]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
2 months agoRemove unused list
Nick Porter [Tue, 24 Feb 2026 18:02:58 +0000 (18:02 +0000)] 
Remove unused list

2 months agoFix marker not being released on return in fr_sbuff_out_bstrncpy_exact
Arran Cudbard-Bell [Wed, 25 Feb 2026 06:13:24 +0000 (23:13 -0700)] 
Fix marker not being released on return in fr_sbuff_out_bstrncpy_exact

2 months agoEnable parallel deb builds
Arran Cudbard-Bell [Wed, 25 Feb 2026 01:49:19 +0000 (18:49 -0700)] 
Enable parallel deb builds

2 months agovarious bug fixes in retry.c
Alan T. DeKok [Wed, 25 Feb 2026 00:21:20 +0000 (19:21 -0500)] 
various bug fixes in retry.c

2 months agoreturn size of tail block
Alan T. DeKok [Wed, 25 Feb 2026 00:14:47 +0000 (19:14 -0500)] 
return size of tail block

2 months agocheck for failures and clean up
Alan T. DeKok [Wed, 25 Feb 2026 00:12:43 +0000 (19:12 -0500)] 
check for failures and clean up

2 months agohoist ring buffer limits to common function
Alan T. DeKok [Wed, 25 Feb 2026 00:09:59 +0000 (19:09 -0500)] 
hoist ring buffer limits to common function

2 months agomatch size exactly
Alan T. DeKok [Wed, 25 Feb 2026 00:02:55 +0000 (19:02 -0500)] 
match size exactly

2 months agoadd missing file
Alan T. DeKok [Tue, 24 Feb 2026 22:55:24 +0000 (17:55 -0500)] 
add missing file

2 months agoincrement counter as we walk down the list
Alan T. DeKok [Tue, 24 Feb 2026 22:48:07 +0000 (17:48 -0500)] 
increment counter as we walk down the list

2 months agofree VP, not pointer
Alan T. DeKok [Tue, 24 Feb 2026 22:43:36 +0000 (17:43 -0500)] 
free VP, not pointer

2 months agodiscard attributes with the incorrect length
Alan T. DeKok [Tue, 24 Feb 2026 22:39:46 +0000 (17:39 -0500)] 
discard attributes with the incorrect length

2 months agouse correct data type
Alan T. DeKok [Tue, 24 Feb 2026 22:38:03 +0000 (17:38 -0500)] 
use correct data type

2 months agoerror on conflict (1), too.
Alan T. DeKok [Tue, 24 Feb 2026 22:34:56 +0000 (17:34 -0500)] 
error on conflict (1), too.

which makes this code the same as the earlier version of it

2 months agoremove unused 'i' and 'p' arguments
Alan T. DeKok [Tue, 24 Feb 2026 22:33:57 +0000 (17:33 -0500)] 
remove unused 'i' and 'p' arguments

2 months agotypo
Alan T. DeKok [Tue, 24 Feb 2026 22:33:09 +0000 (17:33 -0500)] 
typo

2 months agolimit count to available capacity
Alan T. DeKok [Tue, 24 Feb 2026 22:22:33 +0000 (17:22 -0500)] 
limit count to available capacity

and limit PPS to avoid numerical overflows

2 months agospelling
Alan T. DeKok [Tue, 24 Feb 2026 21:38:16 +0000 (16:38 -0500)] 
spelling

2 months agohoist free(inst_name)
Alan T. DeKok [Tue, 24 Feb 2026 21:37:41 +0000 (16:37 -0500)] 
hoist free(inst_name)

2 months agohoist code into common function
Alan T. DeKok [Tue, 24 Feb 2026 21:32:50 +0000 (16:32 -0500)] 
hoist code into common function

2 months agouse INT_MAX instead of hard-coded numbers
Alan T. DeKok [Tue, 24 Feb 2026 21:18:48 +0000 (16:18 -0500)] 
use INT_MAX instead of hard-coded numbers

2 months agouse pointer offset, not element offset
Alan T. DeKok [Tue, 24 Feb 2026 21:15:32 +0000 (16:15 -0500)] 
use pointer offset, not element offset

2 months agofix typos
Alan T. DeKok [Tue, 24 Feb 2026 21:14:14 +0000 (16:14 -0500)] 
fix typos

