set Message-Authenticator to zero each time we send a packet. Fixes #96

FreeRADIUS · Jul 25, 2024 · 7af6228 · 7af6228
1 parent 59ece12
commit 7af6228
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/pam_radius_auth.c b/src/pam_radius_auth.c
@@ -1093,6 +1093,7 @@ static int talk_radius(radius_conf_t *conf, AUTH_HDR *request, AUTH_HDR *respons
 		}
 
 		if (request->code == PW_ACCESS_REQUEST) {
+			memset(conf->message_authenticator, 0, AUTH_VECTOR_LEN);
 			hmac_md5(conf->message_authenticator, (uint8_t *) request, ntohs(request->length),
 				 (const uint8_t *) server->secret, strlen(server->secret));