How can I catch the bug?

Alan DeKok aland at deployingradius.com
Wed Jul 25 18:37:11 CEST 2018


On Jul 25, 2018, at 12:33 PM, work vlpl <thework.vlpl at gmail.com> wrote:
>> Yeah.  It's best to fix the state code so that if State is larger than 16 octets, then the state code uses MD5(State), which should be better.
> I think `fr_state_find()` function also require a fix
> https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/src/main/state.c#L353
> because it still uses only first 16 octets. Or am I wrong?

  I've pushed a fix.

  Alan DeKok.




More information about the Freeradius-Users mailing list