]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Alan T. DeKok [Sun, 15 Feb 2026 13:25:52 +0000 (08:25 -0500)]
add test harness for fifo, hash, inet, retry, and trie
Alan T. DeKok [Sun, 15 Feb 2026 13:30:27 +0000 (08:30 -0500)]
change struct to quiet compiler warnings
Alan T. DeKok [Sun, 15 Feb 2026 13:02:56 +0000 (08:02 -0500)]
fix RT calculations
Alan T. DeKok [Sat, 14 Feb 2026 14:26:31 +0000 (09:26 -0500)]
set inlen if it's -1 on input
Alan T. DeKok [Sat, 14 Feb 2026 14:24:18 +0000 (09:24 -0500)]
reorder operations for "update" to match "hash"
github-actions[bot] [Sun, 15 Feb 2026 05:10:49 +0000 (05:10 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar
github-actions[bot] [Sun, 15 Feb 2026 05:10:43 +0000 (05:10 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar
github-actions[bot] [Sun, 15 Feb 2026 05:10:02 +0000 (05:10 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar
github-actions[bot] [Sun, 15 Feb 2026 05:09:13 +0000 (05:09 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar
github-actions[bot] [Sun, 15 Feb 2026 05:09:08 +0000 (05:09 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar
Alan T. DeKok [Sat, 14 Feb 2026 13:58:48 +0000 (08:58 -0500)]
various bug fixes for dict_tokenize.c
Alan T. DeKok [Sat, 14 Feb 2026 13:58:24 +0000 (08:58 -0500)]
various bug fixes for dict_util.c
Alan T. DeKok [Sat, 14 Feb 2026 13:57:52 +0000 (08:57 -0500)]
set fixup flag for aliases, and clear the correct flag
Alan T. DeKok [Sat, 14 Feb 2026 13:44:32 +0000 (08:44 -0500)]
fix various bugs in sbuff.c
Alan T. DeKok [Sat, 14 Feb 2026 13:38:56 +0000 (08:38 -0500)]
update code / docs to match expected usage
Alan T. DeKok [Sat, 14 Feb 2026 13:37:18 +0000 (08:37 -0500)]
use sockaddr_storage
Alan T. DeKok [Sat, 14 Feb 2026 13:36:37 +0000 (08:36 -0500)]
check for allocation failure
Alan T. DeKok [Sat, 14 Feb 2026 13:33:51 +0000 (08:33 -0500)]
various bug fixes in trie.c
Alan T. DeKok [Sat, 14 Feb 2026 13:19:46 +0000 (08:19 -0500)]
don't close already closed socket
Alan T. DeKok [Sat, 14 Feb 2026 13:17:22 +0000 (08:17 -0500)]
update code to match docs, and add assertions
Alan T. DeKok [Sat, 14 Feb 2026 03:14:45 +0000 (22:14 -0500)]
fix various bugs in inet.c
Alan T. DeKok [Sat, 14 Feb 2026 03:11:46 +0000 (22:11 -0500)]
don't double-close sockfd
Alan T. DeKok [Sat, 14 Feb 2026 03:09:56 +0000 (22:09 -0500)]
update doxygen to match code
Alan T. DeKok [Sat, 14 Feb 2026 03:07:01 +0000 (22:07 -0500)]
shrink the heap after rebalancing it, not before.
shrink to 1/2 size if the heap is less than 1/3 full. Which
leaves some room to insert new entries before we have to grow the
heap again.
Alan T. DeKok [Sat, 14 Feb 2026 02:59:26 +0000 (21:59 -0500)]
avoid overflow by just looking at actual allocated size
Alan T. DeKok [Sat, 14 Feb 2026 02:53:29 +0000 (21:53 -0500)]
fix various bugs in event.c
Alan T. DeKok [Sat, 14 Feb 2026 02:51:31 +0000 (21:51 -0500)]
fix various bugs in calc.c
Alan T. DeKok [Sat, 14 Feb 2026 02:33:29 +0000 (21:33 -0500)]
fix return code and don't free ourselves in a destructor
Alan T. DeKok [Sat, 14 Feb 2026 02:32:37 +0000 (21:32 -0500)]
fix various bugs in value.c
Alan T. DeKok [Sat, 14 Feb 2026 02:10:57 +0000 (21:10 -0500)]
fix various bugs in the pair code.
