September 2014 - Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 10 Sep '14

10 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== otp: Copy strings with explicit limiting When copying username, challenge and password in otp_pw_valid, use strlcpy accepting explicit destination size and verify its result, instead of first assuming or verifying the string will fit and then doing unlimited strcpy. This silences the following Coverity errors. Error: STRING_OVERFLOW (CWE-120): freeradius-server-3.0.4rc2/src/modules/rlm_otp/otp_pw_valid.c:89: fixed_size_dest: You might overrun the 32 byte fixed-size string "otp_request.username" by copying "username" without checking the length. Error: STRING_OVERFLOW (CWE-120): freeradius-server-3.0.4rc2/src/modules/rlm_otp/otp_pw_valid.c:90: fixed_size_dest: You might overrun the 17 byte fixed-size string "otp_request.challenge" by copying "challenge" without checking the length. freeradius-server-3.0.4rc2/src/modules/rlm_otp/otp_pw_valid.c:90: parameter_as_source: Note: This defect has an elevated risk because the source argument is a parameter of the current function. Error: STRING_OVERFLOW (CWE-120): freeradius-server-3.0.4rc2/src/modules/rlm_otp/otp_pw_valid.c:122: fixed_size_dest: You might overrun the 48 byte fixed-size string "otp_request.pwe.u.pap.passcode" by copying "rvp->data.strvalue" without checking the length. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-09-10T22:25:42Z Files modified: * src/modules/rlm_otp/otp_pw_valid.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/04e287cf6eede43bfd4e… ====== Add a couple of attribute back Arran Cudbard-Bell@2014-09-10T21:54:55Z Files modified: * share/dictionary.huawei Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df4be700ed6c31fdaabe… ====== Update huawei dictionary Arran Cudbard-Bell@2014-09-10T21:50:40Z Files modified: * share/dictionary.huawei Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3bb5ea41af794ca6392e… ====== Order by callingstation-Id, too. Fixes #786 Alan T. DeKok@2014-09-10T15:33:44Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/db4f06f257c2bab02154… ====== Added schema for DHCP IP pools. With a key on Calling-Station-Id. Alan T. DeKok@2014-09-10T15:07:08Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c129ebe0f555cae1b265… ====== Update accounting queries to use NOW(), too. Addresses #786 Alan T. DeKok@2014-09-10T14:56:33Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e14f63c2656fa069890a… ====== Remove "and expiry_time IS NULL". Fixes #786 DHCP does multiple passes to allocate one IP. We want to update the allocated IP, no matter what it's previous state. The allocate_find query takes care of allocating the correct IP. We don't need to do extra checks in the allocate_update query Alan T. DeKok@2014-09-10T14:54:56Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11571accf6143613bca3… ====== When clearing entries, set expiry time to now. Addresses #786 This is so that the allocate_find will return the oldest IP. And, the allocate_find will now use an index, rather than potentially scanning the entire table Alan T. DeKok@2014-09-10T14:54:55Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46ab30cba489c5e29b16… ====== Fix allocate_find query. Addresses #786 Alan T. DeKok@2014-09-10T14:54:54Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50082c60f1c88d04de53… ====== Document IPv6 option Alan T. DeKok@2014-09-10T14:42:32Z Files modified: * raddb/mods-available/sqlippool Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/655eef6c6a4b407e8888… ====== Be more flexible about parsing parameters Alan T. DeKok@2014-09-10T14:42:31Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea5e67947fd8c71c7c30… ====== Some extra Huawei attributes Arran Cudbard-Bell@2014-09-10T05:12:12Z Files modified: * share/dictionary.huawei Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/616d86ffa8e3c2a9e90f… ====== Should be map_prints Arran Cudbard-Bell@2014-09-10T01:35:20Z Files modified: * src/include/map.h * src/main/map.c * src/main/modcall.c * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/728f38c46c74f7ff67fe… ====== -- This commit summary was generated @2014-09-11T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 10 Sep '14

10 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add a couple of attribute back Arran Cudbard-Bell@2014-09-10T21:55:01Z Files modified: * share/dictionary.huawei Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/774c5fb93f0a2c639afd… ====== Update huawei dictionary Arran Cudbard-Bell@2014-09-10T21:48:57Z Files modified: * share/dictionary.huawei Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aed1010d7e68d05abe8d… ====== Merge pull request #788 from spbnick/coverity_fixes2 Coverity fixes part 2 Arran Cudbard-Bell@2014-09-10T20:09:50Z Files modified: * src/main/tls.c * src/modules/rlm_otp/otp_pw_valid.