]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Alan T. DeKok [Mon, 9 Mar 2026 01:19:34 +0000 (21:19 -0400)]
return failure on error case
Alan T. DeKok [Mon, 9 Mar 2026 00:57:48 +0000 (20:57 -0400)]
fix fr_nbo_to_int64v()
use / return int64_t, not uint64_t
set the high bits to zero starting at 0, not part-way through
Alan T. DeKok [Mon, 9 Mar 2026 00:43:37 +0000 (20:43 -0400)]
initialize variable before doing recursive call, not in recursion
Alan T. DeKok [Mon, 9 Mar 2026 00:40:55 +0000 (20:40 -0400)]
check current pointer, not packet start
Alan T. DeKok [Mon, 9 Mar 2026 00:38:55 +0000 (20:38 -0400)]
use real parent context
Alan T. DeKok [Mon, 9 Mar 2026 00:36:19 +0000 (20:36 -0400)]
use DEBUG for non-error message
Alan T. DeKok [Mon, 9 Mar 2026 00:34:42 +0000 (20:34 -0400)]
increment pointer after \r, \n, etc.
Alan T. DeKok [Mon, 9 Mar 2026 00:32:47 +0000 (20:32 -0400)]
copy va_list instead of re-using it,and other cleanups
Alan T. DeKok [Mon, 9 Mar 2026 00:32:18 +0000 (20:32 -0400)]
check each individual entry, not only the first one
Alan T. DeKok [Mon, 9 Mar 2026 00:26:15 +0000 (20:26 -0400)]
free on error
Alan T. DeKok [Mon, 9 Mar 2026 00:21:46 +0000 (20:21 -0400)]
fix typos
Alan T. DeKok [Mon, 9 Mar 2026 00:11:48 +0000 (20:11 -0400)]
use correct talloc type
Alan T. DeKok [Mon, 9 Mar 2026 00:08:27 +0000 (20:08 -0400)]
fix minor issues in rlm_mschap
Alan T. DeKok [Mon, 9 Mar 2026 00:01:52 +0000 (20:01 -0400)]
use distinct name per test
Alan T. DeKok [Sun, 8 Mar 2026 13:48:00 +0000 (09:48 -0400)]
remove auth_fail tests from Postgres until we determine why they fail
the rows are inserted, but the SELECT returns no data
Alan T. DeKok [Sun, 8 Mar 2026 12:35:05 +0000 (08:35 -0400)]
tweak lhs/rhs handling rules, and require well-formed strings
use different rules for local LHS / RHS, which ensures that
there's no aliasing, and that the local rules updates don't
mangle each other. There were corner cases where the LHS rules
would get over-written in the tmpl_needs_resolving() condition
near the end of the file.
Complain if quoted strings on the RHS aren't well formed.
Add a test for this case, too
Alan T. DeKok [Sun, 8 Mar 2026 12:33:07 +0000 (08:33 -0400)]
use correct talloc hierarchy, and clean up more on error
Alan T. DeKok [Sat, 7 Mar 2026 22:40:38 +0000 (17:40 -0500)]
minor fixes to map.c
remove unused variables, tweak cleanup paths to always clean up
intermediate lists.
Alan T. DeKok [Sat, 7 Mar 2026 18:39:34 +0000 (13:39 -0500)]
minor tweaks to connection handling
conn->shutdown may not exist, and other small changes for
consistency
Alan T. DeKok [Sat, 7 Mar 2026 15:35:28 +0000 (10:35 -0500)]
use vb_foo instead of datum.foo
and update comments to note that '%l' and '%c' are NOT dates,
but instead integers. If they were of type 'date', then they
would be printed as dates, and not as integers.
