Problem with Vendor ID greater then 32767

[Alan DeKok]

Rafael Ugolini wrote:
> I was trying to use VSA with my private enterprise number registered
> with IANA (as describe in the documentation) and I found a little problem.
...
> and my number is 34045, so I got a return -1.

  Hmm... IANA is already past 32K.  Ugh.

> So, after this I was looking for more of this limitation with vendor id,
> and I found one more in rlm_eap_ttls.c,
> 
> I attached the patch to solve this problem.

  There's a bit more to it than that.

  The vendor IDs are packed into a field that is an "int".  Enabling
vendor IDs of over 32K can result in negative numbers.  The code needs
to be audited for that, too.

  I'll take a look...

  Alan DeKok.