Commit report for v3.0.x branch
New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbLMDAAoJEH0Oec13Yh7NzKoH/RoL8gE3CGdehTPdTEI3MDW1 Q+hE/pQJEJyr21mU7MT83oCI3Yb2uLoiSk/uz11+pP8kndITb0Ea+vvCPUa2Px4Y legfa1VmWnT5INWi5fp0zB1EmSFY73akFGXPsRLsOpH+CkCUUxQ3/HFGMIwsaq+x cY21oawx169ebjzmbu/xzsFyh15d/HeLVjqagP/7rpcLj3UFxqUqgTkwa+BEy6L9 JxzY85iyAG9sLdynwkMg7kychENh+/sjuRpFGvWrS45FNBXOZqoOt0T90iW1uUuM 2WdlVkRW55zlTwmhZ8l7akbgcWJYAw9Hq5v8NZyCgBPt6FzCVxiQnICr4zkdACs= =mJi6 -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:52:16Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d253cf86d79b024ff6837... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbLL/AAoJEH0Oec13Yh7NUrAH/1rxMTHtWci09TkxZnkgZQfS 46eBu9ICAbgiY2jGLpP/oiTJnnxwORDSa1SxMbY1+r9/Wh/eVDi4eORtfmBbKgD9 6aZ3C+dSTZlFHsSPOwFSRdCbW/C5TwNPdNkm7p3PFbmwQAuHjIx4bz+Qe+S0EXKy s7eJUfe2HIxRz2cKF8SpT6FR9ATWCwcKANxRX88c95SHVEkRBc5WXFoeOatxlRjD ICA7ujVWzDv0kUcIXBXENECisKSzqmrP8CsRN5kgcrgXzNe/i4TYP5xdjRmiMwpI OLfJDlkS3N9kvt+JmS2OsPDfVFCWIP2iE2NZZVauZ5mUMzxCguF2lqcguwGDok8= =Cna8 -----END PGP SIGNATURE----- FR-AD-003 - Pass correct statement length into sqlite3_prepare[_v2] Arran Cudbard-Bell (via Alan T. DeKok)@2017-07-17T12:52:15Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62f7d2885ad02911f0ae7... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbLL/AAoJEH0Oec13Yh7N1NsH/imV3W+lsGB1QpmCxOZTCCGs ZgcfJ7cpAQTa1exMrGwVE380DHo8iaO+6yb91leekPLTsofoTYQGFbj35ZsCsD/D QwAQB9MWxbMW5rSFThgIy43Tnc6yAgAQxFx97c3enCST4KLwZVkM7sIgBTwbsK/Z vssi/OY4J6xXP266urgvSb+h/xxmdfmuaBUgkP6eFFrxXn7ifRwhZVrZBpBEyrbs AHVZTri0eocj8yNyYpCRHne4WVHOVFfZkVweNlr3DqXNmWFrQf0yKdsV4nniTXDe OIJyBGFSMJybhP6eMhIgJzXUZiWuoeMqoBV050S67D79EJVBBMrC1YtPr49xpKs= =fSMN -----END PGP SIGNATURE----- FR-AD-002 - Bind the lifetime of program name and python path to the module PySys_SetPath and PySys_SetName don't appear to duplicate the buffer, they just store a pointer. Arran Cudbard-Bell (via Alan T. DeKok)@2017-07-17T12:52:15Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a1eccee1872b4019e98e3... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK/HAAoJEH0Oec13Yh7N2L0H/iEhlte4iVQJlRr8G40TjtJm /iMInmhh4AMs5dpYxH0nxWfvKwzf7+hIypZCMqb/zaBGIpoegQvZunmft3P/5D6n ZlN7eo1xhkVLKvfkngAfMJjO985OWN0IHTCFmitVvIPZQZhrBXkP0l22VpjCTCcc 2k0TX3GsJ9i3xNh9PZUsOP635aFcnGStvZazfNTtGfgfAHCEk4Yy0Fy3WuZZ2wJa Q+pwnPIP8R0KBBj9K/Ag6PZZbr7XREHdVh0SNHUK2OKX4jkA6MHcjzX6SkFYDsi4 nZCWg/efcbDGSEwi0eqY1jEPtNj8Ys3tthMYusM4rne8d+YcAVywGLonppgm2bY= =9xPE -----END PGP SIGNATURE----- a normal ASN1 time is 13 octets YYMMDDHHMMSSZ Alan T. DeKok@2017-07-17T12:38:31Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd1d40e1501ff32f3ac68... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK/AAAoJEH0Oec13Yh7N+l8H/2x0jiwOBjIOf93A0HWQUJd5 azcsGsXszUK7Rvgx7QwY9a5AjecGDicOTlc2ZI4ipm3FqxST6wdxIjXFQfzfX2vO A/PPictNfp9css34LC0cdrqoOqCjgknzaceLCabIPxPYWZJuEqO8BzBWwzanf+6B 1FYahnOyuExSOd9YtWYa4x312J2aFI0OB+8qEysD580J4K9GPJmSSTTg/d88Xc0X ga/6LPc5nYceji/2z2rNihdcC+HvTRl+XHqw1qD9HjrDdnF7XCSsW0UFqEUgS5kJ kWJOKtdijfMG1mxso3GEv+33vwWc9Ii5UnzTO9478K4SvAgd6thpYrJLlpIRjVE= =WsP4 -----END PGP SIGNATURE----- be more flexible about truncated ASN1 times Alan T. DeKok@2017-07-17T12:38:24Z Files modified: * doc/ChangeLog * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9571d949f5f2b3e634b17... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK+5AAoJEH0Oec13Yh7NgTcIAJ7AG93S8CM/IMqjSci7yRac pzGe2+ig7p9fkcl4cGHZJnRvhp50IDCsplfwtIOL5LGJ1Sz1A3YyzbL0M60XZ6vQ xyM5cHTvCj1jTTeCETXYHO57I72+qCLE1apo2tyjAXIh3oRaoB5gLvqIs+vifacr 5Y80QrLD0mkOSuJU6bnXve7jgRdg5Hhqq1x3g38OdPQGDbEbjQYWNqVr4n4Qdjvm 1eQPegwysBBgqQVn7yEXoVuplwIxRD7csKbUmuCgV/vHVSga3UNYrx6TvOiKCb+i i7zWQWU8RX7Fa08v3HXPmR6HvLmZODo9lRbN9wlfnzWaXzM2dMjcCljTqs9bt8k= =tKkt -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:38:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c62f2ad2b06c3588be22d... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK9zAAoJEH0Oec13Yh7N9mMIAICH01rmln9rFdhck04Jw/m6 wpoMnWSB/hYefzRDrpZSzee8L25izUrN1jXeK+ZBuje4iLcyym164N7AC13GFx9l Axod3bHwqkZBwOvmModBGaUa/LKOrHrY14acvNRWODg2W6oKKJPXhdIFJB7wZrd9 HrE1oJtpRAu15rw9SnZsFXLTxklgJc/ETkjmcrT/ApeTtkevgledMrRUcTqCjYru NSo1fuQNJlvPhMaLvzGrmiB1A+aIvPOMBWSWHfku4g5rtbZZe2F2Rq5V3Xg3ic/p 9fgbpzQfh1me8pMtr14DKaODmPYRyaovIorm36Y3qR3xQO0xdar9w2/XQj2a5D8= =yXDF -----END PGP SIGNATURE----- remove deprecated configuration item Alan T. DeKok@2017-07-17T12:37:07Z Files modified: * raddb/radiusd.conf.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b62e7e2d14782dc70e50a... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK9pAAoJEH0Oec13Yh7NvRIH/2Zdb3ecrkug6JynRN72xKDC nFKoWVCIt1kplFTWHIkx2DEcgShl1iIiroRvUhV/q4w/DNxZM2opREyukrvJCNB1 cywztzJ/CaXDaz62EOassjf0rCtmO3y2MBLVq4xYfADS1dpkIe/ydbekzN++kMZZ 3xUuwidpc6JH3T1T+ZTuDvB7o2yVKPP//EkIdZjeW85PULh8QdGyftaLNl+dissY 5I/LzSfLnQe6DTkuxHYfVtvHgG00C8jeaMnUfaD6PhT4AyVsVMQ2nBixh64fvd1Q Ad6SJ29FC8PPs/EiqNr4S3MOgv1uYYk4HrEQdEz4lTKphVWQ7yDcqG/W/xh28gI= =PETM -----END PGP SIGNATURE----- print error on deprecated config items Alan T. DeKok@2017-07-17T12:36:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb521413c89e21d367166... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK9kAAoJEH0Oec13Yh7NY2AIAIJBbLFxxnAgYIE/vhg1EEeD e5XZgAYZW5rM7VOtuiXwNK+365V7KGCbw3scKUYylSa45KT60BtiY3Cy2UvnnYMw DFtAm1l2NSfeF6WOGfJ6OGVJ89ghMTdpmg8kyWRR9jJ8Ll0FW1BjnO2MEGa58k5j DpprcR8lCkV7l+X6f6PZP1BqWn/osXNHA3BHbHKRk6saYr8ahgsZNzgYlP54sfvY PnTqX4FEUwB0XF+WZS/UAwoZcP9KaXx8fxyGbf8z+S/4KOWv1RUtYqa5BIqa94wt MnrTOvktzag7fPk2/aPsJ5rxwoJbSU4GAC37+gVuNwu21SxL6s9K4vXtwgGP6XU= =/gUP -----END PGP SIGNATURE----- print out why we couldn't parse the expiry time Alan T. DeKok@2017-07-17T12:36:52Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/58c20af91a9967d131a5a... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK9eAAoJEH0Oec13Yh7NrlUH/j8/R20AiU+/Wmxxj4/A2yuz eiWHziRSTcWQ4yxlS4jMQXbpdFlZ2WEUO5H77tDh+UM+tzIEB0bU9NVrwYviV62I I2LXS/rUqx63/PFV1dMPGRAyJK/1OaEGHAwKD57bsR1fCg3N9Q/qJhK6Yg0Y9cqy mXKhwsvq6UCxpohttrUomzerjztzWHCEnTLXc3B2ix5Msg4epQtHvVlGVLXD0Vwh uHuSI5Aync2ir6Ea1bTvJkQKanokKg7dICzvmTNutqD18AKN/ky/aciaiF4Nic6B pNp0E5mMJuOKqH5PVt2MZeJgm1P+3OBoeR6My74es2ogslH6d+iBy1WPg6Lwjng= =je8a -----END PGP SIGNATURE----- swap checks for people who get excited over multiple messages Alan T. DeKok@2017-07-17T12:36:46Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a01e1d60d4bcd36c200a8... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK9OAAoJEH0Oec13Yh7N6+UIAI5jOAHDQJZirmc4uLmzPoS/ OAZpGgTvy+gNXpP+9nwA01gJ8vbe602SO3mLoDSJBMOawD6Ufu88JMBilAsNzdyx VDwHzAVnmsfh4TMvMt4sE8WahFx6P8lcfvoW6ALw79ow6s7Ec6q8AqjIHrxpMGx3 zLv7fAX+CgY+qICHR93jQPIBncbZXc31WzC2ROBwa5c6wkMpQdzn6Qdahi1rE2iF liFSVE85xmHqKDfglhcrtfezaC8KiGSUvxlWyxg875tD/1KUYGdzHqXJV6LP7v3b tnx0K6t1XEPXi/SUy1NcvFRI6PX9msqOcTKz++M+QK2esj8vnRAnt2/VbnJssM4= =yrnU -----END PGP SIGNATURE----- FR-GV-305 read the correct offset instead of uninitialized memory Alan T. DeKok@2017-07-17T12:36:30Z Files modified: * src/lib/radius.c * src/tests/dictionary.test * src/tests/unit/wimax.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de3b3b2e4153db26442fa... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK9IAAoJEH0Oec13Yh7N7BsH/08RkdSkSK/AQ4lfFP5MBEvu uQtQCSeSPnfrUUNE6hdQPwqhVNFNndM1l0z6Y9LOXHRszW3zEW+JkL8sWk9VF963 oeuMVk5n2niuDEn41pwJ6ny/pmYPj2hyQE0M4WhO7dfRbiMrpLY+XQAcQ0sHyLpb /R2WDZk4DLoMmDFeO4liYz8u+McdOF4ty6dabrNZ5QrkS3GVUJi+nkAN5c1Bre/G Z+1o39egDlryy3aLx/gZvJ6baEgq66Lkgm2e4g/IJQ2JTTdc3IBpP2aJrJa4IAzi f4WhPoaAKKq+klpzSzhwn0/g5HnzTYZMa5ppXN3evT1FNvkEYKIQevtkzU+WyAE= =nJX8 -----END PGP SIGNATURE----- FR-GV-304 - check for option overflowing the packet Alan T. DeKok@2017-07-17T12:36:24Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/19a18bf7c8af649c9e974... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK8qAAoJEH0Oec13Yh7NejoH/jVpMpBJ5U4V+PUTEg2unv8J Fksw2NHNhyE40IRH8JsFu8TKr6r06KSTecUKd0vzsa+ShEyg0jBWCFhItJf7oyyX KZTept57efyi463/acVJ88j49GjUBXA+HgEJYt96oxlHmJFm93HCDDcTy7rmlJoD 820gxw94XAlHE0WirXLA08vLeRgpK7TXYM+nHJBSpepVtx7bair0/J5uPfYhKwYh 3DGuFA+2bLD2z0InwJ+S+3QjiwMzAJhBbxOzs/gC3/JL3yOwZFaVipqj32M4P8Fr NZZ5552jKPBO6G9H6dsnE6glSGoq9oNnpcVPrv9Dq0ErDFdF2cQC2F9lyfyZ5Y0= =Pms5 -----END PGP SIGNATURE----- FR-GV-303 - do memchr() of end-p, not q-p Alan T. DeKok@2017-07-17T12:35:54Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21e2e95751bfb54c0fb03... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK8bAAoJEH0Oec13Yh7NEQsH/jqRQE+KaBciKxQPWyGz26BY uNLv7H21u5Ea/oKy3g2dhYTPFOtfPxX85AQQ8t+40B6lozfnUXB4sdH28p7H3IBP t5ULnO17j+JQl6TrJqnMnOYzEthG3dBx5PBHLKYfGHt02WtwJH/X5QWCrZhFfAYr fgpM36QNSYidpPYybWwm1CUBJyYUm03/vRzZWlqK1QGdXJGrrSWlQwawbidYzj9F 6xZmQCANBozGjgK1ih+ullE7DrTaLIyQh7oJ7SOU8U3Pqnaz+IkEwEj4dpBT2Zvo K1IJkPas5SrVZiaustEtXYC0JT8ZZtyOOY6HgnIaltSXmlx1xPyHtHPIx8whIN0= =tJ7Y -----END PGP SIGNATURE----- FR-GV-302 - do checks based on pointers, not on decoded data because decoded data may be empty Alan T. DeKok@2017-07-17T12:35:39Z Files modified: * src/lib/radius.c * src/tests/unit/rfc.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6726c16549b131ed39f6f... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK8XAAoJEH0Oec13Yh7N3lQIAKBvKqSUyFm7yZhILQ0erUN/ 5ubJe95V/pnV7lJbgB+eplw7s4NhgZvgcut+B6gsamnxgU2+dEfR4QDmNUtiNIpC 2LJwjAt00jogJaN52S2bP+hNPtHCtDpdo1cuefbKHGMW61Rf5Px1G92kXB/ziDyq 8MFC+DtQD5VLynJCsBbdZHqn8k9y67tdc+BANwqVJaainkokfwo/93hreyatGBBq 6DtVlb2sZ1KlrOgJW3P6wUMnD4Fbs67/nr7yEXMQrtwMS75q83i3f6wC1SV+uFeP fckUKaanPMO0QFn9zzgB3rWZHSQQ7CrhtTIU5TbEtnmw6XAg2Hk5Hl8fSC2XdtI= =xvcb -----END PGP SIGNATURE----- make data2vp_extended() be more like data2vp_wimax() There is no exploit, but making the code simpler is good. Alan T. DeKok@2017-07-17T12:35:35Z Files modified: * src/lib/radius.c * src/tests/unit/extended.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b059296e14b6ab75dc17... