Commit report for master branch

Fri Jul 19 02:00:02 CEST 2019

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server)

======
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAl0wuEEACgkQfQ55zXdi
 Hs3rtQf9EFqZGXmhQ1g5Sq/aUc4VPvdnz6kc56BGUHJdpTLLYGfUZ4Fpc3m/Gofb
 Oe47MIUx7o1S1ATvQwFViJ7EhZXYSWOS88AAtuEwxYHDeMZnVdwnPPrliNLwkozB
 WcCr4ipEP2FuzuzHWchezh/BJAuzdqruSkzANDbVh5qFtfvhy9gk4dRJnrry114M
 TwoiZqD8Ve1ZRP00CZFy3NDxgdOFGrQedMb91f32Unmd0PXEFtiyOY9KNoUs/Kei
 GA2t46nLYD3hJwBch3cvWF0/ddseh6U2O3OhZT7bS6BMMPNjBjaKRGbkcCN87ILq
 S5DP8QUwm5lkB9xz+GMT6RWMQtxuUg==
 =q0K6
 -----END PGP SIGNATURE-----

return on first found library.  CID #1445213

Alan T. DeKok at 2019-07-18T18:19:30Z
Files modified:
	* src/lib/util/dl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a5a6ad55efb14ca34cde96417063c638c163e172
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAl0wo4YACgkQfQ55zXdi
 Hs2sfwf/XJD2IqydYCgJ0i40AlNI/TkO6JYtl1eXQutyNjtAdDEFlK1PiF+tpgTb
 rWVmMsGsZVWtBwdZ3vTloQ/AJw3zqa+TXNzyEe3unfaawiSOgiRHky8ceQWGKUux
 cDCgQKBjteoombI0HeSR0gnmUqguUSo4RhQgh+wtg6xzec1WHxXsg2OtxTa9JGwQ
 5/w5sTyZt7Ubohn9vVUO3iH3Z+918JioQom2QKp6qE3i67FfgXrGKUWvTQNuX+yQ
 lniu3hliuzbw1P5EFBwtsC7PXqgaUgH9271FksdqboHC+2V3SLqljCALQ0mR8pxC
 MVhYUyo4xg6rMD3/KLblGrelMV/mHA==
 =kTvc
 -----END PGP SIGNATURE-----

just box a normal string, not a tainted one.

the previous commit fixes the printing routine to always escape
strings when they're being printed.

When tokenizing xlat strings, we presume (for now) that the input
is always safe.  i.e. we don't allow %{%{User-Name}}.

If we do need to allow xlat parsing from tainted sources, then the
entire xlat API needs to be updated to mark the input with a
tainted flag

Alan T. DeKok at 2019-07-18T16:51:16Z
Files modified:
	* src/lib/server/xlat_tokenize.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/eeb7edb902b0d402c632e196514370e8a3bca665
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAl0wopgACgkQfQ55zXdi
 Hs0t1AgApjX8wO1LkJuiRTm772MbLP22z4icXH3nh/zErJMJ49rhTGIPbDvktUWV
 MaHE9fkva0z8pp1YqG0BlharpVU/6X8r6wRh4CctM3EXbEiqDqC4vcaJ+4hqOzyT
 7PNAu1ImhjzAeQzyShWDrq/F8Dhve4GdBir/I8CnQwGEUVYhVwBNUUlktkJij+bu
 horIMpTnv3DFpWiE4iq1tiAMGPNLxjF2xFP1Er5HP7CpjBQBdUWabIrDJNeTrToZ
 BhUsnda3jCWs/RaLGKqVpn1M6NIvj0vBsyEQObJ8AmdlNPO/WML8cl6aBCiQTNuu
 GxQe6MV/rLbjuxT7ECaZy+v6FG+k5w==
 =jlnK
 -----END PGP SIGNATURE-----

Revert "Respect the taint value of boxes being fed to logging functions"

This reverts commit 012865619f8001b0903fa129ac44cff22e91fadd.

tainting and escaping are independent things.  A tainted string
should still be escapted for \n and \t.

And for printing, we don't really care much about the taint flag.

