]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Nick Porter [Tue, 24 Feb 2026 18:02:58 +0000 (18:02 +0000)]
Remove unused list
Arran Cudbard-Bell [Wed, 25 Feb 2026 06:13:24 +0000 (23:13 -0700)]
Fix marker not being released on return in fr_sbuff_out_bstrncpy_exact
Arran Cudbard-Bell [Wed, 25 Feb 2026 01:49:19 +0000 (18:49 -0700)]
Enable parallel deb builds
Alan T. DeKok [Wed, 25 Feb 2026 00:21:20 +0000 (19:21 -0500)]
various bug fixes in retry.c
Alan T. DeKok [Wed, 25 Feb 2026 00:14:47 +0000 (19:14 -0500)]
return size of tail block
Alan T. DeKok [Wed, 25 Feb 2026 00:12:43 +0000 (19:12 -0500)]
check for failures and clean up
Alan T. DeKok [Wed, 25 Feb 2026 00:09:59 +0000 (19:09 -0500)]
hoist ring buffer limits to common function
Alan T. DeKok [Wed, 25 Feb 2026 00:02:55 +0000 (19:02 -0500)]
match size exactly
Alan T. DeKok [Tue, 24 Feb 2026 22:55:24 +0000 (17:55 -0500)]
add missing file
Alan T. DeKok [Tue, 24 Feb 2026 22:48:07 +0000 (17:48 -0500)]
increment counter as we walk down the list
Alan T. DeKok [Tue, 24 Feb 2026 22:43:36 +0000 (17:43 -0500)]
free VP, not pointer
Alan T. DeKok [Tue, 24 Feb 2026 22:39:46 +0000 (17:39 -0500)]
discard attributes with the incorrect length
Alan T. DeKok [Tue, 24 Feb 2026 22:38:03 +0000 (17:38 -0500)]
use correct data type
Alan T. DeKok [Tue, 24 Feb 2026 22:34:56 +0000 (17:34 -0500)]
error on conflict (1), too.
which makes this code the same as the earlier version of it
Alan T. DeKok [Tue, 24 Feb 2026 22:33:57 +0000 (17:33 -0500)]
remove unused 'i' and 'p' arguments
Alan T. DeKok [Tue, 24 Feb 2026 22:33:09 +0000 (17:33 -0500)]
typo
Alan T. DeKok [Tue, 24 Feb 2026 22:22:33 +0000 (17:22 -0500)]
limit count to available capacity
and limit PPS to avoid numerical overflows
Alan T. DeKok [Tue, 24 Feb 2026 21:38:16 +0000 (16:38 -0500)]
spelling
Alan T. DeKok [Tue, 24 Feb 2026 21:37:41 +0000 (16:37 -0500)]
hoist free(inst_name)
Alan T. DeKok [Tue, 24 Feb 2026 21:32:50 +0000 (16:32 -0500)]
hoist code into common function
Alan T. DeKok [Tue, 24 Feb 2026 21:18:48 +0000 (16:18 -0500)]
use INT_MAX instead of hard-coded numbers
Alan T. DeKok [Tue, 24 Feb 2026 21:15:32 +0000 (16:15 -0500)]
use pointer offset, not element offset
Alan T. DeKok [Tue, 24 Feb 2026 21:14:14 +0000 (16:14 -0500)]
fix typos
Alan T. DeKok [Tue, 24 Feb 2026 21:12:31 +0000 (16:12 -0500)]
fix typos
Alan T. DeKok [Tue, 24 Feb 2026 21:10:35 +0000 (16:10 -0500)]
tweaks for name normalization
Alan T. DeKok [Tue, 24 Feb 2026 21:07:27 +0000 (16:07 -0500)]
remove cancelled items from the lists
Alan T. DeKok [Tue, 24 Feb 2026 21:04:29 +0000 (16:04 -0500)]
allow for IPv6 packet info, and check for truncated data / msg
Alan T. DeKok [Tue, 24 Feb 2026 20:55:26 +0000 (15:55 -0500)]
mark data in buffer as used
Alan T. DeKok [Tue, 24 Feb 2026 20:52:23 +0000 (15:52 -0500)]
remove unused macros
Alan T. DeKok [Tue, 24 Feb 2026 20:50:17 +0000 (15:50 -0500)]
guards for bugs in EAP method implementations
