From: Nick Porter <nick@portercomputing.co.uk>
Date: Wed, 7 Jun 2023 14:54:44 +0000 (+0100)
Subject: Correct calculation of tmpl pointer
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e7a39df9ad93bfd55496b4b2c23a2af84ac14221;p=thirdparty%2Ffreeradius-server.git

Correct calculation of tmpl pointer
---

diff --git a/src/lib/unlang/call_env.c b/src/lib/unlang/call_env.c
index 54615449807..1be1f439add 100644
--- a/src/lib/unlang/call_env.c
+++ b/src/lib/unlang/call_env.c
@@ -309,7 +309,7 @@ static unlang_action_t call_env_expand_repeat(UNUSED rlm_rcode_t *p_result, UNUS
 		out = ((uint8_t *)array) + env->rule->pair.size * env->multi_index;
 	}
 
-	if (env->rule->pair.tmpl_offset) tmpl_out = ((uint8_t *)call_env_ctx->env_data) + env->rule->pair.tmpl_offset;
+	if (env->rule->pair.tmpl_offset) tmpl_out = ((uint8_t *)*call_env_ctx->env_data) + env->rule->pair.tmpl_offset;
 
 	if (call_env_value_parse(*call_env_ctx->env_data, request, out, tmpl_out, env,
 				 &call_env_ctx->tmpl_expanded) < 0) return UNLANG_ACTION_FAIL;