* Code printing things to strings still needs \n and \r to be
  escaped.
* Code copying value_boxes should use the value box copy functions,
  which respects the taintng flag

Alan T. DeKok at 2019-07-18T16:42:22Z
Files modified:
	* src/lib/util/print.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/915e18f8c71fa4ec10f78aff3910dacf500c58c1
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAl0wntMACgkQfQ55zXdi
 Hs1riQf+P2eNLPr38U4CB+c5NaWeWuJYK0hGBAfEUqWiO1PQ4fTEuHO2GvLU6oW8
 CYTgznlMqFG1M+SIFD8xj1rFobNJqml/mZRad0zMNQaknxZPVNcfhumRdW/rTMuN
 GsIXfobp+UAiDoc4MYQkel2COUX03hKip/Zu+vQKRTulLTWIh2eIrjxomx9VGexc
 0rxmittyjcto31elww0QXWBDyEtl9Hr5qf2RwLoM1gxYm2rzjecqYDThouM08xUt
 GrM/2BvyCB4gM9GBVpc627pBURQKTEGB55TNrWOJoptgO9u52Efce4kM2kKxNUcD
 zddmCQG1q/rXWGjtvOazYu6sJouKXA==
 =lOF6
 -----END PGP SIGNATURE-----

remove unnecessary "if"

Alan T. DeKok at 2019-07-18T16:31:08Z
Files modified:
	* src/lib/util/value.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/27f90d271f8fd36fa898acc26fc685f396843ec3
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 wsBcBAABCAAQBQJdMIAsCRBK7hj4Ov3rIwAAdHIIAKe/bqiiZHA75IQqWlKaeAE4
 S29aNXMQNIaZThwDfK69lpEKlibJEIvZvuh4nz6Ja77OalwR//e37c+7YEAoH/S6
 hs4Qe4pEo89ZeDCGf1WbHblw3bOMPBCqDK8GVVEMhP++Ids0bKu/K/WTd9rv0Dyp
 lOkHbk3k6PIPKnhf1TdhA0jgxjyt9V78kcOrJUfudl4FFmoaN2XhM1jOAYCswpKE
 17kTyDWQUMQNNIStQWx3ZDvsHor7aFnsUdzvuj7FboyukbL1Wx76Cjh1CUuzEZUh
 NGh8px+6E4HQgXnGIRKVdnrZd48VbPIE9Kn51AoJbZw0LrGMaK3ZbYUCG/QWW6Y=
 =5I8q
 -----END PGP SIGNATURE-----

Merge pull request #2793 from jpereira/v4/fix-rlmcsv2

rlm_csv: Fix 'map csv {}' test

Alan DeKok (via GitHub)@2019-07-18T14:20:28Z
Files modified:
	* src/tests/keywords/map-csv-lhs
	* src/tests/keywords/map-lhs-xlat
	* src/tests/keywords/unit_test_module.conf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d23918eceaffc699c5e236dd1322baedc1bff435
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQJPBAABCAA5FiEEupIhk69JvbrexwYHNQb+wu7Nqm0FAl0vs3obHGpwZXJlaXJh
 QG5ldHdvcmtyYWRpdXMuY29tAAoJEDUG/sLuzaptFdIP/3BDnUIJ/ONkCFZSaeKB
 J6F7lMSeIBcE1kLb1Rk/QjzfyIf6aeuZK+G2nOOGL5qOGOol8JVFDpibYNGU3A+h
 4fTz95h4dRLPNv4j/z/ror12MOI+Wtk6vPBkI5itSs8q31fBLitSCeBwsxj5WCOc
 Le/n3xUOItrlSNZckPQaX0hjNLQ9sSe4EJyTGEymAB2HRnHWVMBmI1YpJs1qS6xH
 e3snJw3MJU9rJVKvhMngfAK6o4Zl01N8HQk5qmcGawLzLjXv8ALIYFdkhFXDs6Hu
 DjqKDx/bNvRMaUZbopfpnzbrffDs9txzscCMhB38j4aY2d0TiMTTVV3Pv9YHBes9
 UzoCBzQkfsJghUHOibV3dPI0i4EjZSU9H5YUdtIe9Ziu3aPfJP1sLz9FQD6KqUhr
 p1VVl/N0ZUosswF7lIsbjLwxCLLVUVG7e9ImN6x1XHD36GNrsfycZIW5lR2PV59F
 Gbq6/aoqVE18Frl9ePD7JWT/9+wCC6qdjq3rFLSi4068DeaXTib3avPGV8F+Fv9S
 T1rdbCZHf/mpzbZEQrMbqzzpEp1g/k2EENp3EPPe9ImLFXK5ajFYwDO1zo8Ps+Kh
 w2yIbiFeAjIBHWE3nA1farrgry7p2lWcjm7lKSqcr4LR7kjuXZstzJYzlnz6TSgS
 tm4MwzoeRPC4o6FaGYZbz/iy
 =y6Sz
 -----END PGP SIGNATURE-----

rlm_csv: Fix 'map csv {}' test

As described in the csv_map_verify() in rlm_csv.c

"Left hand side of map must be an attribute or list"