Alan T. DeKok [Sat, 7 Mar 2026 15:24:31 +0000 (10:24 -0500)]
use MEM in more places, and free buffers on error
Alan T. DeKok [Sat, 7 Mar 2026 14:48:06 +0000 (09:48 -0500)]
various minor bug fixes in compile.c
Alan T. DeKok [Sat, 7 Mar 2026 14:28:22 +0000 (09:28 -0500)]
various bug fixes for corner cases in rlm_isc_dhcp
Alan T. DeKok [Sat, 7 Mar 2026 14:19:03 +0000 (09:19 -0500)]
check for invalid MS-CHAP attributes
Alan T. DeKok [Sat, 7 Mar 2026 14:16:59 +0000 (09:16 -0500)]
zero out binding in destructure, before calling release
which avoids a double free
Alan T. DeKok [Sat, 7 Mar 2026 14:03:28 +0000 (09:03 -0500)]
ensure that frame->retry always has the same talloc parent
Alan T. DeKok [Sat, 7 Mar 2026 13:53:57 +0000 (08:53 -0500)]
various minor bug fixes in interpret.c
Alan T. DeKok [Sat, 7 Mar 2026 13:23:34 +0000 (08:23 -0500)]
more tests for corner cases of TACACS+ encoder
Alan T. DeKok [Sat, 7 Mar 2026 13:00:02 +0000 (08:00 -0500)]
more tests for corner cases of DHCPv4 encoder
Alan T. DeKok [Sat, 7 Mar 2026 12:52:21 +0000 (07:52 -0500)]
more tests for corner cases of DHCPv4 encoder
Catalina Pineros [Fri, 6 Mar 2026 20:59:52 +0000 (15:59 -0500)]
removed redundant free
fclose(f) also frees oc, so talloc_free(oc) is not necessary
(lib/util/fopencookie: fix double-free of cookie in fseek error path 159)
Catalina Pineros [Fri, 6 Mar 2026 20:12:41 +0000 (15:12 -0500)]
return code (-1) when invalid data type
(value.c: fr_value_box_ipaddr_from_network returns 0 instead of -1 for invalid type 302)
Catalina Pineros [Fri, 6 Mar 2026 18:44:41 +0000 (13:44 -0500)]
fixed double-counting, when updating source and destination statistics
code was updating both stat[src_code] and stat[dst_code], once when updating source statistics and once again when updating destination statistics.
(rlm_stats: per-IP stats double-count both src_code and dst_code 229)
Catalina Pineros [Fri, 6 Mar 2026 17:16:23 +0000 (12:16 -0500)]
remove impossible assert
ret == RD_KAFKA_CONF_UNKNOWN already checked in previous if statement that returns value 0. so assert is redundant, always fails, and also prevents cf_log_err() from printing error message
(lib/kafka: remove impossible assertion in kafka_topic_config_dflt 106)
Catalina Pineros [Fri, 6 Mar 2026 14:41:19 +0000 (09:41 -0500)]
return code (-1) when out of memory
(proto_dhcpv4/v6_udp.c: return 0 instead of -1 on talloc_zero failure in mod_instantiate 305)
Alan T. DeKok [Sat, 7 Mar 2026 12:30:09 +0000 (07:30 -0500)]
more tests for corner cases of RADIUS encoder
Alan T. DeKok [Fri, 6 Mar 2026 20:45:10 +0000 (15:45 -0500)]
use correct size for poisoned region
instead of relying on "slen", which is then over-written before
un-poisoning the region.
Alan T. DeKok [Fri, 6 Mar 2026 17:18:18 +0000 (12:18 -0500)]
clean up and tweak substr tests
Alan T. DeKok [Fri, 6 Mar 2026 17:11:41 +0000 (12:11 -0500)]
more corner cases for internal encoder / decoder
Alan T. DeKok [Fri, 6 Mar 2026 16:14:38 +0000 (11:14 -0500)]
more corner cases for DER
Alan T. DeKok [Fri, 6 Mar 2026 15:34:56 +0000 (10:34 -0500)]
more corner cases for TACACS+
Alan T. DeKok [Fri, 6 Mar 2026 15:11:42 +0000 (10:11 -0500)]
add corner cases / error tests for DHCPv6
Alan T. DeKok [Fri, 6 Mar 2026 04:08:49 +0000 (23:08 -0500)]
more tests for dhcpv4
Alan T. DeKok [Fri, 6 Mar 2026 04:00:59 +0000 (23:00 -0500)]
more corner cases for RADIUS
Alan T. DeKok [Fri, 6 Mar 2026 03:54:46 +0000 (22:54 -0500)]
add more tests for error cases and bad packets
Alan T. DeKok [Fri, 6 Mar 2026 03:43:14 +0000 (22:43 -0500)]
add tests for more corner cases
Alan T. DeKok [Fri, 6 Mar 2026 03:27:21 +0000 (22:27 -0500)]
disallow empty input files
while it can be nice to do nothing, it's best to do something.
