From: Alan T. DeKok <aland@freeradius.org>
Date: Sun, 17 Feb 2013 02:24:34 +0000 (-0500)
Subject: Check size of buffer for raw attributes
X-Git-Tag: release_2_2_1~169
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e847dfc57c0b85f52555efbfd33cf48ce3f4f395;p=thirdparty%2Ffreeradius-server.git

Check size of buffer for raw attributes
---

diff --git a/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c b/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c
index caaa62edb89..ef86f2ccb56 100644
--- a/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c
+++ b/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c
@@ -234,6 +234,7 @@ static VALUE_PAIR *diameter2vp(REQUEST *request, SSL *ssl,
 		raw:
 				vp = paircreate_raw(vp->attribute,
 						    PW_TYPE_OCTETS, vp);
+				if (size >= 253) size = 253;
 				vp->length = size;
 				memcpy(vp->vp_octets, data, vp->length);
 				break;