Alan T. DeKok [Tue, 24 Feb 2026 20:46:23 +0000 (15:46 -0500)]
EAP-Message is already concatenated
Alan T. DeKok [Tue, 24 Feb 2026 20:43:22 +0000 (15:43 -0500)]
clean up eap validity checks
Alan T. DeKok [Tue, 24 Feb 2026 20:21:57 +0000 (15:21 -0500)]
return reject on channel binding failure
Alan T. DeKok [Tue, 24 Feb 2026 18:27:40 +0000 (13:27 -0500)]
clean up and rearrange EAP handling
Alan T. DeKok [Tue, 24 Feb 2026 17:10:13 +0000 (12:10 -0500)]
tweak handling of ignore_unknown_types
Alan T. DeKok [Tue, 24 Feb 2026 16:40:16 +0000 (11:40 -0500)]
tweak variables to quiet static analyzer
Matthew Newton [Tue, 24 Feb 2026 18:31:40 +0000 (18:31 +0000)]
temporarily disable regular docker image refresh
Alan T. DeKok [Tue, 24 Feb 2026 16:18:48 +0000 (11:18 -0500)]
send back canned failure on invalid EAP packets.
and discard the underlying EAP session.
Alan T. DeKok [Tue, 24 Feb 2026 16:17:26 +0000 (11:17 -0500)]
add function to discard EAP session based on request
Alan T. DeKok [Tue, 24 Feb 2026 16:19:13 +0000 (11:19 -0500)]
remove dead code
Alan T. DeKok [Tue, 24 Feb 2026 13:06:14 +0000 (08:06 -0500)]
typo
Alan T. DeKok [Tue, 24 Feb 2026 12:38:42 +0000 (07:38 -0500)]
use "end" pointer instead of "size_t" counter
Alan T. DeKok [Mon, 23 Feb 2026 19:32:09 +0000 (14:32 -0500)]
be more forgiving about VSAs
and use intermediate list, so that we don't update the input one
on error
Alan T. DeKok [Mon, 23 Feb 2026 19:47:56 +0000 (14:47 -0500)]
use intermediate list
so that we don't update the main one on error
Alan T. DeKok [Mon, 23 Feb 2026 19:39:13 +0000 (14:39 -0500)]
decode concatenated DNS labels, too
Alan T. DeKok [Mon, 23 Feb 2026 18:57:07 +0000 (13:57 -0500)]
return correct value.
the caller doesn't use it, but it's best to be correct.
Nick Porter [Mon, 23 Feb 2026 20:01:19 +0000 (20:01 +0000)]
%always() argument is a string
Arran Cudbard-Bell [Tue, 24 Feb 2026 05:19:50 +0000 (22:19 -0700)]
Increase unit_test_module max_request_time to 60s
The default 30s max_request_time was causing the LDAP auth_ldapi
test to be cancelled under sanitizers. The SCRAM-SHA-512 SASL bind
plus user search takes ~34s with ASAN overhead, exceeding the 30s
limit and triggering FR_SIGNAL_CANCEL on the request.
Arran Cudbard-Bell [Tue, 24 Feb 2026 04:10:09 +0000 (21:10 -0700)]
Increase jlibtool test timeout to 600s under sanitizers
The O2-g3 sanitizer build was hitting the 300s jlibtool timeout
on unit_test_module tests (e.g. modules/files/vendor). Double
the timeout when sanitizers are enabled to account for ASAN overhead.
Arran Cudbard-Bell [Tue, 24 Feb 2026 03:58:21 +0000 (20:58 -0700)]
Increase eapol_test timeout to 30s under sanitizers
The 10 second eapol_test timeout is too tight when running under
address sanitizer with detect_stack_use_after_return=1 and
fast_unwind_on_malloc=0. Multi-round-trip EAP-TLS handshakes
with certificate verification can exceed 10s under this load,
causing the most frequent CI-Sanitizers failure
(ttls-client-eap-tls timeout).
