{
return NEED_MORE;
}
- pa_attr_names = imcv_pa_tnc_attributes->get_names(imcv_pa_tnc_attributes,
+ pa_attr_names = imcv_pa_tnc_attributes->get_names(imcv_pa_tnc_attributes,
this->type.vendor_id);
+ if (this->value.len > this->length)
+ {
+ DBG1(DBG_TNC, "inconsistent length of %N/%N string attribute",
+ pen_names, this->type.vendor_id, pa_attr_names, this->type.type);
+ return FAILED;
+ }
pos = memchr(this->value.ptr, '\0', this->value.len);
if (pos)