Broken base64_decode in rlm_pap

Alan DeKok aland at deployingradius.com
Mon Feb 12 11:01:53 CET 2007


Tomas Hoger wrote:
> Hi all!
> 
> I've come across an issue with verification of {SSHA} encrypted passwords
> in FreeRadius 1.1.4.  Verification fails for correct passwords.  I've
> managed to track problem through normify() to base64_decode() function in
> rlm_pap.c.  This seems to be a culprit:
> 
>   if (src[length] != '=') return 0; /* no trailing '=' */

  Fixed, thanks.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog



More information about the Freeradius-Users mailing list