|
@@ -355,6 +355,10 @@ static int chap_server_compute_md5(
|
|
pr_err("Unable to convert incoming challenge\n");
|
|
pr_err("Unable to convert incoming challenge\n");
|
|
goto out;
|
|
goto out;
|
|
}
|
|
}
|
|
|
|
+ if (challenge_len > 1024) {
|
|
|
|
+ pr_err("CHAP_C exceeds maximum binary size of 1024 bytes\n");
|
|
|
|
+ goto out;
|
|
|
|
+ }
|
|
/*
|
|
/*
|
|
* During mutual authentication, the CHAP_C generated by the
|
|
* During mutual authentication, the CHAP_C generated by the
|
|
* initiator must not match the original CHAP_C generated by
|
|
* initiator must not match the original CHAP_C generated by
|