Alan T. DeKok [Sat, 14 Feb 2026 02:10:40 +0000 (21:10 -0500)]
fix various bugs in the cbor code
Marc-Andre Casavant [Fri, 13 Feb 2026 21:33:33 +0000 (16:33 -0500)]
Minor typo fix.
Alan T. DeKok [Fri, 13 Feb 2026 19:50:15 +0000 (14:50 -0500)]
remove redundant code and do tweaks
Alan T. DeKok [Fri, 13 Feb 2026 19:44:46 +0000 (14:44 -0500)]
add SRV record
Alan T. DeKok [Fri, 13 Feb 2026 19:33:12 +0000 (14:33 -0500)]
check for truncated packets and give an error.
Truncation means that the packt is well-formed, but that it's not
containing all of the available data. We then have to re-try the
query over TCP.
For now, this means we don't process the packet.
Alan T. DeKok [Fri, 13 Feb 2026 19:28:58 +0000 (14:28 -0500)]
fix typos
Alan T. DeKok [Fri, 13 Feb 2026 19:25:43 +0000 (14:25 -0500)]
return correct error offset for question section
Alan T. DeKok [Fri, 13 Feb 2026 18:59:14 +0000 (13:59 -0500)]
stop when we reach the end of the input
Alan T. DeKok [Fri, 13 Feb 2026 18:56:15 +0000 (13:56 -0500)]
note todo for RFC 2136
Alan T. DeKok [Fri, 13 Feb 2026 17:57:06 +0000 (12:57 -0500)]
update test harness function to catch error case
Alan T. DeKok [Fri, 13 Feb 2026 17:52:58 +0000 (12:52 -0500)]
a DNS label can be zero length.
but a zero-length label can't then be in an array.
update the API for the encoding function, as none of the callers
looked for "room needed", and the callers did need to see a zero
return as an allowed, non-error return value.
Alan T. DeKok [Fri, 13 Feb 2026 17:46:20 +0000 (12:46 -0500)]
ensure that "counter" is updated
Alan T. DeKok [Fri, 13 Feb 2026 17:39:41 +0000 (12:39 -0500)]
it doesn't make sense to encode no data for an array member
Alan T. DeKok [Fri, 13 Feb 2026 17:37:18 +0000 (12:37 -0500)]
UPDATE packets use the count fields for different purposes
Alan T. DeKok [Fri, 13 Feb 2026 17:29:11 +0000 (12:29 -0500)]
swap to use correct error codes
Alan T. DeKok [Fri, 13 Feb 2026 17:07:09 +0000 (12:07 -0500)]
fix typo. MX preference is 16 bit.
Alan T. DeKok [Thu, 12 Feb 2026 16:47:24 +0000 (11:47 -0500)]
typos
Alan T. DeKok [Thu, 12 Feb 2026 16:42:04 +0000 (11:42 -0500)]
Maximum-Msg-Size is uint16, not uint32
Alan T. DeKok [Thu, 12 Feb 2026 16:41:55 +0000 (11:41 -0500)]
no need to print this as hex
Alan T. DeKok [Thu, 12 Feb 2026 16:28:38 +0000 (11:28 -0500)]
accept only ethernet
Alan T. DeKok [Thu, 12 Feb 2026 16:27:45 +0000 (11:27 -0500)]
remove unused code
Alan T. DeKok [Thu, 12 Feb 2026 16:24:40 +0000 (11:24 -0500)]
allow up to FR_DHCP_CODE_MAX
Alan T. DeKok [Thu, 12 Feb 2026 14:58:13 +0000 (09:58 -0500)]
add assert that fr_dhcpv4_ok() is called before printing
and check for end of options before printing length
Alan T. DeKok [Thu, 12 Feb 2026 14:27:45 +0000 (09:27 -0500)]
be more aggressive about cleaning up on error
there's already an "error" target which does full cleanups, so
use that.
All of the memory was parented from "ctx", so there were no actual
leaks, but it's good practice to be nice.
