File strongswan-4.4.0-6.0.2_eap_mschapv2_failure_request_len.patch of Package strongswan.41125
diff -Naurp src.org/libcharon/plugins/eap_mschapv2/eap_mschapv2.c src/libcharon/plugins/eap_mschapv2/eap_mschapv2.c
--- src.org/libcharon/plugins/eap_mschapv2/eap_mschapv2.c 2025-10-14 17:32:24.366448843 +0530
+++ src/libcharon/plugins/eap_mschapv2/eap_mschapv2.c 2025-10-14 17:34:58.625119023 +0530
@@ -974,7 +974,7 @@ static status_t process_peer_failure(pri
data = in->get_data(in);
eap = (eap_mschapv2_header_t*)data.ptr;
- if (data.len < 3) /* we want at least an error code: E=e */
+ if (data.len < HEADER_LEN + 3) /* we want at least an error code: E=e */
{
DBG1(DBG_IKE, "received invalid EAP-MS-CHAPv2 message: too short");
return FAILED;