denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eap-radius: Avoid NULL-pointer dereference in XAuth backend

Browse Source 
Fixes: c434b2a4a9 ("eap-radius: support plain XAuth RADIUS authentication using User-Password")
This commit is contained in:
Tobias Brunner
2026-07-24 08:47:35 +02:00
parent 9965a64723
commit db3f4c2955
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_radius/eap_radius_xauth.c
+4 -1
View File
@@ -184,7 +184,10 @@ METHOD(xauth_method_t, process, status_t,
/* trim password to any null termination. As User-Password /* trim password to any null termination. As User-Password
* uses null padding, we can't have any null in it, and some * uses null padding, we can't have any null in it, and some
* clients actually send null terminated strings (Android). */ * clients actually send null terminated strings (Android). */
pass.len = strnlen(pass.ptr, pass.len); if (pass.ptr)
{
pass.len = strnlen(pass.ptr, pass.len);
}
} }
} }
enumerator->destroy(enumerator); enumerator->destroy(enumerator);