2 months agofix typos
Alan T. DeKok [Tue, 24 Feb 2026 21:12:31 +0000 (16:12 -0500)] 
fix typos

2 months agotweaks for name normalization
Alan T. DeKok [Tue, 24 Feb 2026 21:10:35 +0000 (16:10 -0500)] 
tweaks for name normalization

2 months agoremove cancelled items from the lists
Alan T. DeKok [Tue, 24 Feb 2026 21:07:27 +0000 (16:07 -0500)] 
remove cancelled items from the lists

2 months agoallow for IPv6 packet info, and check for truncated data / msg
Alan T. DeKok [Tue, 24 Feb 2026 21:04:29 +0000 (16:04 -0500)] 
allow for IPv6 packet info, and check for truncated data / msg

2 months agomark data in buffer as used
Alan T. DeKok [Tue, 24 Feb 2026 20:55:26 +0000 (15:55 -0500)] 
mark data in buffer as used

2 months agoremove unused macros
Alan T. DeKok [Tue, 24 Feb 2026 20:52:23 +0000 (15:52 -0500)] 
remove unused macros

2 months agoguards for bugs in EAP method implementations
Alan T. DeKok [Tue, 24 Feb 2026 20:50:17 +0000 (15:50 -0500)] 
guards for bugs in EAP method implementations

2 months agoEAP-Message is already concatenated
Alan T. DeKok [Tue, 24 Feb 2026 20:46:23 +0000 (15:46 -0500)] 
EAP-Message is already concatenated

2 months agoclean up eap validity checks
Alan T. DeKok [Tue, 24 Feb 2026 20:43:22 +0000 (15:43 -0500)] 
clean up eap validity checks

2 months agoreturn reject on channel binding failure
Alan T. DeKok [Tue, 24 Feb 2026 20:21:57 +0000 (15:21 -0500)] 
return reject on channel binding failure

2 months agoclean up and rearrange EAP handling
Alan T. DeKok [Tue, 24 Feb 2026 18:27:40 +0000 (13:27 -0500)] 
clean up and rearrange EAP handling

2 months agotweak handling of ignore_unknown_types
Alan T. DeKok [Tue, 24 Feb 2026 17:10:13 +0000 (12:10 -0500)] 
tweak handling of ignore_unknown_types

2 months agotweak variables to quiet static analyzer
Alan T. DeKok [Tue, 24 Feb 2026 16:40:16 +0000 (11:40 -0500)] 
tweak variables to quiet static analyzer

2 months agotemporarily disable regular docker image refresh
Matthew Newton [Tue, 24 Feb 2026 18:31:40 +0000 (18:31 +0000)] 
temporarily disable regular docker image refresh

2 months agosend back canned failure on invalid EAP packets.
Alan T. DeKok [Tue, 24 Feb 2026 16:18:48 +0000 (11:18 -0500)] 
send back canned failure on invalid EAP packets.

and discard the underlying EAP session.

2 months agoadd function to discard EAP session based on request
Alan T. DeKok [Tue, 24 Feb 2026 16:17:26 +0000 (11:17 -0500)] 
add function to discard EAP session based on request

2 months agoremove dead code
Alan T. DeKok [Tue, 24 Feb 2026 16:19:13 +0000 (11:19 -0500)] 
remove dead code

2 months agotypo
Alan T. DeKok [Tue, 24 Feb 2026 13:06:14 +0000 (08:06 -0500)] 
typo

2 months agouse "end" pointer instead of "size_t" counter
Alan T. DeKok [Tue, 24 Feb 2026 12:38:42 +0000 (07:38 -0500)] 
use "end" pointer instead of "size_t" counter

2 months agobe more forgiving about VSAs
Alan T. DeKok [Mon, 23 Feb 2026 19:32:09 +0000 (14:32 -0500)] 
be more forgiving about VSAs

and use intermediate list, so that we don't update the input one
on error

2 months agouse intermediate list
Alan T. DeKok [Mon, 23 Feb 2026 19:47:56 +0000 (14:47 -0500)] 
use intermediate list

so that we don't update the main one on error

2 months agodecode concatenated DNS labels, too
Alan T. DeKok [Mon, 23 Feb 2026 19:39:13 +0000 (14:39 -0500)] 
decode concatenated DNS labels, too

2 months agoreturn correct value.
Alan T. DeKok [Mon, 23 Feb 2026 18:57:07 +0000 (13:57 -0500)] 
return correct value.

the caller doesn't use it, but it's best to be correct.

