]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
7 weeks agoreturn failure on error case
Alan T. DeKok [Mon, 9 Mar 2026 01:19:34 +0000 (21:19 -0400)] 
return failure on error case

7 weeks agofix fr_nbo_to_int64v()
Alan T. DeKok [Mon, 9 Mar 2026 00:57:48 +0000 (20:57 -0400)] 
fix fr_nbo_to_int64v()

use / return int64_t, not uint64_t

set the high bits to zero starting at 0, not part-way through

7 weeks agoinitialize variable before doing recursive call, not in recursion
Alan T. DeKok [Mon, 9 Mar 2026 00:43:37 +0000 (20:43 -0400)] 
initialize variable before doing recursive call, not in recursion

7 weeks agocheck current pointer, not packet start
Alan T. DeKok [Mon, 9 Mar 2026 00:40:55 +0000 (20:40 -0400)] 
check current pointer, not packet start

7 weeks agouse real parent context
Alan T. DeKok [Mon, 9 Mar 2026 00:38:55 +0000 (20:38 -0400)] 
use real parent context

7 weeks agouse DEBUG for non-error message
Alan T. DeKok [Mon, 9 Mar 2026 00:36:19 +0000 (20:36 -0400)] 
use DEBUG for non-error message

7 weeks agoincrement pointer after \r, \n, etc.
Alan T. DeKok [Mon, 9 Mar 2026 00:34:42 +0000 (20:34 -0400)] 
increment pointer after \r, \n, etc.

7 weeks agocopy va_list instead of re-using it,and other cleanups
Alan T. DeKok [Mon, 9 Mar 2026 00:32:47 +0000 (20:32 -0400)] 
copy va_list instead of re-using it,and other cleanups

7 weeks agocheck each individual entry, not only the first one
Alan T. DeKok [Mon, 9 Mar 2026 00:32:18 +0000 (20:32 -0400)] 
check each individual entry, not only the first one

7 weeks agofree on error
Alan T. DeKok [Mon, 9 Mar 2026 00:26:15 +0000 (20:26 -0400)] 
free on error

7 weeks agofix typos
Alan T. DeKok [Mon, 9 Mar 2026 00:21:46 +0000 (20:21 -0400)] 
fix typos

7 weeks agouse correct talloc type
Alan T. DeKok [Mon, 9 Mar 2026 00:11:48 +0000 (20:11 -0400)] 
use correct talloc type

7 weeks agofix minor issues in rlm_mschap
Alan T. DeKok [Mon, 9 Mar 2026 00:08:27 +0000 (20:08 -0400)] 
fix minor issues in rlm_mschap

7 weeks agouse distinct name per test
Alan T. DeKok [Mon, 9 Mar 2026 00:01:52 +0000 (20:01 -0400)] 
use distinct name per test

7 weeks agoremove auth_fail tests from Postgres until we determine why they fail
Alan T. DeKok [Sun, 8 Mar 2026 13:48:00 +0000 (09:48 -0400)] 
remove auth_fail tests from Postgres until we determine why they fail

the rows are inserted, but the SELECT returns no data

7 weeks agotweak lhs/rhs handling rules, and require well-formed strings
Alan T. DeKok [Sun, 8 Mar 2026 12:35:05 +0000 (08:35 -0400)] 
tweak lhs/rhs handling rules, and require well-formed strings

use different rules for local LHS / RHS, which ensures that
there's no aliasing, and that the local rules updates don't
mangle each other.  There were corner cases where the LHS rules
would get over-written in the tmpl_needs_resolving() condition
near the end of the file.

Complain if quoted strings on the RHS aren't well formed.
Add a test for this case, too

7 weeks agouse correct talloc hierarchy, and clean up more on error
Alan T. DeKok [Sun, 8 Mar 2026 12:33:07 +0000 (08:33 -0400)] 
use correct talloc hierarchy, and clean up more on error

7 weeks agominor fixes to map.c
Alan T. DeKok [Sat, 7 Mar 2026 22:40:38 +0000 (17:40 -0500)] 
minor fixes to map.c

remove unused variables, tweak cleanup paths to always clean up
intermediate lists.

