diff options
| author | Denys Fedoryshchenko <denys.f@collabora.com> | 2026-02-06 18:04:29 +0200 |
|---|---|---|
| committer | Denys Fedoryshchenko <denys.f@collabora.com> | 2026-03-23 00:04:34 +0200 |
| commit | bb931e76a6d4d3d933e94827a22ca0cb36f5fac5 (patch) | |
| tree | 9c815a4996563b9ec2cfc62eb87e02588aa61d32 | |
| parent | 3c7fa6f67831098975e65a02a3055ff6b1889dd6 (diff) | |
| download | accel-ppp-bb931e76a6d4d3d933e94827a22ca0cb36f5fac5.tar.gz accel-ppp-bb931e76a6d4d3d933e94827a22ca0cb36f5fac5.zip | |
radius: MS-CHAP2-Success unchecked memcpy(40 bytes)
Also fix small typo.
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
| -rw-r--r-- | accel-pppd/radius/auth.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/accel-pppd/radius/auth.c b/accel-pppd/radius/auth.c index 69f1b2ef..73e7a50c 100644 --- a/accel-pppd/radius/auth.c +++ b/accel-pppd/radius/auth.c @@ -434,7 +434,10 @@ static int rad_auth_mschap_v2_recv(struct rad_req_t *req) if (req->reply->code == CODE_ACCESS_ACCEPT) { ra = rad_packet_find_attr(req->reply, "Microsoft", "MS-CHAP2-Success"); if (!ra) { - log_error("radius:auth:mschap-v2: 'MS-CHAP-Success' not found in radius response\n"); + log_error("radius:auth:mschap-v2: 'MS-CHAP2-Success' not found in radius response\n"); + return -1; + } else if (ra->len < 43) { + log_error("radius:auth:mschap-v2: 'MS-CHAP2-Success' too short (%i)\n", ra->len); return -1; } else memcpy(rpd->auth_ctx->authenticator, ra->val.octets + 3, 40); |