Jorge Pereira at 2019-07-17T23:46:54Z
Files modified:
	* src/tests/keywords/map-csv-lhs
	* src/tests/keywords/map-lhs-xlat
	* src/tests/keywords/unit_test_module.conf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/e74f2ab10a0c6161cdfa9ad1ffb57dc70f582314
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 wsBcBAABCAAQBQJdMIANCRBK7hj4Ov3rIwAAdHIIAE63AReWdwE1f8P2vfmpC81d
 lYPViR4xOEeSZs8FBqQq0ffdN52r3gAa7XplbyAsFJVY+gwfWY/AEJUBbDoHQcKu
 XICQ8sFMMFWxGpVDVbrCUs9Q/+2yY1tnOmxcMfG/4BMiwka7PyB0aG6rikNZuYl+
 M48SyGqMOJgsnJezf7aMYFsKs6TZtQFJ5udplOENY63LZ2SCCMqSmZwUh18pVYTi
 T9e4OBbteVOcwaPKhoBX0G5Er4S/SS8j+5U44R3ZkN5dYifI++gT5Ce2NsF5uapm
 zLZ7+pZ43D7z5aPqoDktDkjVqsEZSkz3vZU1VVb2v6zUIVzKIpsB/Frz6MhXwI0=
 =Y3cw
 -----END PGP SIGNATURE-----

Merge pull request #2790 from jpereira/v4/fix-vbox

Add fr_box_tainted()/fr_box_tainted_len() to respect taint values

Alan DeKok (via GitHub)@2019-07-18T14:19:57Z
Files modified:
	* src/lib/server/xlat_tokenize.c
	* src/lib/util/value.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/879b6b0a88216265f59e8b912db34ef47effcbf0
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQJPBAABCAA5FiEEupIhk69JvbrexwYHNQb+wu7Nqm0FAl0wcewbHGpwZXJlaXJh
 QG5ldHdvcmtyYWRpdXMuY29tAAoJEDUG/sLuzaptKZcP/1J26j7Z6luQv1lYcvsK
 XClZlZ8B3KdTy2ckZZzfFXO1rf7FQx+I9VCLznMQSBC+kmxrFDgEivol7kLjlYMI
 mOQzztDY3ir1sQdpnPCj1owXP8rTl0Q3Q5Eq5wef07GaMLI5Eh705KRncTzdTLNn
 BlevLFHLJpryn+kyjEsuoqa68UE64D13UkAQ0bvybFHKzMB9VRSYZOJBAlNbrKmA
 kEFtCUCCXqXjF3s31LwKkAKepit9WuIcUg7S+KuOuquWZCPVmz4l1c7FhEs2uOAA
 TBZ0HWVZCTmkCTqAOMGzgQRssC/JjsxlxWFL+IUxvdscPHxg/qK7Fd2rfUyMr1sF
 TvhoPGV+nPr4DTNqjvmOs66lfbiinx56yqpJ942DnORmhJXexBDIEVriJsWJcDJr
 uVjZrua1ATbTUc6B0UjobNq7j2FqXSYJ5CxIUC4mAT7nmDNmkLt6LKqdXJBF03Mw
 +KtBSkuNichufB8P0hGfkDLpsKw6Qf/LhZBhQ1uIlMHB9RuTplwf5x1h0H9MJ8GS
 9L7Qz1WeunBqplGIEsBZZYYNne8LB1xwBx4PsnJsV7PePmQhqpdMEtxyNn0IpznJ
 v1MXSMMCQuKVCTCc318e/vtPYH05W15PcHaZ5ImB1qZETvUI7ny/5HjhGfjcr7UJ
 JjFULFjZfwkiQEbbAYI88D6a
 =VNnW
 -----END PGP SIGNATURE-----

Add fr_box_tainted()/fr_box_tainted_len() to respect taint values

The new both macros have an extra field to set the "taint" state.

Jorge Pereira at 2019-07-18T13:19:40Z
Files modified:
	* src/lib/server/xlat_tokenize.c
	* src/lib/util/value.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d6efbda571600f727188946e042c47c72a254326
====== 
-- 
This commit summary was generated @2019-07-19T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).