FR-GV-305 read the correct offset instead of uninitialized memory

[freeradius.git] / src / lib / radius.c

diff --git a/src/lib/radius.c b/src/lib/radius.c
index 81a8066..2ecaabf 100644 (file)
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -4086,7 +4086,7 @@ ssize_t data2vp(TALLOC_CTX *ctx,
                break;
 
        case PW_TYPE_SIGNED:    /* overloaded with vp_integer */
-               memcpy(&vp->vp_integer, buffer, 4);
+               memcpy(&vp->vp_integer, data, 4);
                vp->vp_integer = ntohl(vp->vp_integer);
                break;