check for malformed vendor-attribute in rewrite

mariux64 · Jan 31, 2018 · 9851802 · 9851802
1 parent 812526d
commit 9851802
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/radsecproxy.c b/radsecproxy.c
@@ -853,7 +853,7 @@ int dovendorrewriterm(struct tlv *attr, uint32_t *removevendorattrs) {
     uint32_t vendor;
     uint8_t *subattrs;
 
-    if (!removevendorattrs)
+    if (!removevendorattrs || attr->l <= 4)
 	return 0;
 
     memcpy(&vendor, attr->v, 4);