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK8RAAoJEH0Oec13Yh7NUr8H/0s9kkkn95JIR7tzA1TzioK+ em7/Hrg6v978sN+9OnV+ZupgiUB6u+Qk/xgG+Ez/cighO+FyiqzGvhF5JzJQ+5hz h6bzF/1XZ8OTNbO46Arl3V26/b9bkYlk3W6yIkAYu0VITJXgwuzxA9m9kPwrBsac jx6HWy06yXNm20/QEdpzPvMLhP4KzNsACtQfAN6Mjn8GSmka8fP+5vJseXbALnBM 7WGXKi15EjE56s4PBVP4+IEO3iE+k1ClFM7hMVLq7A67XCbY0BvU6+H9k+niZ5On ji7YoXXl4bQcLW2wspG6HxfdyPO07BySo5iY8KYNuHXdj/lRyGF6hDChlfHeE0o= =RDcP -----END PGP SIGNATURE----- FR-GV-301 - handle malformed WiMAX attributes Alan T. DeKok@2017-07-17T12:35:29Z Files modified: * src/lib/radius.c * src/tests/unit/wimax.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/931850e5d2f65193520c2... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK8LAAoJEH0Oec13Yh7NyxkH/juRqoiKLRsaS9hxcXefvuOB d1z632Iy3CqlAvro/KInSQVlXeyQwHJI+ujPixiSwbUrBQA3lZmGNxBKrDuc5aHr 1AdO+cDvjTStOjzt7m7t2wyp5Mabt35/Qwf9eJV616LazbeeIqlznwIzo1UQSmy2 svACwjEuM4Hw2gdK3EDg1BCbttLK0HLJ6QEaJ5LdX2tI832jW2nAwlko88Z2Zwa5 VxixYedDk5oFGkfNebTzSMXKhpF7uz/xlfsxkNGGRKLYuIeoD3gKpAkK3ZDBDlSs 3Ww9Ao9HRPby4Hs64zSb2eCjS4N9BTRHqVlXzIuoj86DHL5FkMTWkw2FkDqQaWc= =/7BH -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets), and check length Alan T. DeKok@2017-07-17T12:35:23Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5759b20af99af6d30924f... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK8DAAoJEH0Oec13Yh7NPJwH/0L1aYBj+6wFBgcMJI3LeV/c j4I6ZIH8EYnYWl6ZRl8LdY6c6Kz/WVZZfEb0tWgFll9GLezpWh+Orxd+C0YEtaus 2dqRcx5n7anLTQ8Y1Mr+m+0rMbdlABRKbn38JUK2aWPmQwazmuTUHvcFAhKiwsKr BOTkTmyokbYlcgLa2SKTxgU9+AOXc9RtA//ZVXbS+tg/RkfX31WNP1Dhz69n4Vlg zBFKxbo/D0Xd1DpEobLRyQyCOiQoaeIb8udTxRMfkO1QMklZKGyCs0Ost9H/mUHf myrmQ2Q+BxUXSfOZP0qj6Yx37xCN2DUbqHse+83BGTefwZf1FYrlO1eYgthzjmg= =BvDq -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:35:15Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc8662d7e827f630d515e... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK7bAAoJEH0Oec13Yh7NpvcH/RDB+MGpAHAnd2F2IVhzuRxX PedD4u3mtGeH+syrlmjuW/JswxzyrHYgjWW/iWscVF6xJC5raSlV0vXczVvRnU00 eNRKVXSQVEZj0Km/4H3bfiaKmcs4CiH4mC8VojKKHH1AggHLQ0pkYNf8HHoc37eR mm3pFUzZbEpI9H5eS+VbyhztWF8jyCSzu/iFx5SYuYHSTK4udx29xDN/MQq0bd9W Hx7NVvRbm/CcnAgZSjCbV2zhj9ZNeoqBJ+YyUenAVBX300/lyy7/AfmIyinHB/Fl QBjlbumQYNNGgGAgdpguNKggb8pC3fUJ7ljB2pF9QjfiKL/skQe1FPxbN+bRHIQ= =hgA4 -----END PGP SIGNATURE----- FR-AD-001 - (v3) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:34:35Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/41dfe9f0ca550ceb5f152... ====== -- This commit summary was generated @2017-07-18T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).
participants (1)
-
announceļ¼ freeradius.org