New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAl0wuEEACgkQfQ55zXdi Hs3rtQf9EFqZGXmhQ1g5Sq/aUc4VPvdnz6kc56BGUHJdpTLLYGfUZ4Fpc3m/Gofb Oe47MIUx7o1S1ATvQwFViJ7EhZXYSWOS88AAtuEwxYHDeMZnVdwnPPrliNLwkozB WcCr4ipEP2FuzuzHWchezh/BJAuzdqruSkzANDbVh5qFtfvhy9gk4dRJnrry114M TwoiZqD8Ve1ZRP00CZFy3NDxgdOFGrQedMb91f32Unmd0PXEFtiyOY9KNoUs/Kei GA2t46nLYD3hJwBch3cvWF0/ddseh6U2O3OhZT7bS6BMMPNjBjaKRGbkcCN87ILq S5DP8QUwm5lkB9xz+GMT6RWMQtxuUg== =q0K6 -----END PGP SIGNATURE----- return on first found library. CID #1445213 Alan T. DeKok@2019-07-18T18:19:30Z Files modified: * src/lib/util/dl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5a6ad55efb14ca34cde9... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAl0wo4YACgkQfQ55zXdi Hs2sfwf/XJD2IqydYCgJ0i40AlNI/TkO6JYtl1eXQutyNjtAdDEFlK1PiF+tpgTb rWVmMsGsZVWtBwdZ3vTloQ/AJw3zqa+TXNzyEe3unfaawiSOgiRHky8ceQWGKUux cDCgQKBjteoombI0HeSR0gnmUqguUSo4RhQgh+wtg6xzec1WHxXsg2OtxTa9JGwQ 5/w5sTyZt7Ubohn9vVUO3iH3Z+918JioQom2QKp6qE3i67FfgXrGKUWvTQNuX+yQ lniu3hliuzbw1P5EFBwtsC7PXqgaUgH9271FksdqboHC+2V3SLqljCALQ0mR8pxC MVhYUyo4xg6rMD3/KLblGrelMV/mHA== =kTvc -----END PGP SIGNATURE----- just box a normal string, not a tainted one. the previous commit fixes the printing routine to always escape strings when they're being printed. When tokenizing xlat strings, we presume (for now) that the input is always safe. i.e. we don't allow %{%{User-Name}}. If we do need to allow xlat parsing from tainted sources, then the entire xlat API needs to be updated to mark the input with a tainted flag Alan T. DeKok@2019-07-18T16:51:16Z Files modified: * src/lib/server/xlat_tokenize.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eeb7edb902b0d402c632e... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAl0wopgACgkQfQ55zXdi Hs0t1AgApjX8wO1LkJuiRTm772MbLP22z4icXH3nh/zErJMJ49rhTGIPbDvktUWV MaHE9fkva0z8pp1YqG0BlharpVU/6X8r6wRh4CctM3EXbEiqDqC4vcaJ+4hqOzyT 7PNAu1ImhjzAeQzyShWDrq/F8Dhve4GdBir/I8CnQwGEUVYhVwBNUUlktkJij+bu horIMpTnv3DFpWiE4iq1tiAMGPNLxjF2xFP1Er5HP7CpjBQBdUWabIrDJNeTrToZ BhUsnda3jCWs/RaLGKqVpn1M6NIvj0vBsyEQObJ8AmdlNPO/WML8cl6aBCiQTNuu GxQe6MV/rLbjuxT7ECaZy+v6FG+k5w== =jlnK -----END PGP SIGNATURE----- Revert "Respect the taint value of boxes being fed to logging functions" This reverts commit 012865619f8001b0903fa129ac44cff22e91fadd. tainting and escaping are independent things. A tainted string should still be escapted for \n and \t. And for printing, we don't really care much about the taint flag. * Code printing things to strings still needs \n and \r to be escaped. * Code copying value_boxes should use the value box copy functions, which respects the taintng flag Alan T. DeKok@2019-07-18T16:42:22Z Files modified: * src/lib/util/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/915e18f8c71fa4ec10f78... