Bill Campbell <[EMAIL PROTECTED]> wrote: > On a related security note, the src/lib/radius.c program has several > references to msg_auth_vector and calc_auth_vector starting around line > 1108 with several memcpy and memcmp operations, some of which refer use > sizeof(calc_auth_vector) for the length, others with AUTH_VECTOR_LEN. > Given that msg_auth_vector is an array of uint8_t size AUTH_VECTOR_LEN, I > doubt these lengths would be same.
Huh? Why? For uint8_t arrays, The 'sizeof' the array is the number of elements. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
