Bad talloc magic value inside tls.c:sess_free_vps

Alan DeKok aland at freeradius.org
Tue Jun 24 20:14:00 CEST 2014


Phil Mayers wrote:
> Oh also the tls-config construct means "cache.name"
> might be shared by >1 module which may have the effect of allowing e.g.
> a peap session to be resumed against the ttls module with crazy/bad
> results. There is probably some way to avoid this...

  Hmm... that should probably be avoided, but I'm not sure it causes any
issue.  There's no protocol-specific information saved in the cache.
It's just a TLS session.

  Alan DeKok.


More information about the Freeradius-Devel mailing list