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAl0wntMACgkQfQ55zXdi Hs1riQf+P2eNLPr38U4CB+c5NaWeWuJYK0hGBAfEUqWiO1PQ4fTEuHO2GvLU6oW8 CYTgznlMqFG1M+SIFD8xj1rFobNJqml/mZRad0zMNQaknxZPVNcfhumRdW/rTMuN GsIXfobp+UAiDoc4MYQkel2COUX03hKip/Zu+vQKRTulLTWIh2eIrjxomx9VGexc 0rxmittyjcto31elww0QXWBDyEtl9Hr5qf2RwLoM1gxYm2rzjecqYDThouM08xUt GrM/2BvyCB4gM9GBVpc627pBURQKTEGB55TNrWOJoptgO9u52Efce4kM2kKxNUcD zddmCQG1q/rXWGjtvOazYu6sJouKXA== =lOF6 -----END PGP SIGNATURE----- remove unnecessary "if" Alan T. DeKok@2019-07-18T16:31:08Z Files modified: * src/lib/util/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/27f90d271f8fd36fa898a... ====== gpgsig -----BEGIN PGP SIGNATURE----- wsBcBAABCAAQBQJdMIAsCRBK7hj4Ov3rIwAAdHIIAKe/bqiiZHA75IQqWlKaeAE4 S29aNXMQNIaZThwDfK69lpEKlibJEIvZvuh4nz6Ja77OalwR//e37c+7YEAoH/S6 hs4Qe4pEo89ZeDCGf1WbHblw3bOMPBCqDK8GVVEMhP++Ids0bKu/K/WTd9rv0Dyp lOkHbk3k6PIPKnhf1TdhA0jgxjyt9V78kcOrJUfudl4FFmoaN2XhM1jOAYCswpKE 17kTyDWQUMQNNIStQWx3ZDvsHor7aFnsUdzvuj7FboyukbL1Wx76Cjh1CUuzEZUh NGh8px+6E4HQgXnGIRKVdnrZd48VbPIE9Kn51AoJbZw0LrGMaK3ZbYUCG/QWW6Y= =5I8q -----END PGP SIGNATURE----- Merge pull request #2793 from jpereira/v4/fix-rlmcsv2 rlm_csv: Fix 'map csv {}' test Alan DeKok (via GitHub)@2019-07-18T14:20:28Z Files modified: * src/tests/keywords/map-csv-lhs * src/tests/keywords/map-lhs-xlat * src/tests/keywords/unit_test_module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d23918eceaffc699c5e23... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQJPBAABCAA5FiEEupIhk69JvbrexwYHNQb+wu7Nqm0FAl0vs3obHGpwZXJlaXJh QG5ldHdvcmtyYWRpdXMuY29tAAoJEDUG/sLuzaptFdIP/3BDnUIJ/ONkCFZSaeKB J6F7lMSeIBcE1kLb1Rk/QjzfyIf6aeuZK+G2nOOGL5qOGOol8JVFDpibYNGU3A+h 4fTz95h4dRLPNv4j/z/ror12MOI+Wtk6vPBkI5itSs8q31fBLitSCeBwsxj5WCOc Le/n3xUOItrlSNZckPQaX0hjNLQ9sSe4EJyTGEymAB2HRnHWVMBmI1YpJs1qS6xH e3snJw3MJU9rJVKvhMngfAK6o4Zl01N8HQk5qmcGawLzLjXv8ALIYFdkhFXDs6Hu DjqKDx/bNvRMaUZbopfpnzbrffDs9txzscCMhB38j4aY2d0TiMTTVV3Pv9YHBes9 UzoCBzQkfsJghUHOibV3dPI0i4EjZSU9H5YUdtIe9Ziu3aPfJP1sLz9FQD6KqUhr p1VVl/N0ZUosswF7lIsbjLwxCLLVUVG7e9ImN6x1XHD36GNrsfycZIW5lR2PV59F Gbq6/aoqVE18Frl9ePD7JWT/9+wCC6qdjq3rFLSi4068DeaXTib3avPGV8F+Fv9S T1rdbCZHf/mpzbZEQrMbqzzpEp1g/k2EENp3EPPe9ImLFXK5ajFYwDO1zo8Ps+Kh w2yIbiFeAjIBHWE3nA1farrgry7p2lWcjm7lKSqcr4LR7kjuXZstzJYzlnz6TSgS