From: Nick Porter <nick@portercomputing.co.uk>
Date: Fri, 8 Dec 2023 14:57:33 +0000 (+0000)
Subject: Internal attributes can be inside group attributes
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4d386a5d74ada6a70d1581edcd674e23a1bd91c2;p=thirdparty%2Ffreeradius-server.git

Internal attributes can be inside group attributes
---

diff --git a/src/protocols/internal/decode.c b/src/protocols/internal/decode.c
index 690906aafc7..1e64d6584e0 100644
--- a/src/protocols/internal/decode.c
+++ b/src/protocols/internal/decode.c
@@ -242,7 +242,7 @@ static ssize_t internal_decode_pair(TALLOC_CTX *ctx, fr_pair_list_t *out, fr_dic
 	 *	so it's fine to swap the parent_da.
 	 */
 	if (internal) {
-		if (!parent_da->flags.is_root) {
+		if (!parent_da->flags.is_root && !(parent_da->type == FR_TYPE_GROUP)) {
 			fr_strerror_printf("%s: Internal flag can only be set on top level attribute", __FUNCTION__);
 			return PAIR_DECODE_FATAL_ERROR;
 		}