]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
30 hours agodocs-v4: update Howto EAP for v4. developer/alandekok master
nolade [Thu, 4 Jun 2026 14:54:09 +0000 (10:54 -0400)] 
docs-v4: update Howto EAP for v4.

* reorganised pages into subsections
* added v4 syntax
* added inline refs
* removed v3 chunks of info and no longer supported configs/standard

30 hours agomore updates to the "word wrap" script for asciidoc files
Alan T. DeKok [Thu, 4 Jun 2026 21:09:12 +0000 (17:09 -0400)] 
more updates to the "word wrap" script for asciidoc files

and add target rules "doc.wrap" which will forcibly word-wrap and
re-format the asciidoc files.  The target ignores the files which
are auto-generated from raddb/

30 hours agodocs-v4: Updated for v4, Added local dictionary via `DEFINE`, custom dictionary imple...
nolade [Wed, 3 Jun 2026 19:36:30 +0000 (15:36 -0400)] 
docs-v4: Updated for v4, Added local dictionary via `DEFINE`, custom dictionary implementation and test of vendor attributes, creating a local dictionary def witin a virtual server.

2 days agodocs-v4: added a page with current development branches in Developemnt>>Contributing...
nolade [Mon, 20 Apr 2026 18:14:50 +0000 (14:14 -0400)] 
docs-v4: added a page with current development branches in Developemnt>>Contributing section

2 days agoupdate last commit, more typos
Alan T. DeKok [Thu, 4 Jun 2026 15:35:31 +0000 (11:35 -0400)] 
update last commit, more typos

2 days agoadd rules and tool to word-wrap asciidoc files
Alan T. DeKok [Thu, 4 Jun 2026 15:34:24 +0000 (11:34 -0400)] 
add rules and tool to word-wrap asciidoc files

because extremely long lines are good only for "git", but only if
you don't use "--color-words".

Extremely long lines are a horrible pain for mere mortals to read.

2 days agocall backtrace_record()
Alan T. DeKok [Thu, 4 Jun 2026 13:27:33 +0000 (09:27 -0400)] 
call backtrace_record()

2 days agoadd license and copyright
Alan T. DeKok [Thu, 4 Jun 2026 13:27:21 +0000 (09:27 -0400)] 
add license and copyright

2 days agocorrect order checks
Alan T. DeKok [Thu, 4 Jun 2026 12:23:04 +0000 (08:23 -0400)] 
correct order checks

2 days agofix typo
Alan T. DeKok [Thu, 4 Jun 2026 12:21:20 +0000 (08:21 -0400)] 
fix typo

2 days agofix typo
Alan T. DeKok [Thu, 4 Jun 2026 12:20:00 +0000 (08:20 -0400)] 
fix typo

2 days agofix typo
Alan T. DeKok [Thu, 4 Jun 2026 12:19:12 +0000 (08:19 -0400)] 
fix typo

2 days agoreturn correct length
Alan T. DeKok [Thu, 4 Jun 2026 12:17:28 +0000 (08:17 -0400)] 
return correct length

2 days agovarious bug fixes
Alan T. DeKok [Thu, 4 Jun 2026 12:12:44 +0000 (08:12 -0400)] 
various bug fixes

2 days agofix API usage and data type issues
Alan T. DeKok [Wed, 3 Jun 2026 21:39:25 +0000 (17:39 -0400)] 
fix API usage and data type issues

4 days agorlm_sigtran/event: sigtran_event_submit write loop skips a byte on partial write
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 20:24:33 +0000 (16:24 -0400)] 
rlm_sigtran/event: sigtran_event_submit write loop skips a byte on partial write

4 days agorlm_sigtran/ipaccess: heap overflow in ipaccess_read_msg — attacker-controlled length...
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 18:56:32 +0000 (14:56 -0400)] 
rlm_sigtran/ipaccess: heap overflow in ipaccess_read_msg — attacker-controlled length used in recv() without bounds check

4 days agorlm_sigtran/link_udp: dead code
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 18:17:56 +0000 (14:17 -0400)] 
rlm_sigtran/link_udp: dead code

4 days agorlm_sigtran/msc_conn: abort() triggered by remote NAT_MUX message; NULL deref in...
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 17:45:03 +0000 (13:45 -0400)] 
rlm_sigtran/msc_conn: abort() triggered by remote NAT_MUX message; NULL deref in id-response path

4 days agorlm_sigtran/mtp_layer3: NULL pointer dereference in mtp_link_sccp_data when slc[SLS...
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 16:16:38 +0000 (12:16 -0400)] 
rlm_sigtran/mtp_layer3: NULL pointer dereference in mtp_link_sccp_data when slc[SLS] is NULL

