From 4fd27ea2f91cdb1e5c44c76d8a3b5d3783b33227 Mon Sep 17 00:00:00 2001 From: Kevin Wasserman Date: Sat, 28 Jun 2014 05:22:25 -0400 Subject: [PATCH] Fix cursor initialization bugs in eap_chbind_vp2packet --- src/modules/rlm_eap/libeap/eap_chbind.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/modules/rlm_eap/libeap/eap_chbind.c b/src/modules/rlm_eap/libeap/eap_chbind.c index 2304554..a99ebf5 100644 --- a/src/modules/rlm_eap/libeap/eap_chbind.c +++ b/src/modules/rlm_eap/libeap/eap_chbind.c @@ -243,7 +243,7 @@ chbind_packet_t *eap_chbind_vp2packet(TALLOC_CTX *ctx, VALUE_PAIR *vps) * Compute the total length of the channel binding data. */ length = 0; - for (vp =fr_cursor_init(&cursor, first); + for (vp =fr_cursor_init(&cursor, &first); vp != NULL; vp = fr_cursor_next_by_num(&cursor, PW_UKERNA_CHBIND, VENDORPEC_UKERNA, TAG_ANY)) { length += vp->length; @@ -264,7 +264,7 @@ chbind_packet_t *eap_chbind_vp2packet(TALLOC_CTX *ctx, VALUE_PAIR *vps) * Copy the data over to our packet. */ packet = (chbind_packet_t *) ptr; - for (vp = fr_cursor_init(&cursor, first); + for (vp = fr_cursor_init(&cursor, &first); vp != NULL; vp = fr_cursor_next_by_num(&cursor, PW_UKERNA_CHBIND, VENDORPEC_UKERNA, TAG_ANY)) { memcpy(ptr, vp->vp_octets, vp->length); -- 2.1.4