Don't decode attributes if there's no secret

This is really a bug in the caller, but it's a reasonable
change to make.

diff --git a/src/lib/radius.c b/src/lib/radius.c
index a3fbac7..ef3abbd 100644 (file)
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -2249,7 +2249,7 @@ static VALUE_PAIR *data2vp(const RADIUS_PACKET *packet,
        /*
         *      Decrypt the attribute.
         */
-       switch (vp->flags.encrypt) {
+       if (secret) switch (vp->flags.encrypt) {
                /*
                 *  User-Password
                 */