31 Mar
2015
31 Mar
'15
10:02 a.m.
If the attributes from radgroupcheck do not match paircompare() returns a value not 0 and then entry->next is not defined, but we still jump into the next iteration and possibly pairstrcpy() segfaults.
rad_assert does not seem to do anything, because NDEBUG was set during compilation.
Is this a bug or are we doing anything wrong?
Alan pushed a fix. https://github.com/FreeRADIUS/freeradius-server/commit/08688632abef67e1e8b4b... -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2