2 months ago%always() argument is a string
Nick Porter [Mon, 23 Feb 2026 20:01:19 +0000 (20:01 +0000)] 
%always() argument is a string

2 months agoIncrease unit_test_module max_request_time to 60s
Arran Cudbard-Bell [Tue, 24 Feb 2026 05:19:50 +0000 (22:19 -0700)] 
Increase unit_test_module max_request_time to 60s

The default 30s max_request_time was causing the LDAP auth_ldapi
test to be cancelled under sanitizers.  The SCRAM-SHA-512 SASL bind
plus user search takes ~34s with ASAN overhead, exceeding the 30s
limit and triggering FR_SIGNAL_CANCEL on the request.

2 months agoIncrease jlibtool test timeout to 600s under sanitizers ci-debug
Arran Cudbard-Bell [Tue, 24 Feb 2026 04:10:09 +0000 (21:10 -0700)] 
Increase jlibtool test timeout to 600s under sanitizers

The O2-g3 sanitizer build was hitting the 300s jlibtool timeout
on unit_test_module tests (e.g. modules/files/vendor).  Double
the timeout when sanitizers are enabled to account for ASAN overhead.

2 months agoIncrease eapol_test timeout to 30s under sanitizers
Arran Cudbard-Bell [Tue, 24 Feb 2026 03:58:21 +0000 (20:58 -0700)] 
Increase eapol_test timeout to 30s under sanitizers

The 10 second eapol_test timeout is too tight when running under
address sanitizer with detect_stack_use_after_return=1 and
fast_unwind_on_malloc=0.  Multi-round-trip EAP-TLS handshakes
with certificate verification can exceed 10s under this load,
causing the most frequent CI-Sanitizers failure
(ttls-client-eap-tls timeout).

Set EAPOL_TEST_TIMEOUT conditionally: 30s when sanitizers are
enabled, 10s otherwise.

2 months agoAdd Claude Code GitHub Workflow (#5752)
Arran Cudbard-Bell [Mon, 23 Feb 2026 23:11:12 +0000 (16:11 -0700)] 
Add Claude Code GitHub Workflow (#5752)

* "Claude PR Assistant workflow"

* "Claude Code Review workflow"

2 months agoshut up clang scan
Alan T. DeKok [Mon, 23 Feb 2026 17:18:05 +0000 (12:18 -0500)] 
shut up clang scan

which claims some bizarre things if the check for !secret is
hoisted to the top of the do_challenge() function.

2 months agominor bug fixes in radius decoder
Alan T. DeKok [Mon, 23 Feb 2026 17:10:18 +0000 (12:10 -0500)] 
minor bug fixes in radius decoder

2 months agodecode continued attributes into the correct parent
Alan T. DeKok [Mon, 23 Feb 2026 17:07:19 +0000 (12:07 -0500)] 
decode continued attributes into the correct parent

2 months agoprint name2 if we can't find the section
Alan T. DeKok [Mon, 23 Feb 2026 16:04:45 +0000 (11:04 -0500)] 
print name2 if we can't find the section

unused sections are a warning without -C, and an error with -C

Unless the unused section is a case difference from a known one,
in which case it's an error even without -C.

We don't want people to make typos, and have the server silently
ignore critical pieces of the config.

2 months agovarious bug fixes and tweaks to unlang
Alan T. DeKok [Sun, 22 Feb 2026 17:48:33 +0000 (12:48 -0500)] 
various bug fixes and tweaks to unlang

2 months agoadd partial page for "this isn't RADIUS"
Alan T. DeKok [Sun, 22 Feb 2026 17:47:01 +0000 (12:47 -0500)] 
add partial page for "this isn't RADIUS"

and various other minor tweaks

2 months agotweak proxy-state missing -> proxy state without MA
Alan T. DeKok [Sun, 22 Feb 2026 17:01:14 +0000 (12:01 -0500)] 
tweak proxy-state missing -> proxy state without MA