Alan T. DeKok [Thu, 12 Feb 2026 14:25:01 +0000 (09:25 -0500)]
clean up data on memory allocation failure
Alan T. DeKok [Thu, 12 Feb 2026 14:20:32 +0000 (09:20 -0500)]
account for UDP header size, too
Alan T. DeKok [Thu, 12 Feb 2026 14:16:00 +0000 (09:16 -0500)]
fix option field decoding
use macros instead of hard-coded values.
and update tests to match
Alan T. DeKok [Thu, 12 Feb 2026 14:13:27 +0000 (09:13 -0500)]
fix bounds check
Alan T. DeKok [Thu, 12 Feb 2026 14:12:56 +0000 (09:12 -0500)]
fix typo
Nick Porter [Thu, 12 Feb 2026 14:45:45 +0000 (14:45 +0000)]
Re-enable message_set_test
Nick Porter [Thu, 12 Feb 2026 14:44:28 +0000 (14:44 +0000)]
Add test of messages_set where initial ring buffer is smaller than request size
Nick Porter [Thu, 12 Feb 2026 14:43:47 +0000 (14:43 +0000)]
Use fr_exit_now in test in place of fr_assert
So failures give meaningful output.
Nick Porter [Thu, 12 Feb 2026 14:36:58 +0000 (14:36 +0000)]
Make message_set_test compile again
Nick Porter [Fri, 30 Jan 2026 09:33:31 +0000 (09:33 +0000)]
Allow message set to alloc messages greater than half initial ring buffer
This is optional so the message size protection can be retained for
exsiting network -> worker use
Nick Porter [Fri, 30 Jan 2026 12:09:34 +0000 (12:09 +0000)]
Typo
Alan T. DeKok [Thu, 12 Feb 2026 02:30:05 +0000 (21:30 -0500)]
tests for ipv4prefix
Alan T. DeKok [Thu, 12 Feb 2026 01:53:43 +0000 (20:53 -0500)]
mask off ipv4 prefix bits, to be in compliance with RFC8044 Section 3.11
this shouldn't strictly be necessary, as the value-boxes should
already enforce this. But layers of protection aren't bad.
Alan T. DeKok [Thu, 12 Feb 2026 01:44:13 +0000 (20:44 -0500)]
add secret length to ascend_secret() function
all of the other password encode / decode functions already took
a secret length parameter
Alan T. DeKok [Thu, 12 Feb 2026 01:39:45 +0000 (20:39 -0500)]
correct subtraction of pointers
Alan T. DeKok [Thu, 12 Feb 2026 01:37:29 +0000 (20:37 -0500)]
move duplicate check to assert
pwlen could never be larger than 253, so there's no need to check
for it being larger than 256
Alan T. DeKok [Thu, 12 Feb 2026 01:32:47 +0000 (20:32 -0500)]
fix typo for tag, and clarify messages
Alan T. DeKok [Thu, 12 Feb 2026 01:30:21 +0000 (20:30 -0500)]
hoist encode tag byte for Tunnel-Password
so that we don't double-tag things
Alan T. DeKok [Thu, 12 Feb 2026 00:58:39 +0000 (19:58 -0500)]
fix decode of NAS-Filter-Rule
check the number of attributes, not the total data length
ethan-thompson [Thu, 29 Jan 2026 20:33:11 +0000 (20:33 +0000)]
feat: Added batch logging to the linelog module
Signed-off-by: ethan-thompson <ethan.thompson@networkradius.com>
ethan-thompson [Thu, 29 Jan 2026 20:27:35 +0000 (20:27 +0000)]
feat: Added max_idle config option to linelog file structure which can be useful in testing
Signed-off-by: ethan-thompson <ethan.thompson@networkradius.com>
Alan T. DeKok [Wed, 11 Feb 2026 19:13:21 +0000 (14:13 -0500)]
more debug output to show which value failed
Alan T. DeKok [Wed, 11 Feb 2026 16:54:50 +0000 (11:54 -0500)]
replace smart quotes, emdash, etc. with ASCII
Alan T. DeKok [Wed, 11 Feb 2026 16:32:52 +0000 (11:32 -0500)]
rule to check for non-ASCII characters.
while smart quotes are nice, ASCII is nicer. And emdashes are bad.