4 days agoimplement "cipher_suites"
Alan T. DeKok [Tue, 2 Jun 2026 13:54:08 +0000 (09:54 -0400)] 
implement "cipher_suites"

manual port of commit fd11a85c8031

5 days agodisable DER until it passes
Alan T. DeKok [Mon, 1 Jun 2026 20:07:33 +0000 (16:07 -0400)] 
disable DER until it passes

so it's not part of the normal CI runs, but is part of the OSS
fuzzer

5 days agorlm_sql_cassandra: double-free of CassResult in sql_finish_query
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 14:47:18 +0000 (10:47 -0400)] 
rlm_sql_cassandra: double-free of CassResult in sql_finish_query

5 days agorlm_sql_cassandra: memory leak in sql_request_cancel — cassandra_query_t not freed...
Alexander Bainbridge-Sedivy [Mon, 1 Jun 2026 14:09:41 +0000 (10:09 -0400)] 
rlm_sql_cassandra: memory leak in sql_request_cancel — cassandra_query_t not freed on cancellation

5 days agoprotocols/dhcpv4/pcap: stack buffer overflow in fr_dhcpv4_pcap_send — no bounds check...
Alexander Bainbridge-Sedivy [Fri, 29 May 2026 19:22:53 +0000 (15:22 -0400)] 
protocols/dhcpv4/pcap: stack buffer overflow in fr_dhcpv4_pcap_send — no bounds check on packet->data_len before memcpy

5 days agolib/ldap/directory: fix strncmp prefix-match false positives in server capability...
Alexander Bainbridge-Sedivy [Fri, 29 May 2026 14:07:57 +0000 (10:07 -0400)] 
lib/ldap/directory: fix strncmp prefix-match false positives in server capability detection

5 days agolib/ldap/edir: handle ldap_parse_extended_result errors; fix missing space in version...
Alexander Bainbridge-Sedivy [Wed, 27 May 2026 20:53:13 +0000 (16:53 -0400)] 
lib/ldap/edir: handle ldap_parse_extended_result errors; fix missing space in version error string

5 days agolib/redis/pipeline: fix missing return after SIGNAL cancel
Alexander Bainbridge-Sedivy [Wed, 27 May 2026 19:02:05 +0000 (15:02 -0400)] 
lib/redis/pipeline: fix missing return after SIGNAL cancel

6 days agoupdate after new fuzzer_der
Alan T. DeKok [Sun, 31 May 2026 16:10:53 +0000 (12:10 -0400)] 
update after new fuzzer_der

6 days agofuzzer: add der targeted fuzzer
David Korczynski [Wed, 27 May 2026 22:12:59 +0000 (15:12 -0700)] 
fuzzer: add der targeted fuzzer

Signed-off-by: David Korczynski <david@adalogics.com>
7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar
github-actions[bot] [Sat, 30 May 2026 05:26:49 +0000 (05:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/cbor.tar
github-actions[bot] [Sat, 30 May 2026 05:26:13 +0000 (05:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/cbor.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar
github-actions[bot] [Sat, 30 May 2026 05:26:10 +0000 (05:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar
github-actions[bot] [Sat, 30 May 2026 05:26:07 +0000 (05:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar
github-actions[bot] [Sat, 30 May 2026 05:26:04 +0000 (05:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar
github-actions[bot] [Sat, 30 May 2026 05:26:01 +0000 (05:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar
github-actions[bot] [Sat, 30 May 2026 05:25:58 +0000 (05:25 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar
github-actions[bot] [Sat, 30 May 2026 05:25:52 +0000 (05:25 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar
github-actions[bot] [Sat, 30 May 2026 05:25:50 +0000 (05:25 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar

7 days agoScheduled fuzzing: Update src/tests/fuzzer-corpus/der.tar
github-actions[bot] [Sat, 30 May 2026 05:25:22 +0000 (05:25 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/der.tar

8 days agokeys should be populated before it is returned developer/ndptech
Nick Porter [Fri, 29 May 2026 10:53:51 +0000 (11:53 +0100)] 
keys should be populated before it is returned

If pair->vp doesn't exist, an empty mruby array is returned.