Alan T. DeKok [Fri, 6 Mar 2026 03:20:44 +0000 (22:20 -0500)]
return on error
Arran Cudbard-Bell [Fri, 6 Mar 2026 04:29:28 +0000 (20:29 -0800)]
rhel: Disable dwz (dwarf compression), so we get debuginfo usable with lldb
Arran Cudbard-Bell [Fri, 6 Mar 2026 01:56:15 +0000 (17:56 -0800)]
docker: Copy GPG key from the build phase to reduce spurious failures
Alan T. DeKok [Fri, 6 Mar 2026 01:25:43 +0000 (20:25 -0500)]
count offers, not replies
Alan T. DeKok [Fri, 6 Mar 2026 01:25:01 +0000 (20:25 -0500)]
check for end pointer, too
Alan T. DeKok [Fri, 6 Mar 2026 01:21:56 +0000 (20:21 -0500)]
return on OOM
Alan T. DeKok [Fri, 6 Mar 2026 01:18:16 +0000 (20:18 -0500)]
update macro
Alan T. DeKok [Fri, 6 Mar 2026 01:16:14 +0000 (20:16 -0500)]
remove unused file
Alan T. DeKok [Fri, 6 Mar 2026 01:14:58 +0000 (20:14 -0500)]
use same code as previous check
this should really be abstracted into a common function
Alan T. DeKok [Fri, 6 Mar 2026 01:13:09 +0000 (20:13 -0500)]
free on OOM
Alan T. DeKok [Fri, 6 Mar 2026 01:08:54 +0000 (20:08 -0500)]
check for failure when adding chain cert
Alan T. DeKok [Fri, 6 Mar 2026 01:08:03 +0000 (20:08 -0500)]
close pipe after ferror() call
Alan T. DeKok [Fri, 6 Mar 2026 01:04:36 +0000 (20:04 -0500)]
one more fix
Arran Cudbard-Bell [Fri, 6 Mar 2026 01:02:58 +0000 (17:02 -0800)]
Fix debuginfo in RPM builds
Always built with -g3 no matter if it's a developer build or not, otherwise state machine issues become impossible to debug.
Alan T. DeKok [Fri, 6 Mar 2026 00:48:30 +0000 (19:48 -0500)]
don't use "index" as a variable name, it's a C library function
the compilers aren't smart enough to notice this and complain.
Catalina Pineros [Thu, 5 Mar 2026 20:42:28 +0000 (15:42 -0500)]
typo
(rlm_python: fix wrong variable 'index' in py_freeradius_build_parents error message 341)
junirod [Tue, 24 Feb 2026 07:41:41 +0000 (07:41 +0000)]
rlm_sql_firebird: fix free() on talloc-allocated memory in fb_free_sqlda()
Catalina Pineros [Thu, 5 Mar 2026 18:55:36 +0000 (13:55 -0500)]
return after error, initialize var
(command.c: fix missing return false and uninitialized child_done 148)
Catalina Pineros [Thu, 5 Mar 2026 17:32:03 +0000 (12:32 -0500)]
return after error, deallocate variable
(rlm_sql_unixodbc: fix missing return after connection failure and ind memory leak 412)
Catalina Pineros [Thu, 5 Mar 2026 17:00:39 +0000 (12:00 -0500)]
return code (-1) when parse failure
(map_to_vp: returns success (rcode=0) on fr_pair_value_from_str failure 239)
Catalina Pineros [Thu, 5 Mar 2026 16:41:04 +0000 (11:41 -0500)]
typo
(lib/kafka: fix auto_commit property name typo (enable_auto.commit -> enable.auto.commit) 107)
Catalina Pineros [Thu, 5 Mar 2026 15:55:30 +0000 (10:55 -0500)]
add missing 'usage()' for consistency
(rlm_redis_ippool_tool: add missing usage() call after invalid prefix error 353)
Alan T. DeKok [Thu, 5 Mar 2026 13:31:32 +0000 (08:31 -0500)]
allow queries to proceed in CONNECTING or CONNECTED states
instead of checking for a failure state, and missing some
failure states
Alan T. DeKok [Thu, 5 Mar 2026 13:29:19 +0000 (08:29 -0500)]
use consistent names
'conn' is the #fr_connection_t
'c' is the DB connection handle
Alan T. DeKok [Thu, 5 Mar 2026 13:09:55 +0000 (08:09 -0500)]
MAX is last valid plus one
Alan T. DeKok [Thu, 5 Mar 2026 13:02:32 +0000 (08:02 -0500)]
various bug fixes and tweaks to the tests
Alan T. DeKok [Thu, 5 Mar 2026 12:52:42 +0000 (07:52 -0500)]
clean up FDs and PID in all situations
and don't complain on cleanup if the program exited cleanly.