2 months agovarious bug fixes in radmin.c
Alan T. DeKok [Fri, 20 Feb 2026 16:25:43 +0000 (11:25 -0500)] 
various bug fixes in radmin.c

2 months agotypos
Alan T. DeKok [Sat, 21 Feb 2026 00:45:16 +0000 (19:45 -0500)] 
typos

2 months agoPacify Coverity (CID #1681443)
Nick Porter [Mon, 23 Feb 2026 08:33:30 +0000 (08:33 +0000)] 
Pacify Coverity (CID #1681443)

2 months agoPacify Coverity (CID #1681444)
Nick Porter [Mon, 23 Feb 2026 08:27:48 +0000 (08:27 +0000)] 
Pacify Coverity (CID #1681444)

2 months agoreword and touchup
Alan T. DeKok [Sat, 21 Feb 2026 15:23:16 +0000 (10:23 -0500)] 
reword and touchup

2 months agotypo
Alan T. DeKok [Sat, 21 Feb 2026 15:08:04 +0000 (10:08 -0500)] 
typo

2 months agodocs-v4: update troubleshooting with common errors page HIVE 7914
nolade [Thu, 19 Feb 2026 21:27:12 +0000 (16:27 -0500)] 
docs-v4: update troubleshooting with common errors page HIVE 7914

2 months agopull changes back into raddb, and regenerate from "make doc.raddb"
Alan T. DeKok [Sat, 21 Feb 2026 14:47:22 +0000 (09:47 -0500)] 
pull changes back into raddb, and regenerate from "make doc.raddb"

2 months agodocs-v4: correct typos from Alan's first report Hive 8329
nolade [Fri, 20 Feb 2026 20:02:10 +0000 (15:02 -0500)] 
docs-v4: correct typos from Alan's first report Hive 8329

2 months agodocs-v4: convert american spelling to UK spelling Hive 8329
nolade [Fri, 20 Feb 2026 19:34:11 +0000 (14:34 -0500)] 
docs-v4: convert american spelling to UK spelling Hive 8329

2 months agodocs-v4: fix spelling errors Hive 8329 (excluded raddb)
nolade [Fri, 20 Feb 2026 18:27:12 +0000 (13:27 -0500)] 
docs-v4: fix spelling errors Hive 8329 (excluded raddb)

2 months agocheck that the packet is OK
Alan T. DeKok [Sat, 21 Feb 2026 14:25:45 +0000 (09:25 -0500)] 
check that the packet is OK

2 months agoadd Net.* attributes
Alan T. DeKok [Sat, 21 Feb 2026 14:22:19 +0000 (09:22 -0500)] 
add Net.* attributes

2 months agotweak code to reduce indentation and redundancy
Alan T. DeKok [Sat, 21 Feb 2026 12:54:04 +0000 (07:54 -0500)] 
tweak code to reduce indentation and redundancy

2 months agomove checks to quiet analyzer
Alan T. DeKok [Sat, 21 Feb 2026 01:40:29 +0000 (20:40 -0500)] 
move checks to quiet analyzer

2 months agomessage type can have only one octet according to RFC2132
Alan T. DeKok [Sat, 21 Feb 2026 01:37:04 +0000 (20:37 -0500)] 
message type can have only one octet according to RFC2132

2 months agovarious bug fixes in proto_tacacs
Alan T. DeKok [Sat, 21 Feb 2026 01:25:17 +0000 (20:25 -0500)] 
various bug fixes in proto_tacacs

2 months agovarious bug fixes in proto_detail
Alan T. DeKok [Sat, 21 Feb 2026 00:55:34 +0000 (19:55 -0500)] 
various bug fixes in proto_detail

2 months agovarious bug fixes in proto_bfd
Alan T. DeKok [Sat, 21 Feb 2026 00:42:53 +0000 (19:42 -0500)] 
various bug fixes in proto_bfd

2 months agomake input const
Alan T. DeKok [Fri, 20 Feb 2026 23:25:06 +0000 (18:25 -0500)] 
make input const

2 months agoupdate notes for static analyzer
Alan T. DeKok [Fri, 20 Feb 2026 19:02:37 +0000 (14:02 -0500)] 
update notes for static analyzer