Set EAPOL_TEST_TIMEOUT conditionally: 30s when sanitizers are
enabled, 10s otherwise.
Arran Cudbard-Bell [Mon, 23 Feb 2026 23:11:12 +0000 (16:11 -0700)]
Add Claude Code GitHub Workflow (#5752)
* "Claude PR Assistant workflow"
* "Claude Code Review workflow"
Alan T. DeKok [Mon, 23 Feb 2026 17:18:05 +0000 (12:18 -0500)]
shut up clang scan
which claims some bizarre things if the check for !secret is
hoisted to the top of the do_challenge() function.
Alan T. DeKok [Mon, 23 Feb 2026 17:10:18 +0000 (12:10 -0500)]
minor bug fixes in radius decoder
Alan T. DeKok [Mon, 23 Feb 2026 17:07:19 +0000 (12:07 -0500)]
decode continued attributes into the correct parent
Alan T. DeKok [Mon, 23 Feb 2026 16:04:45 +0000 (11:04 -0500)]
print name2 if we can't find the section
unused sections are a warning without -C, and an error with -C
Unless the unused section is a case difference from a known one,
in which case it's an error even without -C.
We don't want people to make typos, and have the server silently
ignore critical pieces of the config.
Alan T. DeKok [Sun, 22 Feb 2026 17:48:33 +0000 (12:48 -0500)]
various bug fixes and tweaks to unlang
Alan T. DeKok [Sun, 22 Feb 2026 17:47:01 +0000 (12:47 -0500)]
add partial page for "this isn't RADIUS"
and various other minor tweaks
Alan T. DeKok [Sun, 22 Feb 2026 17:01:14 +0000 (12:01 -0500)]
tweak proxy-state missing -> proxy state without MA
Alan T. DeKok [Fri, 20 Feb 2026 16:25:43 +0000 (11:25 -0500)]
various bug fixes in radmin.c
Alan T. DeKok [Sat, 21 Feb 2026 00:45:16 +0000 (19:45 -0500)]
typos
Nick Porter [Mon, 23 Feb 2026 08:33:30 +0000 (08:33 +0000)]
Pacify Coverity (CID #
1681443 )
Nick Porter [Mon, 23 Feb 2026 08:27:48 +0000 (08:27 +0000)]
Pacify Coverity (CID #
1681444 )
Alan T. DeKok [Sat, 21 Feb 2026 15:23:16 +0000 (10:23 -0500)]
reword and touchup
Alan T. DeKok [Sat, 21 Feb 2026 15:08:04 +0000 (10:08 -0500)]
typo
nolade [Thu, 19 Feb 2026 21:27:12 +0000 (16:27 -0500)]
docs-v4: update troubleshooting with common errors page HIVE 7914
Alan T. DeKok [Sat, 21 Feb 2026 14:47:22 +0000 (09:47 -0500)]
pull changes back into raddb, and regenerate from "make doc.raddb"
nolade [Fri, 20 Feb 2026 20:02:10 +0000 (15:02 -0500)]
docs-v4: correct typos from Alan's first report Hive 8329
nolade [Fri, 20 Feb 2026 19:34:11 +0000 (14:34 -0500)]
docs-v4: convert american spelling to UK spelling Hive 8329
nolade [Fri, 20 Feb 2026 18:27:12 +0000 (13:27 -0500)]
docs-v4: fix spelling errors Hive 8329 (excluded raddb)
Alan T. DeKok [Sat, 21 Feb 2026 14:25:45 +0000 (09:25 -0500)]
check that the packet is OK
Alan T. DeKok [Sat, 21 Feb 2026 14:22:19 +0000 (09:22 -0500)]
add Net.* attributes
Alan T. DeKok [Sat, 21 Feb 2026 12:54:04 +0000 (07:54 -0500)]
tweak code to reduce indentation and redundancy
Alan T. DeKok [Sat, 21 Feb 2026 01:40:29 +0000 (20:40 -0500)]
move checks to quiet analyzer
Alan T. DeKok [Sat, 21 Feb 2026 01:37:04 +0000 (20:37 -0500)]
message type can have only one octet according to RFC2132
