From: Nick Porter <nick@portercomputing.co.uk>
Date: Thu, 22 Jan 2026 18:27:08 +0000 (+0000)
Subject: When a list ref is found in a tmpl set the namespace to NULL
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=abe77e784c8bb6d26ee6f72a1580c20f03f796cd;p=thirdparty%2Ffreeradius-server.git

When a list ref is found in a tmpl set the namespace to NULL

This means that parsing `<list>.<attr>` behaves the same as parsing
`<attr>`

Specifically this allows `<list>.<proto>.<attr>` to work.  Previously,
`<proto>.<attr>` would work for allowing access to attributes from other
namespaces in the `request` list, but `<list>.<proto>.<attr>` would not.
---

diff --git a/src/lib/server/tmpl_tokenize.c b/src/lib/server/tmpl_tokenize.c
index 79a66304392..98af073244c 100644
--- a/src/lib/server/tmpl_tokenize.c
+++ b/src/lib/server/tmpl_tokenize.c
@@ -2131,6 +2131,9 @@ do_suffix:
 			} else if (parent && parent->flags.is_root) {
 				our_parent = namespace = parent;
 
+			} else if (request_attr_is_list(da)) {
+				our_parent = namespace = NULL;
+
 			} else if (at_rules->dict_def) {
 				our_parent = namespace = fr_dict_root(at_rules->dict_def);