tm4MwzoeRPC4o6FaGYZbz/iy =y6Sz -----END PGP SIGNATURE----- rlm_csv: Fix 'map csv {}' test As described in the csv_map_verify() in rlm_csv.c "Left hand side of map must be an attribute or list" Jorge Pereira@2019-07-17T23:46:54Z Files modified: * src/tests/keywords/map-csv-lhs * src/tests/keywords/map-lhs-xlat * src/tests/keywords/unit_test_module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e74f2ab10a0c6161cdfa9... ====== gpgsig -----BEGIN PGP SIGNATURE----- wsBcBAABCAAQBQJdMIANCRBK7hj4Ov3rIwAAdHIIAE63AReWdwE1f8P2vfmpC81d lYPViR4xOEeSZs8FBqQq0ffdN52r3gAa7XplbyAsFJVY+gwfWY/AEJUBbDoHQcKu XICQ8sFMMFWxGpVDVbrCUs9Q/+2yY1tnOmxcMfG/4BMiwka7PyB0aG6rikNZuYl+ M48SyGqMOJgsnJezf7aMYFsKs6TZtQFJ5udplOENY63LZ2SCCMqSmZwUh18pVYTi T9e4OBbteVOcwaPKhoBX0G5Er4S/SS8j+5U44R3ZkN5dYifI++gT5Ce2NsF5uapm zLZ7+pZ43D7z5aPqoDktDkjVqsEZSkz3vZU1VVb2v6zUIVzKIpsB/Frz6MhXwI0= =Y3cw -----END PGP SIGNATURE----- Merge pull request #2790 from jpereira/v4/fix-vbox Add fr_box_tainted()/fr_box_tainted_len() to respect taint values Alan DeKok (via GitHub)@2019-07-18T14:19:57Z Files modified: * src/lib/server/xlat_tokenize.c * src/lib/util/value.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/879b6b0a88216265f59e8... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQJPBAABCAA5FiEEupIhk69JvbrexwYHNQb+wu7Nqm0FAl0wcewbHGpwZXJlaXJh QG5ldHdvcmtyYWRpdXMuY29tAAoJEDUG/sLuzaptKZcP/1J26j7Z6luQv1lYcvsK XClZlZ8B3KdTy2ckZZzfFXO1rf7FQx+I9VCLznMQSBC+kmxrFDgEivol7kLjlYMI mOQzztDY3ir1sQdpnPCj1owXP8rTl0Q3Q5Eq5wef07GaMLI5Eh705KRncTzdTLNn BlevLFHLJpryn+kyjEsuoqa68UE64D13UkAQ0bvybFHKzMB9VRSYZOJBAlNbrKmA kEFtCUCCXqXjF3s31LwKkAKepit9WuIcUg7S+KuOuquWZCPVmz4l1c7FhEs2uOAA TBZ0HWVZCTmkCTqAOMGzgQRssC/JjsxlxWFL+IUxvdscPHxg/qK7Fd2rfUyMr1sF TvhoPGV+nPr4DTNqjvmOs66lfbiinx56yqpJ942DnORmhJXexBDIEVriJsWJcDJr uVjZrua1ATbTUc6B0UjobNq7j2FqXSYJ5CxIUC4mAT7nmDNmkLt6LKqdXJBF03Mw +KtBSkuNichufB8P0hGfkDLpsKw6Qf/LhZBhQ1uIlMHB9RuTplwf5x1h0H9MJ8GS 9L7Qz1WeunBqplGIEsBZZYYNne8LB1xwBx4PsnJsV7PePmQhqpdMEtxyNn0IpznJ v1MXSMMCQuKVCTCc318e/vtPYH05W15PcHaZ5ImB1qZETvUI7ny/5HjhGfjcr7UJ JjFULFjZfwkiQEbbAYI88D6a =VNnW -----END PGP SIGNATURE----- Add fr_box_tainted()/fr_box_tainted_len() to respect taint values The new both macros have an extra field to set the "taint" state. Jorge Pereira@2019-07-18T13:19:40Z Files modified: * src/lib/server/xlat_tokenize.c * src/lib/util/value.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d6efbda571600f7271889... ====== -- This commit summary was generated @2019-07-19T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).