From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 13 Dec 2011 20:07:07 +0000 (+0100)
Subject: Account for EAP header and EAP-MSCHAPv2 opcode
X-Git-Tag: release_2_2_0~233
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c4d13cd5d7327ddd5d8853739a4dc8b00117e2e6;p=thirdparty%2Ffreeradius-server.git

Account for EAP header and EAP-MSCHAPv2 opcode

Found by Matt Dayman.
---

diff --git a/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c b/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c
index 94819cb64ea..2b20d769d26 100644
--- a/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c
+++ b/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c
@@ -405,7 +405,7 @@ static int mschapv2_authenticate(void *arg, EAP_HANDLER *handler)
 	/*
 	 *	Sanity check the response.
 	 */
-	if (eap_ds->response->length <= 4) {
+	if (eap_ds->response->length <= 5) {
 		radlog(L_ERR, "rlm_eap_mschapv2: corrupted data");
 		return 0;
 	}