From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Sun, 3 Dec 2017 13:49:47 +0000 (+0000)
Subject: Add check for min-max of AT_RES
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5f0e8c5437cb75d40d73ff81bc8fd7184ff20a83;p=thirdparty%2Ffreeradius-server.git

Add check for min-max of AT_RES
---

diff --git a/src/modules/rlm_eap/lib/sim/decode.c b/src/modules/rlm_eap/lib/sim/decode.c
index 040d74183b4..4f90076fd1a 100644
--- a/src/modules/rlm_eap/lib/sim/decode.c
+++ b/src/modules/rlm_eap/lib/sim/decode.c
@@ -587,6 +587,9 @@ static ssize_t sim_decode_pair_value(TALLOC_CTX *ctx, vp_cursor_t *cursor, fr_di
 		if (res_len > (attr_len - 2)) {
 			fr_strerror_printf("%s: RES Length field value (%hu) > attribute value length (%zu)",
 					   __FUNCTION__, res_len, (attr_len - 2));
+		if ((res_len < 4) || (res_len > 16)) {
+			fr_strerror_printf("%s: RES Length field value must be between 32-128 bits, got %u bits",
+					   __FUNCTION__, (res_len * 8));
 			return -1;
 		}