Catch case where User-Name may be > 250 octets

diff --git a/src/modules/rlm_eap/types/rlm_eap_peap/peap.c b/src/modules/rlm_eap/types/rlm_eap_peap/peap.c
index 0d9a031..21b7e7b 100644 (file)
--- a/src/modules/rlm_eap/types/rlm_eap_peap/peap.c
+++ b/src/modules/rlm_eap/types/rlm_eap_peap/peap.c
@@ -938,7 +938,9 @@ int eappeap_process(EAP_HANDLER *handler, tls_session_t *tls_session)
                vp->vp_octets[3] = len & 0xff;
                vp->vp_octets[4] = PW_EAP_IDENTITY;
 
-               memcpy(vp->vp_octets + EAP_HEADER_LEN + 1, t->username->vp_strvalue, t->username->length);
+               if (len > sizeof(vp->vp_octets)) len = sizeof(vp->vp_octets);
+               memcpy(vp->vp_octets + EAP_HEADER_LEN + 1,
+                      t->username->vp_strvalue, len - EAP_HEADER_LEN - 1);
                vp->length = len;
 
                pairadd(&fake->packet->vps, vp);