7 weeks agominor tweaks to connection handling
Alan T. DeKok [Sat, 7 Mar 2026 18:39:34 +0000 (13:39 -0500)] 
minor tweaks to connection handling

conn->shutdown may not exist, and other small changes for
consistency

7 weeks agouse vb_foo instead of datum.foo
Alan T. DeKok [Sat, 7 Mar 2026 15:35:28 +0000 (10:35 -0500)] 
use vb_foo instead of datum.foo

and update comments to note that '%l' and '%c' are NOT dates,
but instead integers.  If they were of type 'date', then they
would be printed as dates, and not as integers.

7 weeks agouse MEM in more places, and free buffers on error
Alan T. DeKok [Sat, 7 Mar 2026 15:24:31 +0000 (10:24 -0500)] 
use MEM in more places, and free buffers on error

7 weeks agovarious minor bug fixes in compile.c
Alan T. DeKok [Sat, 7 Mar 2026 14:48:06 +0000 (09:48 -0500)] 
various minor bug fixes in compile.c

7 weeks agovarious bug fixes for corner cases in rlm_isc_dhcp
Alan T. DeKok [Sat, 7 Mar 2026 14:28:22 +0000 (09:28 -0500)] 
various bug fixes for corner cases in rlm_isc_dhcp

7 weeks agocheck for invalid MS-CHAP attributes
Alan T. DeKok [Sat, 7 Mar 2026 14:19:03 +0000 (09:19 -0500)] 
check for invalid MS-CHAP attributes

7 weeks agozero out binding in destructure, before calling release
Alan T. DeKok [Sat, 7 Mar 2026 14:16:59 +0000 (09:16 -0500)] 
zero out binding in destructure, before calling release

which avoids a double free

7 weeks agoensure that frame->retry always has the same talloc parent
Alan T. DeKok [Sat, 7 Mar 2026 14:03:28 +0000 (09:03 -0500)] 
ensure that frame->retry always has the same talloc parent

7 weeks agovarious minor bug fixes in interpret.c
Alan T. DeKok [Sat, 7 Mar 2026 13:53:57 +0000 (08:53 -0500)] 
various minor bug fixes in interpret.c

7 weeks agomore tests for corner cases of TACACS+ encoder
Alan T. DeKok [Sat, 7 Mar 2026 13:23:34 +0000 (08:23 -0500)] 
more tests for corner cases of TACACS+ encoder

7 weeks agomore tests for corner cases of DHCPv4 encoder
Alan T. DeKok [Sat, 7 Mar 2026 13:00:02 +0000 (08:00 -0500)] 
more tests for corner cases of DHCPv4 encoder

7 weeks agomore tests for corner cases of DHCPv4 encoder
Alan T. DeKok [Sat, 7 Mar 2026 12:52:21 +0000 (07:52 -0500)] 
more tests for corner cases of DHCPv4 encoder

7 weeks agoremoved redundant free
Catalina Pineros [Fri, 6 Mar 2026 20:59:52 +0000 (15:59 -0500)] 
removed redundant free
fclose(f) also frees oc, so talloc_free(oc) is not necessary
(lib/util/fopencookie: fix double-free of cookie in fseek error path 159)

7 weeks agoreturn code (-1) when invalid data type
Catalina Pineros [Fri, 6 Mar 2026 20:12:41 +0000 (15:12 -0500)] 
return code (-1) when invalid data type
(value.c: fr_value_box_ipaddr_from_network returns 0 instead of -1 for invalid type 302)

7 weeks agofixed double-counting, when updating source and destination statistics
Catalina Pineros [Fri, 6 Mar 2026 18:44:41 +0000 (13:44 -0500)] 
fixed double-counting, when updating source and destination statistics
code was updating both stat[src_code] and stat[dst_code], once when updating source statistics and once again when updating destination statistics.
(rlm_stats: per-IP stats double-count both src_code and dst_code 229)