8 days agorlm_sqlippool: If the "find" query fails to expand, that's a failure
Nick Porter [Fri, 29 May 2026 08:54:02 +0000 (09:54 +0100)] 
rlm_sqlippool: If the "find" query fails to expand, that's a failure

9 days agoprocess/bfd: replace assert with runtime validation in resume_recv_bfd
Alexander Bainbridge-Sedivy [Wed, 27 May 2026 15:53:44 +0000 (11:53 -0400)] 
process/bfd: replace assert with runtime validation in resume_recv_bfd

9 days agolog.c: fix signed overflow when negating SSIZE_MIN in log_request_marker
Alexander Bainbridge-Sedivy [Wed, 27 May 2026 13:39:32 +0000 (09:39 -0400)] 
log.c: fix signed overflow when negating SSIZE_MIN in log_request_marker

9 days agomilenage: fix CK/IK swap, and self-comparison test
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 20:52:52 +0000 (16:52 -0400)] 
milenage: fix CK/IK swap, and self-comparison test

9 days agolib/util/fring: guard against size==0 and size>0x80000000 overflow
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 19:13:20 +0000 (15:13 -0400)] 
lib/util/fring: guard against size==0 and size>0x80000000 overflow

9 days agobacktrace.c: fix missing '#' frame prefix and NULL function pointer in dprintf
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 16:50:32 +0000 (12:50 -0400)] 
backtrace.c: fix missing '#' frame prefix and NULL function pointer in dprintf

9 days agofix(dl.c): fix uninitialized buffer
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 16:11:11 +0000 (12:11 -0400)] 
fix(dl.c): fix uninitialized buffer

9 days agounlang/xlat_builtin: fix NULL dereference in xlat_func_str_utf8()
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 15:21:54 +0000 (11:21 -0400)] 
unlang/xlat_builtin: fix NULL dereference in xlat_func_str_utf8()

9 days agotls/session.c: fix off-by-one in password length check (> vs >=)
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 14:44:34 +0000 (10:44 -0400)] 
tls/session.c: fix off-by-one in password length check (> vs >=)

9 days agorlm_lua: fix DBL_MIN misuse
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 14:15:31 +0000 (10:15 -0400)] 
rlm_lua: fix DBL_MIN misuse

9 days agorlm_mruby: fix NULL dereference on pair->vp and wrong variable in dict fallback
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 13:50:45 +0000 (09:50 -0400)] 
rlm_mruby: fix NULL dereference on pair->vp and wrong variable in dict fallback

9 days agomodule.c: unchecked dl_loader_init
Alexander Bainbridge-Sedivy [Mon, 25 May 2026 13:30:43 +0000 (09:30 -0400)] 
module.c: unchecked dl_loader_init

9 days agolst.c: partition() ignores stack_push() failure, causing infinite recursion on OOM
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 20:58:57 +0000 (16:58 -0400)] 
lst.c: partition() ignores stack_push() failure, causing infinite recursion on OOM

9 days agostrerror.c: NULL error pointer passed to %s in fr_perror_to_str else-branch
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 19:48:22 +0000 (15:48 -0400)] 
strerror.c: NULL error pointer passed to %s in fr_perror_to_str else-branch

9 days agoactive_directory.c: inverted assert order
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 19:29:58 +0000 (15:29 -0400)] 
active_directory.c: inverted assert order

9 days agorlm_krb5: krb5_unparse_name return ignored
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 18:51:58 +0000 (14:51 -0400)] 
rlm_krb5: krb5_unparse_name return ignored

9 days agorlm_logtee: log.dst not restored on expand failure
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 18:02:12 +0000 (14:02 -0400)] 
rlm_logtee: log.dst not restored on expand failure

9 days agorlm_lua: NULL deref in fr_lua_unmarshall
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 17:36:44 +0000 (13:36 -0400)] 
rlm_lua: NULL deref in fr_lua_unmarshall

9 days agorlm_mruby: NULL deref pair->vp; size_t for slen_t
Alexander Bainbridge-Sedivy [Wed, 20 May 2026 14:44:00 +0000 (10:44 -0400)] 
rlm_mruby: NULL deref pair->vp; size_t for slen_t

9 days agorlm_python: fix Python object reference leaks in python_parse_config
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 20:53:28 +0000 (16:53 -0400)] 
rlm_python: fix Python object reference leaks in python_parse_config

9 days agorlm_python: fix p_state NULL dereference and leak in python_module_init error paths
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 20:43:39 +0000 (16:43 -0400)] 
rlm_python: fix p_state NULL dereference and leak in python_module_init error paths

9 days agorlm_sigtran: fix deadlock when event thread fails to initialize
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 20:12:34 +0000 (16:12 -0400)] 
rlm_sigtran: fix deadlock when event thread fails to initialize

9 days agorlm_yubikey: fix resource leaks in ykclient init error paths and mod_load
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 18:36:09 +0000 (14:36 -0400)] 
rlm_yubikey: fix resource leaks in ykclient init error paths and mod_load

