The Length field is two octets. It indicates the length of the
packet including the Code, Identifier, Length, Authenticator and
Attribute fields. Octets outside the range of the Length field
should be treated as padding and should be ignored on reception. If
the packet is shorter than the Length field indicates, it should be
silently discarded. The minimum length is 20 and maximum length is
4096.
What I'm worried about is the "Octets outside the range of the Length field
should be treated as padding and should be ignored on reception" remark.
Looking at the current (2.0) radiusd implementation, I think the entire
UDP packet is scanned for attributes, disregarding the Length field.
Comments?
Richard Huveneers.