7 weeks agoremove impossible assert
Catalina Pineros [Fri, 6 Mar 2026 17:16:23 +0000 (12:16 -0500)] 
remove impossible assert
ret == RD_KAFKA_CONF_UNKNOWN already checked in previous if statement that returns value 0. so assert is redundant, always fails, and also prevents cf_log_err() from printing error message
(lib/kafka: remove impossible assertion in kafka_topic_config_dflt 106)

7 weeks agoreturn code (-1) when out of memory
Catalina Pineros [Fri, 6 Mar 2026 14:41:19 +0000 (09:41 -0500)] 
return code (-1) when out of memory
(proto_dhcpv4/v6_udp.c: return 0 instead of -1 on talloc_zero failure in mod_instantiate 305)

7 weeks agomore tests for corner cases of RADIUS encoder
Alan T. DeKok [Sat, 7 Mar 2026 12:30:09 +0000 (07:30 -0500)] 
more tests for corner cases of RADIUS encoder

7 weeks agouse correct size for poisoned region
Alan T. DeKok [Fri, 6 Mar 2026 20:45:10 +0000 (15:45 -0500)] 
use correct size for poisoned region

instead of relying on "slen", which is then over-written before
un-poisoning the region.

7 weeks agoclean up and tweak substr tests
Alan T. DeKok [Fri, 6 Mar 2026 17:18:18 +0000 (12:18 -0500)] 
clean up and tweak substr tests

7 weeks agomore corner cases for internal encoder / decoder
Alan T. DeKok [Fri, 6 Mar 2026 17:11:41 +0000 (12:11 -0500)] 
more corner cases for internal encoder / decoder

7 weeks agomore corner cases for DER
Alan T. DeKok [Fri, 6 Mar 2026 16:14:38 +0000 (11:14 -0500)] 
more corner cases for DER

7 weeks agomore corner cases for TACACS+
Alan T. DeKok [Fri, 6 Mar 2026 15:34:56 +0000 (10:34 -0500)] 
more corner cases for TACACS+

7 weeks agoadd corner cases / error tests for DHCPv6
Alan T. DeKok [Fri, 6 Mar 2026 15:11:42 +0000 (10:11 -0500)] 
add corner cases / error tests for DHCPv6

7 weeks agomore tests for dhcpv4
Alan T. DeKok [Fri, 6 Mar 2026 04:08:49 +0000 (23:08 -0500)] 
more tests for dhcpv4

7 weeks agomore corner cases for RADIUS
Alan T. DeKok [Fri, 6 Mar 2026 04:00:59 +0000 (23:00 -0500)] 
more corner cases for RADIUS

7 weeks agoadd more tests for error cases and bad packets
Alan T. DeKok [Fri, 6 Mar 2026 03:54:46 +0000 (22:54 -0500)] 
add more tests for error cases and bad packets

7 weeks agoadd tests for more corner cases
Alan T. DeKok [Fri, 6 Mar 2026 03:43:14 +0000 (22:43 -0500)] 
add tests for more corner cases

7 weeks agodisallow empty input files
Alan T. DeKok [Fri, 6 Mar 2026 03:27:21 +0000 (22:27 -0500)] 
disallow empty input files

while it can be nice to do nothing, it's best to do something.

7 weeks agoreturn on error
Alan T. DeKok [Fri, 6 Mar 2026 03:20:44 +0000 (22:20 -0500)] 
return on error

7 weeks agorhel: Disable dwz (dwarf compression), so we get debuginfo usable with lldb
Arran Cudbard-Bell [Fri, 6 Mar 2026 04:29:28 +0000 (20:29 -0800)] 
rhel: Disable dwz (dwarf compression), so we get debuginfo usable with lldb

7 weeks agodocker: Copy GPG key from the build phase to reduce spurious failures
Arran Cudbard-Bell [Fri, 6 Mar 2026 01:56:15 +0000 (17:56 -0800)] 
docker: Copy GPG key from the build phase to reduce spurious failures