9 days agoprotocols/internal/encode: fix dead error-check due to ssize_t->size_t mismatch in...
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 17:46:16 +0000 (13:46 -0400)] 
protocols/internal/encode: fix dead error-check due to ssize_t->size_t mismatch in internal_encode()

9 days agoprotocols/vmps: fix off-by-six bounds check in fr_vmps_ok
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 17:23:00 +0000 (13:23 -0400)] 
protocols/vmps: fix off-by-six bounds check in fr_vmps_ok

9 days agoprotocols/vmps: fix loop increment and length-6 underflow in fr_vmps_print_hex
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 16:05:54 +0000 (12:05 -0400)] 
protocols/vmps: fix loop increment and length-6 underflow in fr_vmps_print_hex

9 days agocurl/io: _fr_curl_io_demux logs queue depth instead of message type for unknown curl...
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 14:07:32 +0000 (10:07 -0400)] 
curl/io: _fr_curl_io_demux logs queue depth instead of message type for unknown curl messages

9 days agoeap_aka_sim/fips186prf: stale function name in TESTING_FIPS186_PRF test code
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 13:56:38 +0000 (09:56 -0400)] 
eap_aka_sim/fips186prf: stale function name in TESTING_FIPS186_PRF test code

9 days agoprotocols/ethernet: fr_ethernet_decode returns success on 3-level VLAN nesting
Alexander Bainbridge-Sedivy [Fri, 15 May 2026 13:51:32 +0000 (09:51 -0400)] 
protocols/ethernet: fr_ethernet_decode returns success on 3-level VLAN nesting

9 days agoeap_aka_sim/module: inverted debug guard silences EAP-SIM Start / AKA Identity log...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 21:01:27 +0000 (17:01 -0400)] 
eap_aka_sim/module: inverted debug guard silences EAP-SIM Start / AKA Identity log messages

9 days agoio/message: fr_message_localize rejects minimum-valid message_size (off-by-one in...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 20:55:26 +0000 (16:55 -0400)] 
io/message: fr_message_localize rejects minimum-valid message_size (off-by-one in size check)

9 days agouse correct order for talloc_link_ctx() to avoid leaks
Alan T. DeKok [Thu, 28 May 2026 13:44:26 +0000 (09:44 -0400)] 
use correct order for talloc_link_ctx() to avoid leaks

9 days agohoist the destructor, and make the destructor safer
Alan T. DeKok [Thu, 28 May 2026 13:42:17 +0000 (09:42 -0400)] 
hoist the destructor, and make the destructor safer

it's good practice to have a destructor to always clean things up

9 days agoreturn -1 on error
Alan T. DeKok [Thu, 28 May 2026 11:38:24 +0000 (07:38 -0400)] 
return -1 on error

10 days agorlm_sigtran: duplicate attr_eap_aka_sim_rand declaration in attrs.h and duplicate...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 20:02:25 +0000 (16:02 -0400)] 
rlm_sigtran: duplicate attr_eap_aka_sim_rand declaration in attrs.h and duplicate include in client.c

10 days agorlm_sigtran/isup_filter: abort() in send_reset() crashes process on ISUP GRS/RSC...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 19:24:40 +0000 (15:24 -0400)] 
rlm_sigtran/isup_filter: abort() in send_reset() crashes process on ISUP GRS/RSC messages

10 days agorlm_sigtran/mtp_layer3: mtp_link_verified logs sccp_opc instead of isup_opc in ISUP...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 18:58:17 +0000 (14:58 -0400)] 
rlm_sigtran/mtp_layer3: mtp_link_verified logs sccp_opc instead of isup_opc in ISUP TFA error message

10 days agorlm_sigtran/mtp_link: wrong variable logged in mtp_link_slta() l3_len size check
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 18:52:34 +0000 (14:52 -0400)] 
rlm_sigtran/mtp_link: wrong variable logged in mtp_link_slta() l3_len size check

10 days agorlm_sigtran/pcap: typo &now instead of &tv in mtp_pcap_write_msu causes uninitialized...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 18:41:49 +0000 (14:41 -0400)] 
rlm_sigtran/pcap: typo &now instead of &tv in mtp_pcap_write_msu causes uninitialized timestamp

10 days agorlm_sql_db2: three bugs in query execution — wrong diagnostic handle, inverted unique...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 16:58:33 +0000 (12:58 -0400)] 
rlm_sql_db2: three bugs in query execution — wrong diagnostic handle, inverted unique-constraint check, off-by-one column index

10 days agorlm_sqlcounter: race condition on reset_time/last_reset in multithreaded server
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 16:31:02 +0000 (12:31 -0400)] 
rlm_sqlcounter: race condition on reset_time/last_reset in multithreaded server

