From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 26 Jun 2025 15:36:38 +0000 (-0400)
Subject: move UDP check so that it's always run
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ca51a040c74a63bb972b54efaa906b8a28c4dd1e;p=thirdparty%2Ffreeradius-server.git

move UDP check so that it's always run
---

diff --git a/src/modules/rlm_radius/bio.c b/src/modules/rlm_radius/bio.c
index 3a96025dba6..f6e056f7ebc 100644
--- a/src/modules/rlm_radius/bio.c
+++ b/src/modules/rlm_radius/bio.c
@@ -682,11 +682,10 @@ static fr_bio_verify_action_t rlm_radius_verify(UNUSED fr_bio_t *bio, void *veri
 			} else {
 				ERROR("We previously received a packet from this client which included a Message-Authenticator attribute");
 			}
-
-			if (h->ctx.fd_config.socket_type == SOCK_DGRAM) return FR_BIO_VERIFY_DISCARD;
-
 		}
 
+		if (h->ctx.fd_config.socket_type == SOCK_DGRAM) return FR_BIO_VERIFY_DISCARD;
+
 		return FR_BIO_VERIFY_ERROR_CLOSE;
 	}