7 weeks agocount offers, not replies
Alan T. DeKok [Fri, 6 Mar 2026 01:25:43 +0000 (20:25 -0500)] 
count offers, not replies

7 weeks agocheck for end pointer, too
Alan T. DeKok [Fri, 6 Mar 2026 01:25:01 +0000 (20:25 -0500)] 
check for end pointer, too

7 weeks agoreturn on OOM
Alan T. DeKok [Fri, 6 Mar 2026 01:21:56 +0000 (20:21 -0500)] 
return on OOM

7 weeks agoupdate macro
Alan T. DeKok [Fri, 6 Mar 2026 01:18:16 +0000 (20:18 -0500)] 
update macro

7 weeks agoremove unused file
Alan T. DeKok [Fri, 6 Mar 2026 01:16:14 +0000 (20:16 -0500)] 
remove unused file

7 weeks agouse same code as previous check
Alan T. DeKok [Fri, 6 Mar 2026 01:14:58 +0000 (20:14 -0500)] 
use same code as previous check

this should really be abstracted into a common function

7 weeks agofree on OOM
Alan T. DeKok [Fri, 6 Mar 2026 01:13:09 +0000 (20:13 -0500)] 
free on OOM

7 weeks agocheck for failure when adding chain cert
Alan T. DeKok [Fri, 6 Mar 2026 01:08:54 +0000 (20:08 -0500)] 
check for failure when adding chain cert

7 weeks agoclose pipe after ferror() call
Alan T. DeKok [Fri, 6 Mar 2026 01:08:03 +0000 (20:08 -0500)] 
close pipe after ferror() call

7 weeks agoone more fix
Alan T. DeKok [Fri, 6 Mar 2026 01:04:36 +0000 (20:04 -0500)] 
one more fix

7 weeks agoFix debuginfo in RPM builds
Arran Cudbard-Bell [Fri, 6 Mar 2026 01:02:58 +0000 (17:02 -0800)] 
Fix debuginfo in RPM builds

Always built with -g3 no matter if it's a developer build or not, otherwise state machine issues become impossible to debug.

7 weeks agodon't use "index" as a variable name, it's a C library function
Alan T. DeKok [Fri, 6 Mar 2026 00:48:30 +0000 (19:48 -0500)] 
don't use "index" as a variable name, it's a C library function

the compilers aren't smart enough to notice this and complain.

7 weeks agotypo
Catalina Pineros [Thu, 5 Mar 2026 20:42:28 +0000 (15:42 -0500)] 
typo
(rlm_python: fix wrong variable 'index' in py_freeradius_build_parents error message 341)

7 weeks agorlm_sql_firebird: fix free() on talloc-allocated memory in fb_free_sqlda()
junirod [Tue, 24 Feb 2026 07:41:41 +0000 (07:41 +0000)] 
rlm_sql_firebird: fix free() on talloc-allocated memory in fb_free_sqlda()

7 weeks agoreturn after error, initialize var
Catalina Pineros [Thu, 5 Mar 2026 18:55:36 +0000 (13:55 -0500)] 
return after error, initialize var
(command.c: fix missing return false and uninitialized child_done 148)

7 weeks agoreturn after error, deallocate variable
Catalina Pineros [Thu, 5 Mar 2026 17:32:03 +0000 (12:32 -0500)] 
return after error, deallocate variable
(rlm_sql_unixodbc: fix missing return after connection failure and ind memory leak 412)

7 weeks agoreturn code (-1) when parse failure
Catalina Pineros [Thu, 5 Mar 2026 17:00:39 +0000 (12:00 -0500)] 
return code (-1) when parse failure
(map_to_vp: returns success (rcode=0) on fr_pair_value_from_str failure 239)

7 weeks agotypo
Catalina Pineros [Thu, 5 Mar 2026 16:41:04 +0000 (11:41 -0500)] 
typo
(lib/kafka: fix auto_commit property name typo (enable_auto.commit -> enable.auto.commit) 107)