10 days agoAdd in-code Coverity suppressions for 5 dashboard-only dismissals
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 15:52:44 +0000 (11:52 -0400)] 
Add in-code Coverity suppressions for 5 dashboard-only dismissals

10 days agostats.c: fix fr_stats_iter_next off-by-one skips first entry and asserts on last
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 15:50:26 +0000 (11:50 -0400)] 
stats.c: fix fr_stats_iter_next off-by-one skips first entry and asserts on last

10 days agorlm_sql_oracle: Fix missed reconnect detection in polling read loop
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 15:06:42 +0000 (11:06 -0400)] 
rlm_sql_oracle: Fix missed reconnect detection in polling read loop

10 days agorlm_sql_freetds: established flag never set to true — server messages corrupt error...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 14:53:18 +0000 (10:53 -0400)] 
rlm_sql_freetds: established flag never set to true — server messages corrupt error state

10 days agorlm_sigtran/m3ua: fix OPC list count and length in m3ua_send_reg_req
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 14:40:02 +0000 (10:40 -0400)] 
rlm_sigtran/m3ua: fix OPC list count and length in m3ua_send_reg_req

10 days agorlm_sigtran/bsc_sccp: remove duplicate include and fix sls_for_src_ref return type
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 14:21:59 +0000 (10:21 -0400)] 
rlm_sigtran/bsc_sccp: remove duplicate include and fix sls_for_src_ref return type

10 days agorlm_sigtran: fix wrong NAI odd/even bit mask and allocation off-by-one in sigtran_scc...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 14:13:19 +0000 (10:13 -0400)] 
rlm_sigtran: fix wrong NAI odd/even bit mask and allocation off-by-one in sigtran_sccp_global_title

10 days agorlm_sigtran: fix tautological condition and inverted range check in SCCP global title...
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 13:35:49 +0000 (09:35 -0400)] 
rlm_sigtran: fix tautological condition and inverted range check in SCCP global title validation

10 days agorlm_sigtran: fix inverted debug guard — RDEBUG3 branch in client.c is dead code
Alexander Bainbridge-Sedivy [Wed, 13 May 2026 13:18:12 +0000 (09:18 -0400)] 
rlm_sigtran: fix inverted debug guard — RDEBUG3 branch in client.c is dead code

10 days agorlm_rest: propagate call_env_parse() error in rest_sect_parse()
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 20:41:37 +0000 (16:41 -0400)] 
rlm_rest: propagate call_env_parse() error in rest_sect_parse()

10 days agorlm_redis_ippool_tool: fix signed left shift UB in uint32_gen_mask
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 20:24:39 +0000 (16:24 -0400)] 
rlm_redis_ippool_tool: fix signed left shift UB in uint32_gen_mask

10 days agorlm_redis_ippool: set done_hash=true after computing Lua script digests
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 20:16:48 +0000 (16:16 -0400)] 
rlm_redis_ippool: set done_hash=true after computing Lua script digests

10 days agorlm_redis: fix wrong status_out in redis_command READWRITE failure path
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 20:08:00 +0000 (16:08 -0400)] 
rlm_redis: fix wrong status_out in redis_command READWRITE failure path

10 days agorlm_perl: fix NULL deref in XS_pairlist_FIRSTKEY when vp_group is empty
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 19:30:42 +0000 (15:30 -0400)] 
rlm_perl: fix NULL deref in XS_pairlist_FIRSTKEY when vp_group is empty

10 days agorlm_ocsp/ocsp.c: #undef HAVE_OPENSSL_OCSP_H disables entire OCSP implementation
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 19:29:49 +0000 (15:29 -0400)] 
rlm_ocsp/ocsp.c: #undef HAVE_OPENSSL_OCSP_H disables entire OCSP implementation

10 days agorlm_json: json_tokener_new unchecked NULL deref; to_parse leak on success path
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 18:53:29 +0000 (14:53 -0400)] 
rlm_json: json_tokener_new unchecked NULL deref; to_parse leak on success path

10 days agorlm_ftp.c: OOB NUL write when total is exact multiple of FTP_BODY_ALLOC_CHUNK
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 18:48:30 +0000 (14:48 -0400)] 
rlm_ftp.c: OOB NUL write when total is exact multiple of FTP_BODY_ALLOC_CHUNK

10 days agorlm_always/rlm_attr_filter: dead NULL check + mutable leak
Alexander Bainbridge-Sedivy [Mon, 11 May 2026 18:26:29 +0000 (14:26 -0400)] 
rlm_always/rlm_attr_filter: dead NULL check + mutable leak