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cdc2002804a72cfdcd3f… ====== tls: Set umask before creating temporary file Set restrictive umask before creating temporary file for client certificate in cbtls_verify. Coverity has reported the following error for this issue. Error: SECURE_TEMP (CWE-377): freeradius-server-3.0.4rc2/src/main/tls.c:1882: secure_temp: Calling "mkstemp(char *)" without securely setting umask first. Nikolai Kondrashov@2014-09-10T16:04:36Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1fc1558e7ac11102a4bc… ====== otp: Copy strings with explicit limiting When copying username, challenge and password in otp_pw_valid, use strlcpy accepting explicit destination size and verify its result, instead of first assuming or verifying the string will fit and then doing unlimited strcpy. This silences the following Coverity errors. Error: STRING_OVERFLOW (CWE-120): freeradius-server-3.0.4rc2/src/modules/rlm_otp/otp_pw_valid.c:89: fixed_size_dest: You might overrun the 32 byte fixed-size string "otp_request.username" by copying "username" without checking the length. Error: STRING_OVERFLOW (CWE-120): freeradius-server-3.0.4rc2/src/modules/rlm_otp/otp_pw_valid.c:90: fixed_size_dest: You might overrun the 17 byte fixed-size string "otp_request.challenge" by copying "challenge" without checking the length. freeradius-server-3.0.4rc2/src/modules/rlm_otp/otp_pw_valid.c:90: parameter_as_source: Note: This defect has an elevated risk because the source argument is a parameter of the current function. Error: STRING_OVERFLOW (CWE-120): freeradius-server-3.0.4rc2/src/modules/rlm_otp/otp_pw_valid.c:122: fixed_size_dest: You might overrun the 48 byte fixed-size string "otp_request.pwe.u.pap.passcode" by copying "rvp->data.strvalue" without checking the length. Nikolai Kondrashov@2014-09-10T16:04:35Z Files modified: * src/modules/rlm_otp/otp_pw_valid.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7619f2d8ed7dd31cf49… ====== Order by callingstation-Id, too. Fixes #786 Alan T. DeKok@2014-09-10T15:33:26Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8abb44f0d09be7f4714c… ====== Added schema for DHCP IP pools. With a key on Calling-Station-Id. Alan T. DeKok@2014-09-10T15:06:42Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6bb930a328f7b11451d9… ====== Update accounting queries to use NOW(), too. Addresses #786 Alan T. DeKok@2014-09-10T14:56:05Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c065fe01b82635f0811e… ====== Remove "and expiry_time IS NULL". Fixes #786 DHCP does multiple passes to allocate one IP. We want to update the allocated IP, no matter what it's previous state. The allocate_find query takes care of allocating the correct IP. We don't need to do extra checks in the allocate_update query Alan T. DeKok@2014-09-10T14:53:19Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9557f54dd300893e79f0… ====== When clearing entries, set expiry time to now. Addresses #786 This is so that the allocate_find will return the oldest IP. And, the allocate_find will now use an index, rather than potentially scanning the entire table Alan T. DeKok@2014-09-10T14:52:32Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32ed3d64204f9d2254d8… ====== Fix allocate_find query. Addresses #786 Alan T. DeKok@2014-09-10T14:49:08Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0715ec7813be2e0bfeb… ====== Document IPv6 option Alan T. DeKok@2014-09-10T14:39:14Z Files modified: * raddb/mods-available/sqlippool Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/877358e9e3028d1a2a45… ====== Be more flexible about parsing parameters Alan T. DeKok@2014-09-10T14:26:57Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/db59840d20386718c193… ====== Should be map_prints Arran Cudbard-Bell@2014-09-10T01:35:12Z Files modified: * src/include/map.h * src/main/map.c * src/main/modcall.c * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8bdbe58367de8337df46… ====== -- This commit summary was generated @2014-09-11T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 09 Sep '14

09 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add .gitignore for rlm_realm Arran Cudbard-Bell@2014-09-09T22:10:22Z Files modified: * src/modules/rlm_realm/.gitignore Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0465dc9fff029f69364a… ====== rename rlm_realm config struct so it doesn't conflict with the main realms config struct Arran Cudbard-Bell@2014-09-09T22:10:18Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0949e537969d9b0e6bb9… ====== Cache realm regular expressions Arran Cudbard-Bell@2014-09-09T21:53:36Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6dcd8fe796774c8ec017… ====== Dual should be bool Arran Cudbard-Bell@2014-09-09T21:52:19Z Files modified: * src/include/realms.h * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/104829f5b358c5e0cd1d… ====== Fix parenting of dual homeservers Arran Cudbard-Bell@2014-09-09T21:52:14Z Files modified: * src/include/realms.h * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bbb2fd461cdca32f8b68… ====== Quiet valgrind error in rlm_ldap Arran Cudbard-Bell@2014-09-09T21:52:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5d5646de2159865935c… ====== striprealm should be strip_realm and a bool Arran Cudbard-Bell@2014-09-09T21:52:06Z Files modified: * src/include/realms.h * src/main/process.c * src/main/realms.c * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/790b5956c2fb63680ccd… ====== Correctly allocate unknown sub-options Arran Cudbard-Bell@2014-09-09T19:33:34Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/666af6d1c34f83a7dd91… ====== listen: Retrieve configuration pairs once Retrieve configuration pairs with cf_pair_find only once, before checking their existence, in common_socket_parse. This avoids ambiguity confusing Coverity, which otherwise reports the following issue. Error: NULL_RETURNS (CWE-476): freeradius-server-3.0.4rc2/src/main/listen.c:1139: returned_null: Function "cf_pair_find(CONF_SECTION const *, char const *)" returns null (checked 51 out of 54 times). freeradius-server-3.0.4rc2/src/main/conffile.c:2353:20: return_null: Explicitly returning null. freeradius-server-3.0.4rc2/src/main/client.c:514: example_checked: Example 1: "cf_pair_find(cs, "ipaddr")" has its value checked in "cf_pair_find(cs, "ipaddr")". freeradius-server-3.0.4rc2/src/main/conffile.c:667: example_assign: Example 2: Assigning: "cp" = return value from "cf_pair_find(cs, p)". freeradius-server-3.0.4rc2/src/main/conffile.c:668: example_checked: Example 2 (cont.): "cp" has its value checked in "cp". freeradius-server-3.0.4rc2/src/main/command.c:1556: example_assign: Example 3: Assigning: "cp" = return value from "cf_pair_find(mi->cs, argv[1])". freeradius-server-3.0.4rc2/src/main/command.c:1557: example_checked: Example 3 (cont.): "cp" has its value checked in "cp". freeradius-server-3.0.4rc2/src/main/listen.c:103: example_assign: Example 4: Assigning: "cp" = return value from "cf_pair_find(request->listener->cs, fmt)". freeradius-server-3.0.4rc2/src/main/listen.c:104: example_checked: Example 4 (cont.): "cp" has its value checked in "cp". freeradius-server-3.0.4rc2/src/main/mainconfig.c:345: example_assign: Example 5: Assigning: "cp" = return value from "cf_pair_find(request->client->cs, fmt)". freeradius-server-3.0.4rc2/src/main/mainconfig.c:346: example_checked: Example 5 (cont.): "cp" has its value checked in "cp". freeradius-server-3.0.4rc2/src/main/listen.c:1139: var_assigned: Assigning: "cp" = null return value from "cf_pair_find(CONF_SECTION const *, char const *)". freeradius-server-3.0.4rc2/src/main/listen.c:1142: dereference: Dereferencing a pointer that might be null "cp" when calling "cf_log_err_cp(CONF_PAIR const *, char const *, ...)". freeradius-server-3.0.4rc2/src/main/conffile.c:2930:2: deref_parm: Directly dereferencing parameter "cp". Nikolai Kondrashov (via Alan T. DeKok)@2014-09-09T19:30:59Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f49edd7b2c0c0392803f… ====== dhcpclient: Verify socket timeout was set Verify the return code of setsockopt, as it may fail, in dhcpclient.c. Coverity has reported the following error for this issue. Error: CHECKED_RETURN (CWE-252): freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpclient.c:424: check_return: Calling function "setsockopt(sockfd, 1, 20, (char *)&tv, 16U)" without checking return value. This library function may fail and return an error code. freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpclient.c:424: unchecked_value: No check of the return value of "setsockopt(sockfd, 1, 20, (char *)&tv, 16U)". Nikolai Kondrashov (via Alan T. DeKok)@2014-09-09T19:30:57Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2b78c706804ad5a3d00d… ====== dhcpd: Check cf_item_parse result Check the result of cf_item_parse for error, propagating it up the stack in dhcp_socket_parse. Coverity has reported the following errors for this issue. Error: CHECKED_RETURN (CWE-252): freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpd.c:638: check_return: Calling function "cf_item_parse(CONF_SECTION *, char const *, int, void *, char const *)" without checking return value (as is done elsewhere 12 out of 14 times). freeradius-server-3.0.4rc2/src/main/conffile.c:1416: example_assign: Example 1: Assigning: "ret" = return value from "cf_item_parse(cs, (variables + i).name, (variables + i).type, data, (variables + i).dflt)". freeradius-server-3.0.4rc2/src/main/conffile.c:1417: example_checked: Example 1 (cont.): "ret" has its value checked in "ret < 0". freeradius-server-3.0.4rc2/src/main/command.c:1569: example_assign: Example 2: Assigning: "rcode" = return value from "cf_item_parse(mi->cs, argv[1], (variables + i).type, data, argv[2])". freeradius-server-3.0.4rc2/src/main/command.c:1570: example_checked: Example 2 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/listen.c:916: example_assign: Example 3: Assigning: "rcode" = return value from "cf_item_parse(cs, "ipaddr", 14, &ipaddr, NULL)". freeradius-server-3.0.4rc2/src/main/listen.c:917: example_checked: Example 3 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/listen.c:2834: example_assign: Example 4: Assigning: "rcode" = return value from "cf_item_parse(cs, "type", 1, &listen_type, "")". freeradius-server-3.0.4rc2/src/main/listen.c:2835: example_checked: Example 4 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/radmin.c:530: example_assign: Example 5: Assigning: "rcode" = return value from "cf_item_parse(subcs, "socket", 1, &file, NULL)". freeradius-server-3.0.4rc2/src/main/radmin.c:531: example_checked: Example 5 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpd.c:638: unchecked_value: No check of the return value of "cf_item_parse(cs, "suppress_responses", 23, &sock->suppress_responses, NULL)". Error: CHECKED_RETURN (CWE-252): freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpd.c:643: check_return: Calling function "cf_item_parse(CONF_SECTION *, char const *, int, void *, char const *)" without checking return value (as is done elsewhere 12 out of 14 times). freeradius-server-3.0.4rc2/src/main/conffile.c:1416: example_assign: Example 1: Assigning: "ret" = return value from "cf_item_parse(cs, (variables + i).name, (variables + i).type, data, (variables + i).dflt)". freeradius-server-3.0.4rc2/src/main/conffile.c:1417: example_checked: Example 1 (cont.): "ret" has its value checked in "ret < 0". freeradius-server-3.0.4rc2/src/main/command.c:1569: example_assign: Example 2: Assigning: "rcode" = return value from "cf_item_parse(mi->cs, argv[1], (variables + i).type, data, argv[2])". freeradius-server-3.0.4rc2/src/main/command.c:1570: example_checked: Example 2 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/listen.c:916: example_assign: Example 3: Assigning: "rcode" = return value from "cf_item_parse(cs, "ipaddr", 14, &ipaddr, NULL)". freeradius-server-3.0.4rc2/src/main/listen.c:917: example_checked: Example 3 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/listen.c:2834: example_assign: Example 4: Assigning: "rcode" = return value from "cf_item_parse(cs, "type", 1, &listen_type, "")". freeradius-server-3.0.4rc2/src/main/listen.c:2835: example_checked: Example 4 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/radmin.c:530: example_assign: Example 5: Assigning: "rcode" = return value from "cf_item_parse(subcs, "socket", 1, &file, NULL)". freeradius-server-3.0.4rc2/src/main/radmin.c:531: example_checked: Example 5 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpd.c:643: unchecked_value: No check of the return value of "cf_item_parse(cs, "src_interface", 1, &sock->src_interface, NULL)". Nikolai Kondrashov (via Alan T. DeKok)@2014-09-09T19:30:56Z Files modified: * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30aae8be22fd3844753d… ====== dhcp: Remove unused attribute allocation Remove unused and unfreed unknown attribute allocation to prevent memory leak. Coverity has reported the following error for this issue. Error: RESOURCE_LEAK (CWE-772): freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcp.c:956: alloc_fn: Storage is returned from allocation function "dict_attrunknown(unsigned int, unsigned int, int)". freeradius-server-3.0.4rc2/src/lib/dict.c:2666:2: alloc_fn: Storage is returned from allocation function "malloc(size_t)". freeradius-server-3.0.4rc2/src/lib/dict.c:2666:2: var_assign: Assigning: "da" = "malloc(148UL)". freeradius-server-3.0.4rc2/src/lib/dict.c:2671:2: noescape: Resource "da" is not freed or pointed-to in function "memset(void *, int, size_t)". freeradius-server-3.0.4rc2/src/lib/dict.c:2687:2: var_assign: Assigning: "p" = "da". freeradius-server-3.0.4rc2/src/lib/dict.c:2689:2: noescape: Resource "p" is not freed or pointed-to in function "snprintf(char * restrict, size_t, char const * restrict, ...)". freeradius-server-3.0.4rc2/src/lib/dict.c:2712:3: noescape: Resource "p" is not freed or pointed-to in function "snprintf(char * restrict, size_t, char const * restrict, ...)". freeradius-server-3.0.4rc2/src/lib/dict.c:2718:2: noescape: Resource "p" is not freed or pointed-to in function "print_attr_oid(char *, size_t, unsigned int, int)". freeradius-server-3.0.4rc2/src/lib/dict.c:2546:36: noescape: "print_attr_oid(char *, size_t, unsigned int, int)" does not free or save its pointer parameter "buffer". freeradius-server-3.0.4rc2/src/lib/dict.c:2720:2: return_alloc: Returning allocated memory "da". freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcp.c:956: var_assign: Assigning: "da" = storage returned from "dict_attrunknown(p[0], 54U, 1)". freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcp.c:991: leaked_storage: Variable "da" going out of scope leaks the storage it points to. Nikolai Kondrashov (via Alan T. DeKok)@2014-09-09T19:30:55Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2576a4ab459234288be… ====== radsniff: Fix buffer overruns Divide by the element size when checking for circular buffer wrap in rs_response_to_pcap and rs_request_to_pcap. The following Coverity errors were reported for the defect. Error: OVERRUN (CWE-119): freeradius-server-3.0.4rc2/src/main/radsniff.c:934: illegal_address: "&request->capture[80UL]" evaluates to an address that is at byte offset 1280 of an array of 80 bytes. Error: SIZEOF_MISMATCH (CWE-398): freeradius-server-3.0.4rc2/src/main/radsniff.c:934: suspicious_pointer_arithmetic: Adding "80UL /* sizeof (request->capture) */" to pointer "request->capture" of type "rs_capture_t [5]" is suspicious because adding an integral value to this pointer automatically scales that value by the size, 16 bytes, of the pointed-to type, "rs_capture_t". Most likely, you intended to use the number of elements in "request->capture" rather than its size in bytes. Error: OVERRUN (CWE-119): freeradius-server-3.0.4rc2/src/main/radsniff.c:972: illegal_address: "&request->capture[80UL]" evaluates to an address that is at byte offset 1280 of an array of 80 bytes. Error: SIZEOF_MISMATCH (CWE-398): freeradius-server-3.0.4rc2/src/main/radsniff.c:972: suspicious_pointer_arithmetic: Adding "80UL /* sizeof (request->capture) */" to pointer "request->capture" of type "rs_capture_t [5]" is suspicious because adding an integral value to this pointer automatically scales that value by the size, 16 bytes, of the pointed-to type, "rs_capture_t". Most likely, you intended to use the number of elements in "request->capture" rather than its size in bytes. Nikolai Kondrashov (via Alan T. DeKok)@2014-09-09T19:30:54Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2a3e985a506975aacde… ====== Fix typo. Closes #784 Alan T. DeKok@2014-09-09T15:15:31Z Files modified: * raddb/mods-available/dhcp_sqlippool Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0eae1dfd0aec6acb0d9d… ====== Fix typo. Closes #783 Alan T. DeKok@2014-09-09T14:15:59Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0ef87564fe67e1d6484b… ====== TLV memory should be zerod in DHCP suboption encoder Arran Cudbard-Bell@2014-09-09T14:07:30Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e890db041493c08cffe1… ====== Allow bootstrap from multiple files in sqlite driver Arran Cudbard-Bell@2014-09-09T03:57:00Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/549916e690292e8d9be5… ====== Generate snakeoil certs on package install (debian) Arran Cudbard-Bell@2014-09-09T03:56:46Z Files modified: * debian/freeradius-config.postinst * debian/freeradius.postinst * debian/rules * raddb/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c9b1c78c0a4df9164d11… ====== Line endings Arran Cudbard-Bell@2014-09-09T03:56:43Z Files modified: * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/213e447631072ff0e794… ====== Quiet gcc Arran Cudbard-Bell@2014-09-09T03:56:39Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfb61c27fa3919ccc20c… ====== -- This commit summary was generated @2014-09-10T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 09 Sep '14

