Null pointer deref

[Daniel O'Connor]

Hi,
I am trying to get FreeRadius running on FreeBSD to handle WPA from an OpenWRT 
box, but I found that FreeRadius would crash when a request was processed.

The strcmp's around lines 1630 and 1659 can be done on a NULL pointer (eg 
mainconfig.do_lower_user) which causes a crash.

It is trivial to add a 'mainconfig.do_lower_user != NULL && ' (or similar) in 
front of these strcmps.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
"The nice thing about standards is that there
are so many of them to choose from."
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20060501/c4495225/attachment.pgp>