]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
nolade [Thu, 4 Jun 2026 14:54:09 +0000 (10:54 -0400)]
docs-v4: update Howto EAP for v4.
* reorganised pages into subsections
* added v4 syntax
* added inline refs
* removed v3 chunks of info and no longer supported configs/standard
Alan T. DeKok [Thu, 4 Jun 2026 21:09:12 +0000 (17:09 -0400)]
more updates to the "word wrap" script for asciidoc files
and add target rules "doc.wrap" which will forcibly word-wrap and
re-format the asciidoc files. The target ignores the files which
are auto-generated from raddb/
nolade [Wed, 3 Jun 2026 19:36:30 +0000 (15:36 -0400)]
docs-v4: Updated for v4, Added local dictionary via `DEFINE`, custom dictionary implementation and test of vendor attributes, creating a local dictionary def witin a virtual server.
nolade [Mon, 20 Apr 2026 18:14:50 +0000 (14:14 -0400)]
docs-v4: added a page with current development branches in Developemnt>>Contributing section
Alan T. DeKok [Thu, 4 Jun 2026 15:35:31 +0000 (11:35 -0400)]
update last commit, more typos
Alan T. DeKok [Thu, 4 Jun 2026 15:34:24 +0000 (11:34 -0400)]
add rules and tool to word-wrap asciidoc files
because extremely long lines are good only for "git", but only if
you don't use "--color-words".
Extremely long lines are a horrible pain for mere mortals to read.
Alan T. DeKok [Thu, 4 Jun 2026 13:27:33 +0000 (09:27 -0400)]
call backtrace_record()
Alan T. DeKok [Thu, 4 Jun 2026 13:27:21 +0000 (09:27 -0400)]
add license and copyright
Alan T. DeKok [Thu, 4 Jun 2026 12:23:04 +0000 (08:23 -0400)]
correct order checks
Alan T. DeKok [Thu, 4 Jun 2026 12:21:20 +0000 (08:21 -0400)]
fix typo
Alan T. DeKok [Thu, 4 Jun 2026 12:20:00 +0000 (08:20 -0400)]
fix typo
Alan T. DeKok [Thu, 4 Jun 2026 12:19:12 +0000 (08:19 -0400)]
fix typo
Alan T. DeKok [Thu, 4 Jun 2026 12:17:28 +0000 (08:17 -0400)]
return correct length
Alan T. DeKok [Thu, 4 Jun 2026 12:12:44 +0000 (08:12 -0400)]
various bug fixes
Alan T. DeKok [Wed, 3 Jun 2026 21:39:25 +0000 (17:39 -0400)]
fix API usage and data type issues
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 20:24:33 +0000 (16:24 -0400)]
rlm_sigtran/event: sigtran_event_submit write loop skips a byte on partial write
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 18:56:32 +0000 (14:56 -0400)]
rlm_sigtran/ipaccess: heap overflow in ipaccess_read_msg — attacker-controlled length used in recv() without bounds check
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 18:17:56 +0000 (14:17 -0400)]
rlm_sigtran/link_udp: dead code
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 17:45:03 +0000 (13:45 -0400)]
rlm_sigtran/msc_conn: abort() triggered by remote NAT_MUX message; NULL deref in id-response path
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 16:16:38 +0000 (12:16 -0400)]
rlm_sigtran/mtp_layer3: NULL pointer dereference in mtp_link_sccp_data when slc[SLS] is NULL
Alan T. DeKok [Tue, 2 Jun 2026 13:54:08 +0000 (09:54 -0400)]
implement "cipher_suites"
manual port of commit
fd11a85c8031
Alan T. DeKok [Mon, 1 Jun 2026 20:07:33 +0000 (16:07 -0400)]
disable DER until it passes
so it's not part of the normal CI runs, but is part of the OSS
fuzzer
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 14:47:18 +0000 (10:47 -0400)]
rlm_sql_cassandra: double-free of CassResult in sql_finish_query
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 14:09:41 +0000 (10:09 -0400)]
rlm_sql_cassandra: memory leak in sql_request_cancel — cassandra_query_t not freed on cancellation
Alexander Bainbridge-Sedivy [Fri, 29 May 2026 19:22:53 +0000 (15:22 -0400)]
protocols/dhcpv4/pcap: stack buffer overflow in fr_dhcpv4_pcap_send — no bounds check on packet->data_len before memcpy
Alexander Bainbridge-Sedivy [Fri, 29 May 2026 14:07:57 +0000 (10:07 -0400)]
lib/ldap/directory: fix strncmp prefix-match false positives in server capability detection
Alexander Bainbridge-Sedivy [Wed, 27 May 2026 20:53:13 +0000 (16:53 -0400)]
lib/ldap/edir: handle ldap_parse_extended_result errors; fix missing space in version error string
Alexander Bainbridge-Sedivy [Wed, 27 May 2026 19:02:05 +0000 (15:02 -0400)]
lib/redis/pipeline: fix missing return after SIGNAL cancel
Alan T. DeKok [Sun, 31 May 2026 16:10:53 +0000 (12:10 -0400)]
update after new fuzzer_der
David Korczynski [Wed, 27 May 2026 22:12:59 +0000 (15:12 -0700)]
fuzzer: add der targeted fuzzer
Signed-off-by: David Korczynski <david@adalogics.com>
github-actions[bot] [Sat, 30 May 2026 05:26:49 +0000 (05:26 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar
github-actions[bot] [Sat, 30 May 2026 05:26:13 +0000 (05:26 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/cbor.tar
github-actions[bot] [Sat, 30 May 2026 05:26:10 +0000 (05:26 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar
github-actions[bot] [Sat, 30 May 2026 05:26:07 +0000 (05:26 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar
github-actions[bot] [Sat, 30 May 2026 05:26:04 +0000 (05:26 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar
github-actions[bot] [Sat, 30 May 2026 05:26:01 +0000 (05:26 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar
github-actions[bot] [Sat, 30 May 2026 05:25:58 +0000 (05:25 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar
github-actions[bot] [Sat, 30 May 2026 05:25:52 +0000 (05:25 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar
github-actions[bot] [Sat, 30 May 2026 05:25:50 +0000 (05:25 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar
github-actions[bot] [Sat, 30 May 2026 05:25:22 +0000 (05:25 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/der.tar
Nick Porter [Fri, 29 May 2026 10:53:51 +0000 (11:53 +0100)]
keys should be populated before it is returned
If pair->vp doesn't exist, an empty mruby array is returned.
Nick Porter [Fri, 29 May 2026 08:54:02 +0000 (09:54 +0100)]
rlm_sqlippool: If the "find" query fails to expand, that's a failure
Alexander Bainbridge-Sedivy [Wed, 27 May 2026 15:53:44 +0000 (11:53 -0400)]
process/bfd: replace assert with runtime validation in resume_recv_bfd
Alexander Bainbridge-Sedivy [Wed, 27 May 2026 13:39:32 +0000 (09:39 -0400)]
log.c: fix signed overflow when negating SSIZE_MIN in log_request_marker
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 20:52:52 +0000 (16:52 -0400)]
milenage: fix CK/IK swap, and self-comparison test
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 19:13:20 +0000 (15:13 -0400)]
lib/util/fring: guard against size==0 and size>0x80000000 overflow
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 16:50:32 +0000 (12:50 -0400)]
backtrace.c: fix missing '#' frame prefix and NULL function pointer in dprintf
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 16:11:11 +0000 (12:11 -0400)]
fix(dl.c): fix uninitialized buffer
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 15:21:54 +0000 (11:21 -0400)]
unlang/xlat_builtin: fix NULL dereference in xlat_func_str_utf8()
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 14:44:34 +0000 (10:44 -0400)]
tls/session.c: fix off-by-one in password length check (> vs >=)
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 14:15:31 +0000 (10:15 -0400)]
rlm_lua: fix DBL_MIN misuse
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 13:50:45 +0000 (09:50 -0400)]
rlm_mruby: fix NULL dereference on pair->vp and wrong variable in dict fallback
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 13:30:43 +0000 (09:30 -0400)]
module.c: unchecked dl_loader_init
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 20:58:57 +0000 (16:58 -0400)]
lst.c: partition() ignores stack_push() failure, causing infinite recursion on OOM
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 19:48:22 +0000 (15:48 -0400)]
strerror.c: NULL error pointer passed to %s in fr_perror_to_str else-branch
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 19:29:58 +0000 (15:29 -0400)]
active_directory.c: inverted assert order
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 18:51:58 +0000 (14:51 -0400)]
rlm_krb5: krb5_unparse_name return ignored
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 18:02:12 +0000 (14:02 -0400)]
rlm_logtee: log.dst not restored on expand failure
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 17:36:44 +0000 (13:36 -0400)]
rlm_lua: NULL deref in fr_lua_unmarshall
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 14:44:00 +0000 (10:44 -0400)]
rlm_mruby: NULL deref pair->vp; size_t for slen_t
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 20:53:28 +0000 (16:53 -0400)]
rlm_python: fix Python object reference leaks in python_parse_config
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 20:43:39 +0000 (16:43 -0400)]
rlm_python: fix p_state NULL dereference and leak in python_module_init error paths
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 20:12:34 +0000 (16:12 -0400)]
rlm_sigtran: fix deadlock when event thread fails to initialize
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 18:36:09 +0000 (14:36 -0400)]
rlm_yubikey: fix resource leaks in ykclient init error paths and mod_load
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 17:46:16 +0000 (13:46 -0400)]
protocols/internal/encode: fix dead error-check due to ssize_t->size_t mismatch in internal_encode()
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 17:23:00 +0000 (13:23 -0400)]
protocols/vmps: fix off-by-six bounds check in fr_vmps_ok
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 16:05:54 +0000 (12:05 -0400)]
protocols/vmps: fix loop increment and length-6 underflow in fr_vmps_print_hex
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 14:07:32 +0000 (10:07 -0400)]
curl/io: _fr_curl_io_demux logs queue depth instead of message type for unknown curl messages
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 13:56:38 +0000 (09:56 -0400)]
eap_aka_sim/fips186prf: stale function name in TESTING_FIPS186_PRF test code
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 13:51:32 +0000 (09:51 -0400)]