09 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add .gitignore for rlm_realm Arran Cudbard-Bell@2014-09-09T22:10:07Z Files modified: * src/modules/rlm_realm/.gitignore Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4bb1a857696be79c325f… ====== rename rlm_realm config struct so it doesn't conflict with the main realms config struct Arran Cudbard-Bell@2014-09-09T22:09:38Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/319235d0658ac5a29acc… ====== Cache realm regular expressions Arran Cudbard-Bell@2014-09-09T21:51:00Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ffad000596e2bda17af… ====== Free home_servers with talloc_free Arran Cudbard-Bell@2014-09-09T21:51:00Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a90a42c1223b03c919ff… ====== Dual should be bool Arran Cudbard-Bell@2014-09-09T21:51:00Z Files modified: * src/include/realms.h * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/171d3aa00fe2681b7dd4… ====== Fix parenting of dual homeservers Arran Cudbard-Bell@2014-09-09T21:51:00Z Files modified: * src/include/realms.h * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7847355a4712d82dcac5… ====== Quiet valgrind error in rlm_ldap Arran Cudbard-Bell@2014-09-09T21:18:30Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dea355d07c28c4b1bbcf… ====== striprealm should be strip_realm and a bool Arran Cudbard-Bell@2014-09-09T21:18:17Z Files modified: * src/include/realms.h * src/main/process.c * src/main/realms.c * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1e8ccaedafb73aabcf5b… ====== Correctly allocate unknown sub-options Arran Cudbard-Bell@2014-09-09T19:31:34Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/468a63cb515195844c27… ====== Merge pull request #787 from spbnick/coverity_fixes1 Coverity fixes part 1 Alan DeKok@2014-09-09T19:29:00Z Files modified: * src/main/listen.c * src/main/radsniff.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_dhcp/dhcpclient.c * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd2348e2d63a0b84d1ec… ====== listen: Retrieve configuration pairs once Retrieve configuration pairs with cf_pair_find only once, before checking their existence, in common_socket_parse. This avoids ambiguity confusing Coverity, which otherwise reports the following issue. Error: NULL_RETURNS (CWE-476): freeradius-server-3.0.4rc2/src/main/listen.c:1139: returned_null: Function "cf_pair_find(CONF_SECTION const *, char const *)" returns null (checked 51 out of 54 times). freeradius-server-3.0.4rc2/src/main/conffile.c:2353:20: return_null: Explicitly returning null. freeradius-server-3.0.4rc2/src/main/client.c:514: example_checked: Example 1: "cf_pair_find(cs, "ipaddr")" has its value checked in "cf_pair_find(cs, "ipaddr")". freeradius-server-3.0.4rc2/src/main/conffile.c:667: example_assign: Example 2: Assigning: "cp" = return value from "cf_pair_find(cs, p)". freeradius-server-3.0.4rc2/src/main/conffile.c:668: example_checked: Example 2 (cont.): "cp" has its value checked in "cp". freeradius-server-3.0.4rc2/src/main/command.c:1556: example_assign: Example 3: Assigning: "cp" = return value from "cf_pair_find(mi->cs, argv[1])". freeradius-server-3.0.4rc2/src/main/command.c:1557: example_checked: Example 3 (cont.): "cp" has its value checked in "cp". freeradius-server-3.0.4rc2/src/main/listen.c:103: example_assign: Example 4: Assigning: "cp" = return value from "cf_pair_find(request->listener->cs, fmt)". freeradius-server-3.0.4rc2/src/main/listen.c:104: example_checked: Example 4 (cont.): "cp" has its value checked in "cp". freeradius-server-3.0.4rc2/src/main/mainconfig.c:345: example_assign: Example 5: Assigning: "cp" = return value from "cf_pair_find(request->client->cs, fmt)". freeradius-server-3.0.4rc2/src/main/mainconfig.c:346: example_checked: Example 5 (cont.): "cp" has its value checked in "cp". freeradius-server-3.0.4rc2/src/main/listen.c:1139: var_assigned: Assigning: "cp" = null return value from "cf_pair_find(CONF_SECTION const *, char const *)". freeradius-server-3.0.4rc2/src/main/listen.c:1142: dereference: Dereferencing a pointer that might be null "cp" when calling "cf_log_err_cp(CONF_PAIR const *, char const *, ...)". freeradius-server-3.0.4rc2/src/main/conffile.c:2930:2: deref_parm: Directly dereferencing parameter "cp". Nikolai Kondrashov@2014-09-09T17:06:27Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e431472f4db2998aef52… ====== dhcpclient: Verify socket timeout was set Verify the return code of setsockopt, as it may fail, in dhcpclient.c. Coverity has reported the following error for this issue. Error: CHECKED_RETURN (CWE-252): freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpclient.c:424: check_return: Calling function "setsockopt(sockfd, 1, 20, (char *)&tv, 16U)" without checking return value. This library function may fail and return an error code. freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpclient.c:424: unchecked_value: No check of the return value of "setsockopt(sockfd, 1, 20, (char *)&tv, 16U)". Nikolai Kondrashov@2014-09-09T17:06:27Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9984ca85c77282928f42… ====== dhcpd: Check cf_item_parse result Check the result of cf_item_parse for error, propagating it up the stack in dhcp_socket_parse. Coverity has reported the following errors for this issue. Error: CHECKED_RETURN (CWE-252): freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpd.c:638: check_return: Calling function "cf_item_parse(CONF_SECTION *, char const *, int, void *, char const *)" without checking return value (as is done elsewhere 12 out of 14 times). freeradius-server-3.0.4rc2/src/main/conffile.c:1416: example_assign: Example 1: Assigning: "ret" = return value from "cf_item_parse(cs, (variables + i).name, (variables + i).type, data, (variables + i).dflt)". freeradius-server-3.0.4rc2/src/main/conffile.c:1417: example_checked: Example 1 (cont.): "ret" has its value checked in "ret < 0". freeradius-server-3.0.4rc2/src/main/command.c:1569: example_assign: Example 2: Assigning: "rcode" = return value from "cf_item_parse(mi->cs, argv[1], (variables + i).type, data, argv[2])". freeradius-server-3.0.4rc2/src/main/command.c:1570: example_checked: Example 2 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/listen.c:916: example_assign: Example 3: Assigning: "rcode" = return value from "cf_item_parse(cs, "ipaddr", 14, &ipaddr, NULL)". freeradius-server-3.0.4rc2/src/main/listen.c:917: example_checked: Example 3 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/listen.c:2834: example_assign: Example 4: Assigning: "rcode" = return value from "cf_item_parse(cs, "type", 1, &listen_type, "")". freeradius-server-3.0.4rc2/src/main/listen.c:2835: example_checked: Example 4 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/radmin.c:530: example_assign: Example 5: Assigning: "rcode" = return value from "cf_item_parse(subcs, "socket", 1, &file, NULL)". freeradius-server-3.0.4rc2/src/main/radmin.c:531: example_checked: Example 5 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpd.c:638: unchecked_value: No check of the return value of "cf_item_parse(cs, "suppress_responses", 23, &sock->suppress_responses, NULL)". Error: CHECKED_RETURN (CWE-252): freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpd.c:643: check_return: Calling function "cf_item_parse(CONF_SECTION *, char const *, int, void *, char const *)" without checking return value (as is done elsewhere 12 out of 14 times). freeradius-server-3.0.4rc2/src/main/conffile.c:1416: example_assign: Example 1: Assigning: "ret" = return value from "cf_item_parse(cs, (variables + i).name, (variables + i).type, data, (variables + i).dflt)". freeradius-server-3.0.4rc2/src/main/conffile.c:1417: example_checked: Example 1 (cont.): "ret" has its value checked in "ret < 0". freeradius-server-3.0.4rc2/src/main/command.c:1569: example_assign: Example 2: Assigning: "rcode" = return value from "cf_item_parse(mi->cs, argv[1], (variables + i).type, data, argv[2])". freeradius-server-3.0.4rc2/src/main/command.c:1570: example_checked: Example 2 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/listen.c:916: example_assign: Example 3: Assigning: "rcode" = return value from "cf_item_parse(cs, "ipaddr", 14, &ipaddr, NULL)". freeradius-server-3.0.4rc2/src/main/listen.c:917: example_checked: Example 3 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/listen.c:2834: example_assign: Example 4: Assigning: "rcode" = return value from "cf_item_parse(cs, "type", 1, &listen_type, "")". freeradius-server-3.0.4rc2/src/main/listen.c:2835: example_checked: Example 4 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/main/radmin.c:530: example_assign: Example 5: Assigning: "rcode" = return value from "cf_item_parse(subcs, "socket", 1, &file, NULL)". freeradius-server-3.0.4rc2/src/main/radmin.c:531: example_checked: Example 5 (cont.): "rcode" has its value checked in "rcode < 0". freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcpd.c:643: unchecked_value: No check of the return value of "cf_item_parse(cs, "src_interface", 1, &sock->src_interface, NULL)". Nikolai Kondrashov@2014-09-09T17:06:27Z Files modified: * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4de0473f1a2f63a91450… ====== dhcp: Remove unused attribute allocation Remove unused and unfreed unknown attribute allocation to prevent memory leak. Coverity has reported the following error for this issue. Error: RESOURCE_LEAK (CWE-772): freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcp.c:956: alloc_fn: Storage is returned from allocation function "dict_attrunknown(unsigned int, unsigned int, int)". freeradius-server-3.0.4rc2/src/lib/dict.c:2666:2: alloc_fn: Storage is returned from allocation function "malloc(size_t)". freeradius-server-3.0.4rc2/src/lib/dict.c:2666:2: var_assign: Assigning: "da" = "malloc(148UL)". freeradius-server-3.0.4rc2/src/lib/dict.c:2671:2: noescape: Resource "da" is not freed or pointed-to in function "memset(void *, int, size_t)". freeradius-server-3.0.4rc2/src/lib/dict.c:2687:2: var_assign: Assigning: "p" = "da". freeradius-server-3.0.4rc2/src/lib/dict.c:2689:2: noescape: Resource "p" is not freed or pointed-to in function "snprintf(char * restrict, size_t, char const * restrict, ...)". freeradius-server-3.0.4rc2/src/lib/dict.c:2712:3: noescape: Resource "p" is not freed or pointed-to in function "snprintf(char * restrict, size_t, char const * restrict, ...)". freeradius-server-3.0.4rc2/src/lib/dict.c:2718:2: noescape: Resource "p" is not freed or pointed-to in function "print_attr_oid(char *, size_t, unsigned int, int)". freeradius-server-3.0.4rc2/src/lib/dict.c:2546:36: noescape: "print_attr_oid(char *, size_t, unsigned int, int)" does not free or save its pointer parameter "buffer". freeradius-server-3.0.4rc2/src/lib/dict.c:2720:2: return_alloc: Returning allocated memory "da". freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcp.c:956: var_assign: Assigning: "da" = storage returned from "dict_attrunknown(p[0], 54U, 1)". freeradius-server-3.0.4rc2/src/modules/proto_dhcp/dhcp.c:991: leaked_storage: Variable "da" going out of scope leaks the storage it points to. Nikolai Kondrashov@2014-09-09T17:06:27Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d1c8c3d758d3f7f479c… ====== radsniff: Fix buffer overruns Divide by the element size when checking for circular buffer wrap in rs_response_to_pcap and rs_request_to_pcap. The following Coverity errors were reported for the defect. Error: OVERRUN (CWE-119): freeradius-server-3.0.4rc2/src/main/radsniff.c:934: illegal_address: "&request->capture[80UL]" evaluates to an address that is at byte offset 1280 of an array of 80 bytes. Error: SIZEOF_MISMATCH (CWE-398): freeradius-server-3.0.4rc2/src/main/radsniff.c:934: suspicious_pointer_arithmetic: Adding "80UL /* sizeof (request->capture) */" to pointer "request->capture" of type "rs_capture_t [5]" is suspicious because adding an integral value to this pointer automatically scales that value by the size, 16 bytes, of the pointed-to type, "rs_capture_t". Most likely, you intended to use the number of elements in "request->capture" rather than its size in bytes. Error: OVERRUN (CWE-119): freeradius-server-3.0.4rc2/src/main/radsniff.c:972: illegal_address: "&request->capture[80UL]" evaluates to an address that is at byte offset 1280 of an array of 80 bytes. Error: SIZEOF_MISMATCH (CWE-398): freeradius-server-3.0.4rc2/src/main/radsniff.c:972: suspicious_pointer_arithmetic: Adding "80UL /* sizeof (request->capture) */" to pointer "request->capture" of type "rs_capture_t [5]" is suspicious because adding an integral value to this pointer automatically scales that value by the size, 16 bytes, of the pointed-to type, "rs_capture_t". Most likely, you intended to use the number of elements in "request->capture" rather than its size in bytes. Nikolai Kondrashov@2014-09-09T17:06:27Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84f48f3072022e4209a4… ====== Fix typo. Closes #784 Alan T. DeKok@2014-09-09T15:15:16Z Files modified: * raddb/mods-available/dhcp_sqlippool Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55ec278c50e331d7af1… ====== Fix typo. Closes #783 Alan T. DeKok@2014-09-09T14:15:51Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00f6744e723145479517… ====== TLV memory should be zerod in DHCP suboption encoder Arran Cudbard-Bell@2014-09-09T14:07:21Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4fb4a5ddb641eeb668a… ====== Allow bootstrap from multiple files in sqlite driver Arran Cudbard-Bell@2014-09-09T03:57:06Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3641b61ecaa382c646b… ====== Generate snakeoil certs on package install (debian) Arran Cudbard-Bell@2014-09-09T03:56:28Z Files modified: * debian/freeradius-config.postinst * debian/freeradius.postinst * debian/rules * raddb/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/481e0f2a2ad2532bd200… ====== Line endings Arran Cudbard-Bell@2014-09-09T03:55:27Z Files modified: * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/95e63212084f2d422fc9… ====== Quiet gcc Arran Cudbard-Bell@2014-09-08T18:09:41Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/15b51949c7cf2edc885e… ====== -- This commit summary was generated @2014-09-10T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 Sep '14

08 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Not all servers have sections Arran Cudbard-Bell@2014-09-08T17:43:44Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8f4819bbda716666caff… ====== Find the SUB section, not the NEXT one Alan T. DeKok@2014-09-08T17:29:56Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba5d2c0ef4fdb18a526b… ====== remove 'const' so it builds The various talloc() functions don't take 'const', so we can't, either Alan T. DeKok@2014-09-08T16:51:40Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_eap/libeap/eap_chbind.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60ddf200b8ac4c19dac2… ====== Pull autoconf.h definitions into the Make variable space Alan T. DeKok@2014-09-08T15:53:26Z Files modified: * src/tests/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff0b2f6936238423828e… ====== Clarify debug message and raise level Alan T. DeKok@2014-09-08T15:52:58Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d866669c1f06ea270fc5… ====== Remove old documentation Alan T. DeKok@2014-09-08T15:30:13Z Files modified: * raddb/mods-available/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/811c989e848103ca13dc… ====== -- This commit summary was generated @2014-09-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 08 Sep '14

08 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Not all servers have sections Arran Cudbard-Bell@2014-09-08T17:43:26Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cbc995ace8e5f8a6df2c… ====== Find the SUB section, not the NEXT one Alan T. DeKok@2014-09-08T17:29:49Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/68fc9e7fa9e4fdfed52d… ====== remove 'const' so it builds The various talloc() functions don't take 'const', so we can't, either Alan T. DeKok@2014-09-08T16:51:05Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_eap/libeap/eap_chbind.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ffdd0d57ca57da28c1d… ====== Update comments to be more descriptive Alan T. DeKok@2014-09-08T16:09:42Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f91c60223f442098083… ====== Clarify debug message and raise level Alan T. DeKok@2014-09-08T15:52:43Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c9bd6fe6c9b77f2ab2f… ====== Pull autoconf.h definitions into the Make variable space Alan T. DeKok@2014-09-08T15:48:57Z Files modified: * src/tests/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b87eb26447c2db8f6ef5… ====== Remove old documentation Alan T. DeKok@2014-09-08T15:23:10Z Files modified: * raddb/mods-available/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/454817843fa32c29ee13… ====== -- This commit summary was generated @2014-09-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 08 Sep '14