2 months agouse MEM() for allocation failure
Alan T. DeKok [Fri, 20 Feb 2026 18:55:16 +0000 (13:55 -0500)] 
use MEM() for allocation failure

2 months agovarious bug fixes for cron
Alan T. DeKok [Fri, 20 Feb 2026 18:54:35 +0000 (13:54 -0500)] 
various bug fixes for cron

2 months agovarious bug fixes for DNS listener
Alan T. DeKok [Fri, 20 Feb 2026 18:41:39 +0000 (13:41 -0500)] 
various bug fixes for DNS listener

2 months agoDNS opcodes 7..15 are unassigned
Alan T. DeKok [Fri, 20 Feb 2026 18:39:11 +0000 (13:39 -0500)] 
DNS opcodes 7..15 are unassigned

2 months agovarious bug fixes in proto_radius
Alan T. DeKok [Fri, 20 Feb 2026 14:33:49 +0000 (09:33 -0500)] 
various bug fixes in proto_radius

2 months agoports are short, so use ntohs
Alan T. DeKok [Fri, 20 Feb 2026 14:26:29 +0000 (09:26 -0500)] 
ports are short, so use ntohs

2 months agovarious minor tweaks to radiusd.c
Alan T. DeKok [Fri, 20 Feb 2026 12:22:04 +0000 (07:22 -0500)] 
various minor tweaks to radiusd.c

2 months agovarious bug fixes in rlm_digest
Alan T. DeKok [Thu, 19 Feb 2026 20:23:28 +0000 (15:23 -0500)] 
various bug fixes in rlm_digest

check lengths of the various attributes, in case the local admin
wants to manually create attributes which can't go into a
RADIUS packet.

2 months agoFix memory leak and deadlock on error path in cache module
Arran Cudbard-Bell [Sat, 21 Feb 2026 07:04:26 +0000 (00:04 -0700)] 
Fix memory leak and deadlock on error path in cache module

2 months agoSync hashing functions
Arran Cudbard-Bell [Sat, 21 Feb 2026 07:03:43 +0000 (00:03 -0700)] 
Sync hashing functions

2 months agoExtend timeout for radiusd
Arran Cudbard-Bell [Sat, 21 Feb 2026 05:08:49 +0000 (22:08 -0700)] 
Extend timeout for radiusd

2 months agoCorrectly terminate the buffer we use to parse generalized time in DER, and support...
Arran Cudbard-Bell [Sat, 21 Feb 2026 04:52:48 +0000 (21:52 -0700)] 
Correctly terminate the buffer we use to parse generalized time in DER, and support precision up to 9 digits

2 months agoRespect always_string
Arran Cudbard-Bell [Sat, 21 Feb 2026 02:53:53 +0000 (19:53 -0700)] 
Respect always_string

2 months agojson: Refactor base16/base64 conversions
Arran Cudbard-Bell [Sat, 21 Feb 2026 02:32:57 +0000 (19:32 -0700)] 
json: Refactor base16/base64 conversions

2 months agojson: Split conversion functions into pair/box conversion
Arran Cudbard-Bell [Sat, 21 Feb 2026 02:06:46 +0000 (19:06 -0700)] 
json: Split conversion functions into pair/box conversion

2 months agojson: Remove is_enum from json_afrom_value_box. Sanitise code... generally. Mostly...
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:58:26 +0000 (18:58 -0700)] 
json: Remove is_enum from json_afrom_value_box.  Sanitise code... generally.  Mostly merge b16 and b64 cases.

2 months agojson: Fix multiple other memory leaks and minor issues
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:50:49 +0000 (18:50 -0700)] 
json: Fix multiple other memory leaks and minor issues

2 months agojson: Use the correct format specifier for 64bit integers in json.c
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:29:14 +0000 (18:29 -0700)] 
json: Use the correct format specifier for 64bit integers in json.c

2 months agojson: Correctly escape slashes and double quotes in JSON data
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:28:55 +0000 (18:28 -0700)] 
json: Correctly escape slashes and double quotes in JSON data

2 months agojson: Emit an error on structural types
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:27:17 +0000 (18:27 -0700)] 
json: Emit an error on structural types

2 months agojson: Use correct field access
Arran Cudbard-Bell [Sat, 21 Feb 2026 01:27:05 +0000 (18:27 -0700)] 
json: Use correct field access