7 weeks agoadd missing 'usage()' for consistency
Catalina Pineros [Thu, 5 Mar 2026 15:55:30 +0000 (10:55 -0500)] 
add missing 'usage()' for consistency
(rlm_redis_ippool_tool: add missing usage() call after invalid prefix error 353)

7 weeks agoallow queries to proceed in CONNECTING or CONNECTED states
Alan T. DeKok [Thu, 5 Mar 2026 13:31:32 +0000 (08:31 -0500)] 
allow queries to proceed in CONNECTING or CONNECTED states

instead of checking for a failure state, and missing some
failure states

7 weeks agouse consistent names
Alan T. DeKok [Thu, 5 Mar 2026 13:29:19 +0000 (08:29 -0500)] 
use consistent names

'conn' is the #fr_connection_t

'c' is the DB connection handle

7 weeks agoMAX is last valid plus one
Alan T. DeKok [Thu, 5 Mar 2026 13:09:55 +0000 (08:09 -0500)] 
MAX is last valid plus one

7 weeks agovarious bug fixes and tweaks to the tests
Alan T. DeKok [Thu, 5 Mar 2026 13:02:32 +0000 (08:02 -0500)] 
various bug fixes and tweaks to the tests

7 weeks agoclean up FDs and PID in all situations
Alan T. DeKok [Thu, 5 Mar 2026 12:52:42 +0000 (07:52 -0500)] 
clean up FDs and PID in all situations

and don't complain on cleanup if the program exited cleanly.

7 weeks agotypo
Alan T. DeKok [Thu, 5 Mar 2026 12:32:44 +0000 (07:32 -0500)] 
typo

7 weeks agouse better dlist functions, which means less code
Alan T. DeKok [Thu, 5 Mar 2026 12:24:08 +0000 (07:24 -0500)] 
use better dlist functions, which means less code

7 weeks agoarguably functions calling talloc_free() should return int
Alan T. DeKok [Thu, 5 Mar 2026 12:11:33 +0000 (07:11 -0500)] 
arguably functions calling talloc_free() should return int

and the callers should check the return code

7 weeks agotypo in doxygen
Alan T. DeKok [Thu, 5 Mar 2026 12:08:50 +0000 (07:08 -0500)] 
typo in doxygen

7 weeks agouse fr_dlist_talloc_free() instead of hand-rolled loop
Alan T. DeKok [Thu, 5 Mar 2026 12:05:08 +0000 (07:05 -0500)] 
use fr_dlist_talloc_free() instead of hand-rolled loop

7 weeks agojust use pop_head(), which is a bit clearer
Alan T. DeKok [Thu, 5 Mar 2026 12:04:39 +0000 (07:04 -0500)] 
just use pop_head(), which is a bit clearer

7 weeks agotypo
Alan T. DeKok [Thu, 5 Mar 2026 11:57:57 +0000 (06:57 -0500)] 
typo

7 weeks agouse value-box escaping function.
Alan T. DeKok [Wed, 4 Mar 2026 22:31:58 +0000 (17:31 -0500)] 
use value-box escaping function.

7 weeks agomash leading '.', too.
Alan T. DeKok [Wed, 4 Mar 2026 22:31:36 +0000 (17:31 -0500)] 
mash leading '.', too.

and set safe_for

7 weeks agofix: 1. initialise thread mutex before use
Catalina Pineros [Wed, 4 Mar 2026 19:46:35 +0000 (14:46 -0500)] 
fix: 1. initialise thread mutex before use
(rlm_stats: initialise thread mutex before use 415)

7 weeks agofix: 1. typo
Catalina Pineros [Wed, 4 Mar 2026 19:33:52 +0000 (14:33 -0500)] 
fix: 1. typo
(rlm_sqlcounter: fix copy-paste bug in find_prev_reset() for "never" reset 413)