Alan T. DeKok [Sat, 21 Feb 2026 01:25:17 +0000 (20:25 -0500)]
various bug fixes in proto_tacacs
Alan T. DeKok [Sat, 21 Feb 2026 00:55:34 +0000 (19:55 -0500)]
various bug fixes in proto_detail
Alan T. DeKok [Sat, 21 Feb 2026 00:42:53 +0000 (19:42 -0500)]
various bug fixes in proto_bfd
Alan T. DeKok [Fri, 20 Feb 2026 23:25:06 +0000 (18:25 -0500)]
make input const
Alan T. DeKok [Fri, 20 Feb 2026 19:02:37 +0000 (14:02 -0500)]
update notes for static analyzer
Alan T. DeKok [Fri, 20 Feb 2026 18:55:16 +0000 (13:55 -0500)]
use MEM() for allocation failure
Alan T. DeKok [Fri, 20 Feb 2026 18:54:35 +0000 (13:54 -0500)]
various bug fixes for cron
Alan T. DeKok [Fri, 20 Feb 2026 18:41:39 +0000 (13:41 -0500)]
various bug fixes for DNS listener
Alan T. DeKok [Fri, 20 Feb 2026 18:39:11 +0000 (13:39 -0500)]
DNS opcodes 7..15 are unassigned
Alan T. DeKok [Fri, 20 Feb 2026 14:33:49 +0000 (09:33 -0500)]
various bug fixes in proto_radius
Alan T. DeKok [Fri, 20 Feb 2026 14:26:29 +0000 (09:26 -0500)]
ports are short, so use ntohs
Alan T. DeKok [Fri, 20 Feb 2026 12:22:04 +0000 (07:22 -0500)]
various minor tweaks to radiusd.c
Alan T. DeKok [Thu, 19 Feb 2026 20:23:28 +0000 (15:23 -0500)]
various bug fixes in rlm_digest
check lengths of the various attributes, in case the local admin
wants to manually create attributes which can't go into a
RADIUS packet.
Arran Cudbard-Bell [Sat, 21 Feb 2026 07:04:26 +0000 (00:04 -0700)]
Fix memory leak and deadlock on error path in cache module
Arran Cudbard-Bell [Sat, 21 Feb 2026 07:03:43 +0000 (00:03 -0700)]
Sync hashing functions
Arran Cudbard-Bell [Sat, 21 Feb 2026 05:08:49 +0000 (22:08 -0700)]
Extend timeout for radiusd
Arran Cudbard-Bell [Sat, 21 Feb 2026 04:52:48 +0000 (21:52 -0700)]
Correctly terminate the buffer we use to parse generalized time in DER, and support precision up to 9 digits
Arran Cudbard-Bell [Sat, 21 Feb 2026 02:53:53 +0000 (19:53 -0700)]
Respect always_string
Arran Cudbard-Bell [Sat, 21 Feb 2026 02:32:57 +0000 (19:32 -0700)]
json: Refactor base16/base64 conversions
Arran Cudbard-Bell [Sat, 21 Feb 2026 02:06:46 +0000 (19:06 -0700)]
json: Split conversion functions into pair/box conversion
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:58:26 +0000 (18:58 -0700)]
json: Remove is_enum from json_afrom_value_box. Sanitise code... generally. Mostly merge b16 and b64 cases.
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:50:49 +0000 (18:50 -0700)]
json: Fix multiple other memory leaks and minor issues
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:29:14 +0000 (18:29 -0700)]
json: Use the correct format specifier for 64bit integers in json.c
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:28:55 +0000 (18:28 -0700)]
json: Correctly escape slashes and double quotes in JSON data
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:27:17 +0000 (18:27 -0700)]
json: Emit an error on structural types
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:27:05 +0000 (18:27 -0700)]
json: Use correct field access