rlm_perl and CHAP authentication

Alan DeKok aland at deployingradius.com
Mon Feb 12 11:02:14 CET 2007

Tomas Hoger wrote:
> Regarding changes in rlm_chap - looking into the code, I see you have added
> explicit pairfind for CHAP password and vp pointer is stored in chap.
> However, request->password is used for length checking right below and
> further down in function.  In worst case, this can be NULL.  That's what
> happened with previous version of rlm_perl.

  Fixed, thanks.

  Alan DeKok.
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog

More information about the Freeradius-Devel mailing list