Add additional rule to clean up non-ASCII characters
98manu [Thu, 29 Jan 2026 09:52:37 +0000 (15:22 +0530)]
doc: add introduction and sections overview to virtual tutorial
doc: add default behavior and best practice to virtual tutorial
doc: add create and enable virtual server sections to virtual tutorial
Tharka Karunanayake [Tue, 3 Feb 2026 09:16:46 +0000 (14:46 +0530)]
docs: add introduction and goals for proxy tutorial
docs: add Step 1 for creating proxy module instance
docs: add Step 2 for modifying the virtual server
docs: add Step 3 for verifying config and restarting
docs: add Step 4 (Local Testing) to proxy tutorial
docs: add Proxied Testing results and debug output to proxy tutorial
docs: complete proxy tutorial with Questions and Copyright footer
Alan T. DeKok [Wed, 11 Feb 2026 13:46:25 +0000 (08:46 -0500)]
update now that we have a home_server_pool example.
Alan T. DeKok [Wed, 11 Feb 2026 13:36:39 +0000 (08:36 -0500)]
add example of converting v3 home_server_pool to v4
github-actions[bot] [Wed, 11 Feb 2026 05:11:52 +0000 (05:11 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar
github-actions[bot] [Wed, 11 Feb 2026 05:10:20 +0000 (05:10 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar
github-actions[bot] [Wed, 11 Feb 2026 05:09:49 +0000 (05:09 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/util.tar
github-actions[bot] [Wed, 11 Feb 2026 05:03:41 +0000 (05:03 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar
Alan T. DeKok [Wed, 11 Feb 2026 00:20:28 +0000 (19:20 -0500)]
add proxy.conf as a helpful hint
which contains pointers to the real docs, and examples of how
the old proxy.conf has moved to the new configuration.
Alan T. DeKok [Tue, 10 Feb 2026 23:25:47 +0000 (18:25 -0500)]
allow virtual modules for load-balance and redundant-load-balance
so that they can have second names, and also a key.
Alan T. DeKok [Tue, 10 Feb 2026 17:46:42 +0000 (12:46 -0500)]
add sample "proxy" virtual server
Alan T. DeKok [Tue, 10 Feb 2026 17:44:39 +0000 (12:44 -0500)]
fix links and script to produce the right things
Alan T. DeKok [Tue, 10 Feb 2026 17:30:49 +0000 (12:30 -0500)]
add notes on call vs subrequest
Alan T. DeKok [Tue, 10 Feb 2026 16:28:46 +0000 (11:28 -0500)]
Another instance of hard coded "Packet-Type"
it's still not all gone, as we should really update fr_dict_protocol_t
to have a pointer to the packet type attribute. But it's at least
better.
Alan T. DeKok [Tue, 10 Feb 2026 14:48:20 +0000 (09:48 -0500)]
minor tweaks and cleanups
Alan T. DeKok [Sun, 8 Feb 2026 22:34:05 +0000 (17:34 -0500)]
add copyright
Alan T. DeKok [Sun, 8 Feb 2026 16:50:06 +0000 (11:50 -0500)]
print URL help for "Failed binding to socket"
and add preliminary page with a description
Alan T. DeKok [Sun, 8 Feb 2026 15:54:54 +0000 (10:54 -0500)]
do SUID up/down when binding to low ports
Alan T. DeKok [Sun, 8 Feb 2026 15:48:44 +0000 (10:48 -0500)]
add trampoline functions for SUID up/down
some libraries should call suid up/down, but we don't want to
link them to libfreeradius-server. So we instead createxi
trampoline functions.
Alan T. DeKok [Sat, 7 Feb 2026 17:28:57 +0000 (12:28 -0500)]
limit src port ranges to >1024
and do a few more cleanups.
Alan T. DeKok [Sat, 7 Feb 2026 16:09:32 +0000 (11:09 -0500)]
ARP should do SUID up/down around binding
Alan T. DeKok [Sat, 7 Feb 2026 16:06:26 +0000 (11:06 -0500)]
use cf_log_err() instead of ERROR()
which prints out more descriptive messages
We should really look at moving to the BIOs. There is a lot of
code duplication here. :(