Patch to server list initialization for FreeRADIUS client lib 1.1.6

Scott Neugroschl redfloyd at gmail.com
Wed Apr 21 20:29:32 CEST 2010


DESCRIPTION:

FreeRADIUS client library 1.1.6

In lib/config.c, in set_option_srv(), when the serverlist is allocated, the
allocated memory
currently isn't zeroed.  This shouldn't be a problem, as we only search up
to serv->max, but
in rc_find_server(), we check to see if {acct,auth}servers->secret[i] is
NULL.  If we don't
zero out the SERVER structure upon allocation, this value could be non-zero,
and the test for
NULL could fail, leading to segfault.

The attached patch to lib/config.c addresses this issue by zeroing out the
SERVER structure
upon allocation.

Scott Neugroschl


-------------- next part --------------
A non-text attachment was scrubbed...
Name: config.patch
Type: application/octet-stream
Size: 219 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20100421/d8be5754/attachment.obj>


More information about the Freeradius-Devel mailing list