From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 12 Oct 2021 17:57:11 +0000 (-0400)
Subject: pass require_ma to fr_radius_verify()
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b60322a48e677bba06eef03e1cc66c8cb75af9a4;p=thirdparty%2Ffreeradius-server.git

pass require_ma to fr_radius_verify()
---

diff --git a/src/listen/radius/proto_radius.c b/src/listen/radius/proto_radius.c
index 85c153ef864..72caae6be5e 100644
--- a/src/listen/radius/proto_radius.c
+++ b/src/listen/radius/proto_radius.c
@@ -209,6 +209,12 @@ static int mod_decode(void const *instance, request_t *request, uint8_t *const d
 
 	client = address->radclient;
 
+	if (fr_radius_verify(data, NULL, (uint8_t const *) client->secret, talloc_array_length(client->secret) - 1,
+			     client->message_authenticator) < 0) {
+		RPEDEBUG("Failed verifying packet signature.");
+		return -1;
+	}
+
 	/*
 	 *	Hacks for now until we have a lower-level decode routine.
 	 */