Andreas Wolf <[EMAIL PROTECTED]> wrote:
> >   Patch #3 was addressed (I thought) by changes to ttls.c on Nov. 6.
> 
> I saw your check-in but I still got an error ("Diameter Attribute  
> overflows packet!"). However, by
> examining the tunneled attributes the data seemed to be correct.
> I think 'data_len' needs to be adjusted when the padding (rounding up  
> to the nearest 4 byte boundary)
> is in effect. I think in this case 'data_len < length' is true.

  Ah.  The client implementation is broken.  They SHOULD have been
padding the data structure to a 4 octet boundary.

  I'll add a hack in to the server to deal with this.  It's ugly, but
not terribly so.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to