Maximum length on EAP identity

FreeRADIUS · Oct 5, 2014 · e2adbe2 · e2adbe2
1 parent 21baff4
commit e2adbe2
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/modules/rlm_eap/eap.c b/src/modules/rlm_eap/eap.c
@@ -953,7 +953,12 @@ static char *eap_identity(REQUEST *request, eap_handler_t *handler, eap_packet_r
 	len = ntohs(len);
 
 	if ((len <= 5) || (eap_packet->data[1] == 0x00)) {
-		RDEBUG("UserIdentity Unknown ");
+		RDEBUG("EAP-Identity Unknown");
+		return NULL;
+	}
+
+	if (len > 1024) {
+		RDEBUG("EAP-Identity too long");
 		return NULL;
 	}