 	return attr_len;
@@ -1457,6 +1458,7 @@ ssize_t fr_radius_decode_pair(TALLOC_CTX *ctx, vp_cursor_t *cursor, fr_dict_attr
 		vp = fr_pair_afrom_da(ctx,da);
 		if (!vp) return -1;
 		fr_cursor_append(cursor, vp);
+		vp->vp_tainted = true;		/* not REALLY necessary, but what the heck */
 
 		return 2;
 	}