From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 14 Feb 2023 22:41:16 +0000 (-0500)
Subject: don't include the challenge
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e9896af945d36f9548089164a8077cb368a4ad8f;p=thirdparty%2Ffreeradius-server.git

don't include the challenge
---

diff --git a/src/protocols/tacacs/decode.c b/src/protocols/tacacs/decode.c
index de91c162b94..8e27e00e843 100644
--- a/src/protocols/tacacs/decode.c
+++ b/src/protocols/tacacs/decode.c
@@ -581,7 +581,7 @@ ssize_t fr_tacacs_decode(TALLOC_CTX *ctx, fr_pair_list_t *out, uint8_t const *bu
 				break;
 
 			case FR_AUTHENTICATION_TYPE_VALUE_MSCHAPV2:
-				want = 1 + 16 + 49; /* id + HOPEFULLY 16 octets of challenge + 49 MS-CHAP stuff */
+				want = 1 + 49; /* id + HOPEFULLY 16 octets of challenge + 49 MS-CHAP stuff */
 				da = attr_tacacs_mschap2_response;
 				challenge = attr_tacacs_mschap_challenge;
 				break;