diff options
| author |   brian <brian@openbsd.org> | 2002-07-02 00:48:30 +0000 |
|---|---|---|
| committer | brian <brian@openbsd.org> | 2002-07-02 00:48:30 +0000 |
| commit | 0aca3a359aaeb7cb10c47a030cb5cc9af75d0a26 (patch) | |
| tree | 4059fcbb2ecf26d27f22a565d981736c1549b263 | |
| parent | Remove some misleading/wrong diagnostics (diff) | |
| download | wireguard-openbsd-0aca3a359aaeb7cb10c47a030cb5cc9af75d0a26.tar.xz wireguard-openbsd-0aca3a359aaeb7cb10c47a030cb5cc9af75d0a26.zip | |
Don't trust the MPPE key lengths passed back from the RADIUS server.
Instead, use the correct values based on the number of bits actually
negotiated.
| -rw-r--r-- | usr.sbin/ppp/ppp/mppe.c | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/usr.sbin/ppp/ppp/mppe.c b/usr.sbin/ppp/ppp/mppe.c index 3f599ad957f..af76df16e7d 100644 --- a/usr.sbin/ppp/ppp/mppe.c +++ b/usr.sbin/ppp/ppp/mppe.c @@ -23,7 +23,7 @@ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * - * $OpenBSD: mppe.c,v 1.15 2002/07/01 11:14:35 brian Exp $ + * $OpenBSD: mppe.c,v 1.16 2002/07/02 00:48:30 brian Exp $ */ #include <sys/param.h> @@ -691,7 +691,8 @@ MPPEInitInput(struct bundle *bundle, struct fsm_opt *o) #ifndef NORADIUS if (*bundle->radius.cfg.file && bundle->radius.mppe.recvkey) { - mip->keylen = bundle->radius.mppe.recvkeylen; + if (mip->keylen > bundle->radius.mppe.recvkeylen) + mip->keylen = bundle->radius.mppe.recvkeylen; if (mip->keylen > sizeof mip->mastkey) mip->keylen = sizeof mip->mastkey; memcpy(mip->mastkey, bundle->radius.mppe.recvkey, mip->keylen); @@ -746,7 +747,8 @@ MPPEInitOutput(struct bundle *bundle, struct fsm_opt *o) #ifndef NORADIUS if (*bundle->radius.cfg.file && bundle->radius.mppe.sendkey) { - mop->keylen = bundle->radius.mppe.sendkeylen; + if (mop->keylen > bundle->radius.mppe.sendkeylen) + mop->keylen = bundle->radius.mppe.sendkeylen; if (mop->keylen > sizeof mop->mastkey) mop->keylen = sizeof mop->mastkey; memcpy(mop->mastkey, bundle->radius.mppe.sendkey, mop->keylen); |