protocols/ethernet: fr_ethernet_decode returns success on 3-level VLAN nesting
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 21:01:27 +0000 (17:01 -0400)]
eap_aka_sim/module: inverted debug guard silences EAP-SIM Start / AKA Identity log messages
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 20:55:26 +0000 (16:55 -0400)]
io/message: fr_message_localize rejects minimum-valid message_size (off-by-one in size check)
Alan T. DeKok [Thu, 28 May 2026 13:44:26 +0000 (09:44 -0400)]
use correct order for talloc_link_ctx() to avoid leaks
Alan T. DeKok [Thu, 28 May 2026 13:42:17 +0000 (09:42 -0400)]
hoist the destructor, and make the destructor safer
it's good practice to have a destructor to always clean things up
Alan T. DeKok [Thu, 28 May 2026 11:38:24 +0000 (07:38 -0400)]
return -1 on error
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 20:02:25 +0000 (16:02 -0400)]
rlm_sigtran: duplicate attr_eap_aka_sim_rand declaration in attrs.h and duplicate include in client.c
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 19:24:40 +0000 (15:24 -0400)]
rlm_sigtran/isup_filter: abort() in send_reset() crashes process on ISUP GRS/RSC messages
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 18:58:17 +0000 (14:58 -0400)]
rlm_sigtran/mtp_layer3: mtp_link_verified logs sccp_opc instead of isup_opc in ISUP TFA error message
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 18:52:34 +0000 (14:52 -0400)]
rlm_sigtran/mtp_link: wrong variable logged in mtp_link_slta() l3_len size check
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 18:41:49 +0000 (14:41 -0400)]
rlm_sigtran/pcap: typo &now instead of &tv in mtp_pcap_write_msu causes uninitialized timestamp
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 16:58:33 +0000 (12:58 -0400)]
rlm_sql_db2: three bugs in query execution — wrong diagnostic handle, inverted unique-constraint check, off-by-one column index
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 16:31:02 +0000 (12:31 -0400)]
rlm_sqlcounter: race condition on reset_time/last_reset in multithreaded server
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 15:52:44 +0000 (11:52 -0400)]
Add in-code Coverity suppressions for 5 dashboard-only dismissals
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 15:50:26 +0000 (11:50 -0400)]
stats.c: fix fr_stats_iter_next off-by-one skips first entry and asserts on last
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 15:06:42 +0000 (11:06 -0400)]
rlm_sql_oracle: Fix missed reconnect detection in polling read loop
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 14:53:18 +0000 (10:53 -0400)]
rlm_sql_freetds: established flag never set to true — server messages corrupt error state
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 14:40:02 +0000 (10:40 -0400)]
rlm_sigtran/m3ua: fix OPC list count and length in m3ua_send_reg_req
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 14:21:59 +0000 (10:21 -0400)]
rlm_sigtran/bsc_sccp: remove duplicate include and fix sls_for_src_ref return type
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 14:13:19 +0000 (10:13 -0400)]
rlm_sigtran: fix wrong NAI odd/even bit mask and allocation off-by-one in sigtran_sccp_global_title
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 13:35:49 +0000 (09:35 -0400)]
rlm_sigtran: fix tautological condition and inverted range check in SCCP global title validation
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 13:18:12 +0000 (09:18 -0400)]
rlm_sigtran: fix inverted debug guard — RDEBUG3 branch in client.c is dead code
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 20:41:37 +0000 (16:41 -0400)]
rlm_rest: propagate call_env_parse() error in rest_sect_parse()
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 20:24:39 +0000 (16:24 -0400)]
rlm_redis_ippool_tool: fix signed left shift UB in uint32_gen_mask
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 20:16:48 +0000 (16:16 -0400)]
rlm_redis_ippool: set done_hash=true after computing Lua script digests
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 20:08:00 +0000 (16:08 -0400)]
rlm_redis: fix wrong status_out in redis_command READWRITE failure path
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 19:30:42 +0000 (15:30 -0400)]
rlm_perl: fix NULL deref in XS_pairlist_FIRSTKEY when vp_group is empty
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 19:29:49 +0000 (15:29 -0400)]
rlm_ocsp/ocsp.c: #undef HAVE_OPENSSL_OCSP_H disables entire OCSP implementation
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 18:53:29 +0000 (14:53 -0400)]
rlm_json: json_tokener_new unchecked NULL deref; to_parse leak on success path
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 18:48:30 +0000 (14:48 -0400)]
rlm_ftp.c: OOB NUL write when total is exact multiple of FTP_BODY_ALLOC_CHUNK
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 18:26:29 +0000 (14:26 -0400)]
rlm_always/rlm_attr_filter: dead NULL check + mutable leak