08 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Find the SUB section, not the NEXT one Alan T. DeKok@2014-09-08T17:28:42Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8682ec6e11895a96ba33… ====== -- This commit summary was generated @2014-09-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 07 Sep '14

07 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Final patches to make trust router work Alan T. DeKok@2014-09-07T23:50:19Z Files modified: * raddb/mods-available/realm * raddb/policy.d/abfab-tr * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_realm/configure * src/modules/rlm_realm/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/34b047015c13082e1eac… ====== -- This commit summary was generated @2014-09-08T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 07 Sep '14

07 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #777 from matsimon/f5-dictionary F5 dictionary Arran Cudbard-Bell (via Alan T. DeKok)@2014-09-07T05:05:24Z Files modified: * share/dictionary.f5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3991d11c73d0c2d79a41… ====== Added dictionary for RFC 7268 Alan T. DeKok@2014-09-07T05:03:44Z Files modified: * share/dictionary * share/dictionary.rfc7268 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d932837203dc71a85b86… ====== Merge pull request #489 from spaetow/master Adding RFC7055 (ABFAB/Moonshot RFC) Arran Cudbard-Bell (via Alan T. DeKok)@2014-09-07T05:01:59Z Files modified: * share/dictionary * share/dictionary.rfc7055 * share/dictionary.ukerna Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/41657b5a9e311d231873… ====== Run format.pl Alan T. DeKok@2014-09-07T05:00:44Z Files modified: * share/dictionary * share/dictionary.telebit * share/dictionary.terena * share/dictionary.wimax.wichorus * share/dictionary.zte Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a42dbe26a6a03586ac41… ====== Enable new dictionaries and fix minor issues Alan T. DeKok@2014-09-07T05:00:24Z Files modified: * share/dictionary * share/dictionary.bay Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e35ea9b2a98378a29e6… ====== dictionary.trapeze: Add attribute - Trapeze-Audit seems to be a accounting-only value that contains logging data for audit as the attribute says. - Since MSS software still seems to be developed by Juniper add a Juniper reference and remove the mail address as the domain redirects to Juniper.com these days. Mathieu Simon (via Alan T. DeKok)@2014-09-07T05:00:22Z Files modified: * share/dictionary.trapeze Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2360f5894ac4d6630430… ====== Add 3 attributes to the Bay dict. (Nortel/Avaya) Found in the Avaya AAA for ERS and ES Technical Configuration Guide from 2010 as publicly available at Avaya. Some attributes have been changed by Avaya but left unchanged here to not break existing installations. Mathieu Simon (via Alan T. DeKok)@2014-09-07T05:00:20Z Files modified: * share/dictionary.bay Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea4cc10dcf8f0266d5cc… ====== dictionary.altiga: Fix small typo & space-to-tab Try unifying mixed usage of spaces and tabs (later seems more common) then pass with the formatter. Mathieu Simon (via Alan T. DeKok)@2014-09-07T04:59:29Z Files modified: * share/dictionary.altiga Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6468bdfddf44d0b93bd… ====== Add newly found attribute to dictionary.telebit Found in: Cisco Prime Access Registrar 6.0.1 Users Guide Chapter: RADIUS Attributes. Telebit has been bought quite some time ago, that's why the references come from Cisco. Mathieu Simon (via Alan T. DeKok)@2014-09-07T04:57:11Z Files modified: * share/dictionary.telebit Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8d05fadbd51d56c32e4… ====== Add Ruckus dictionary Compiled out of a Ruckus user guides and tech notes publicly available on the Ruckus website. Mathieu Simon (via Alan T. DeKok)@2014-09-07T04:57:07Z Files modified: * share/dictionary.ruckus Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8db58ab6273a660ac66… ====== Add Compatible Systems dictionary Add Compatible Systems Corp. dictionary as found in the Cisco Prime Access Registrar 6.1 User Guide. Includes historical note about Compatible Systems's acquisition in case someone is (still) looking for documentation. Mathieu Simon (via Alan T. DeKok)@2014-09-07T04:57:05Z Files modified: * share/dictionary.compatible Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b705992bf62e230b02d2… ====== As posted to the list Conflicts: share/dictionary.bluecoat Alan T. DeKok@2014-09-07T04:56:30Z Files modified: * share/dictionary.bluecoat Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/70cc45909373d36bd54e… ====== -- This commit summary was generated @2014-09-08T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 07 Sep '14

07 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Final patches to make trust router work Alan T. DeKok@2014-09-07T23:50:42Z Files modified: * raddb/mods-available/realm * raddb/policy.d/abfab-tr * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_realm/configure * src/modules/rlm_realm/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8adc4023f6c68c7064e0… ====== -- This commit summary was generated @2014-09-08T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0