Alan T. DeKok [Thu, 5 Mar 2026 12:32:44 +0000 (07:32 -0500)]
typo
Alan T. DeKok [Thu, 5 Mar 2026 12:24:08 +0000 (07:24 -0500)]
use better dlist functions, which means less code
Alan T. DeKok [Thu, 5 Mar 2026 12:11:33 +0000 (07:11 -0500)]
arguably functions calling talloc_free() should return int
and the callers should check the return code
Alan T. DeKok [Thu, 5 Mar 2026 12:08:50 +0000 (07:08 -0500)]
typo in doxygen
Alan T. DeKok [Thu, 5 Mar 2026 12:05:08 +0000 (07:05 -0500)]
use fr_dlist_talloc_free() instead of hand-rolled loop
Alan T. DeKok [Thu, 5 Mar 2026 12:04:39 +0000 (07:04 -0500)]
just use pop_head(), which is a bit clearer
Alan T. DeKok [Thu, 5 Mar 2026 11:57:57 +0000 (06:57 -0500)]
typo
Alan T. DeKok [Wed, 4 Mar 2026 22:31:58 +0000 (17:31 -0500)]
use value-box escaping function.
Alan T. DeKok [Wed, 4 Mar 2026 22:31:36 +0000 (17:31 -0500)]
mash leading '.', too.
and set safe_for
Catalina Pineros [Wed, 4 Mar 2026 19:46:35 +0000 (14:46 -0500)]
fix: 1. initialise thread mutex before use
(rlm_stats: initialise thread mutex before use 415)
Catalina Pineros [Wed, 4 Mar 2026 19:33:52 +0000 (14:33 -0500)]
fix: 1. typo
(rlm_sqlcounter: fix copy-paste bug in find_prev_reset() for "never" reset 413)
Catalina Pineros [Wed, 4 Mar 2026 19:18:15 +0000 (14:18 -0500)]
fix: 1. function parameter typo fixed
(Fix copy-paste error: response_window never validated in rlm_tacacs and rlm_radius 416)
Catalina Pineros [Wed, 4 Mar 2026 19:00:45 +0000 (14:00 -0500)]
fix: 1. exact duplicate code removed
2. return 0 --> return -1 (for invalid discriminator/state)
(protocols/bfd: fix duplicate detect_multi check and wrong return value in decode_proto 433)
Catalina Pineros [Wed, 4 Mar 2026 18:39:25 +0000 (13:39 -0500)]
fix: 1. missing 'false' argument when calling function
2. num_events == EINTR --> errno == EINTR (typo)
3. if (*start > MY_ARRAY_SIZE) --> if (*start >= MY_ARRAY_SIZE) (wraparound sometimes skipped)
(tests/util: fix missing 5th arg to fr_message_set_create, wrong EINTR check, and off-by-one 225)
Catalina Pineros [Wed, 4 Mar 2026 16:48:15 +0000 (11:48 -0500)]
fix: 1. calling wrong function, is now pop_tail (copy paste typo)
2. fix undefined behaviour
(lib/util/dlist: fix free_tail pop direction and sort-merge NULL deref 156)
Catalina Pineros [Wed, 4 Mar 2026 15:40:06 +0000 (10:40 -0500)]
fix: 1. pesudo --> pseudo (typo)
2. added outer parenthesis
(net.h/net.c: fix 'pesudo' typo in function name; add missing outer parens to IP_VHL macro 283)
Alan T. DeKok [Wed, 4 Mar 2026 22:05:46 +0000 (17:05 -0500)]
just use sprintf to match the rest of the code
and other minor tweaks
Alan T. DeKok [Wed, 4 Mar 2026 22:01:10 +0000 (17:01 -0500)]
greatly simplify function
as it should only be taking unsafe inputs
Alan T. DeKok [Wed, 4 Mar 2026 21:52:44 +0000 (16:52 -0500)]
the function is only used by one caller
and doesn't have to be exposed
Alan T. DeKok [Wed, 4 Mar 2026 16:39:20 +0000 (11:39 -0500)]
add callback for escaping value-box with sbuff erules
Alan T. DeKok [Wed, 4 Mar 2026 16:29:42 +0000 (11:29 -0500)]
use real type, and not uintptr_t
Alan T. DeKok [Wed, 4 Mar 2026 16:19:05 +0000 (11:19 -0500)]
remove functionality which is useless and never worked
Alan T. DeKok [Wed, 4 Mar 2026 15:29:18 +0000 (10:29 -0500)]
add simple tests for value-box functions
Alan T. DeKok [Wed, 4 Mar 2026 15:24:34 +0000 (10:24 -0500)]
use standard APIs for filename escapes, and check for errors
Alan T. DeKok [Wed, 4 Mar 2026 15:03:12 +0000 (10:03 -0500)]
add value-box escape with erules
there are a number of places which need it.
Alan T. DeKok [Wed, 4 Mar 2026 12:46:50 +0000 (07:46 -0500)]
continue after \r, \n, \t