From: Alan T. DeKok <aland@freeradius.org>
Date: Wed, 13 Sep 2017 17:47:01 +0000 (-0400)
Subject: 'actions' must be the LAST thing in a group
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=69008e5933a50d068794860e11bc5f4041b56a25;p=thirdparty%2Ffreeradius-server.git

'actions' must be the LAST thing in a group
---

diff --git a/src/main/unlang_compile.c b/src/main/unlang_compile.c
index 0d0cb71169f..674e819b462 100644
--- a/src/main/unlang_compile.c
+++ b/src/main/unlang_compile.c
@@ -1699,6 +1699,12 @@ static unlang_t *compile_children(unlang_group_t *g, UNUSED unlang_t *parent, un
 			 */
 			name1 = cf_section_name1(subcs);
 			if (strcmp(name1, "actions") == 0) {
+				if (cf_item_next(g->cs, ci) != NULL) {
+					cf_log_err(subcs, "'actions' MUST be the last thing in a subsection");
+					talloc_free(c);
+					return NULL;
+				}
+
 				if (!compile_action_subsection(c, g->cs, subcs)) {
 					talloc_free(c);
 					return NULL;