7 weeks agofix: 1. function parameter typo fixed
Catalina Pineros [Wed, 4 Mar 2026 19:18:15 +0000 (14:18 -0500)] 
fix: 1. function parameter typo fixed
(Fix copy-paste error: response_window never validated in rlm_tacacs and rlm_radius 416)

7 weeks agofix: 1. exact duplicate code removed
Catalina Pineros [Wed, 4 Mar 2026 19:00:45 +0000 (14:00 -0500)] 
fix: 1. exact duplicate code removed
2. return 0  -->  return -1   (for invalid discriminator/state)
(protocols/bfd: fix duplicate detect_multi check and wrong return value in decode_proto 433)

7 weeks agofix: 1. missing 'false' argument when calling function
Catalina Pineros [Wed, 4 Mar 2026 18:39:25 +0000 (13:39 -0500)] 
fix: 1. missing 'false' argument when calling function
2. num_events == EINTR  -->  errno == EINTR     (typo)
3. if (*start > MY_ARRAY_SIZE)   -->   if (*start >= MY_ARRAY_SIZE)   (wraparound sometimes skipped)
(tests/util: fix missing 5th arg to fr_message_set_create, wrong EINTR check, and off-by-one 225)

7 weeks agofix: 1. calling wrong function, is now pop_tail (copy paste typo)
Catalina Pineros [Wed, 4 Mar 2026 16:48:15 +0000 (11:48 -0500)] 
fix: 1. calling wrong function, is now pop_tail (copy paste typo)
2. fix undefined behaviour
(lib/util/dlist: fix free_tail pop direction and sort-merge NULL deref 156)

7 weeks agofix: 1. pesudo --> pseudo (typo)
Catalina Pineros [Wed, 4 Mar 2026 15:40:06 +0000 (10:40 -0500)] 
fix: 1. pesudo --> pseudo (typo)
2. added outer parenthesis
(net.h/net.c: fix 'pesudo' typo in function name; add missing outer parens to IP_VHL macro 283)

7 weeks agojust use sprintf to match the rest of the code
Alan T. DeKok [Wed, 4 Mar 2026 22:05:46 +0000 (17:05 -0500)] 
just use sprintf to match the rest of the code

and other minor tweaks

7 weeks agogreatly simplify function
Alan T. DeKok [Wed, 4 Mar 2026 22:01:10 +0000 (17:01 -0500)] 
greatly simplify function

as it should only be taking unsafe inputs

7 weeks agothe function is only used by one caller
Alan T. DeKok [Wed, 4 Mar 2026 21:52:44 +0000 (16:52 -0500)] 
the function is only used by one caller

and doesn't have to be exposed

7 weeks agoadd callback for escaping value-box with sbuff erules
Alan T. DeKok [Wed, 4 Mar 2026 16:39:20 +0000 (11:39 -0500)] 
add callback for escaping value-box with sbuff erules

7 weeks agouse real type, and not uintptr_t
Alan T. DeKok [Wed, 4 Mar 2026 16:29:42 +0000 (11:29 -0500)] 
use real type, and not uintptr_t

7 weeks agoremove functionality which is useless and never worked
Alan T. DeKok [Wed, 4 Mar 2026 16:19:05 +0000 (11:19 -0500)] 
remove functionality which is useless and never worked

7 weeks agoadd simple tests for value-box functions
Alan T. DeKok [Wed, 4 Mar 2026 15:29:18 +0000 (10:29 -0500)] 
add simple tests for value-box functions

7 weeks agouse standard APIs for filename escapes, and check for errors
Alan T. DeKok [Wed, 4 Mar 2026 15:24:34 +0000 (10:24 -0500)] 
use standard APIs for filename escapes, and check for errors

7 weeks agoadd value-box escape with erules
Alan T. DeKok [Wed, 4 Mar 2026 15:03:12 +0000 (10:03 -0500)] 
add value-box escape with erules

there are a number of places which need it.

7 weeks agocontinue after \r, \n, \t
Alan T. DeKok [Wed, 4 Mar 2026 12:46:50 +0000 (07:46 -0500)] 
continue after \r, \n, \t