Mac OS X EAP-TLS with wrong usename kills freeradius when check_cert_cn is set

Miika Räisänen mraisane at gmail.com
Mon Jan 22 08:05:34 CET 2007


On 1/19/07, Alan DeKok <aland at deployingradius.com> wrote:
> Miika Räisänen wrote:
> > Heres coredump gdb logfile
> > http://cc.oulu.fi/~mraisane/tmp/gdb-radiusd.log
>
>   Well, that's pretty clear:
>
> #0  0x00e97899 in cbtls_verify (ok=1, ctx=0xbff1e330) at rlm_eap_tls.c:257
> ...
>         handler = (EAP_HANDLER *) 0x1
>
>   That's not a valid pointer.  It looks like the handler is being freed
> somewhere.
>
>   Try the following patch, and run the server in debugging mode.  It
> won't fix the problem, but it might help track down where/why the server
> is freeing an EAP session that's still in the middle of doing SSL.
>
>   Alan DeKok.

Ok, patch applied and heres log files:

radiusd run:
http://cc.oulu.fi/~mraisane/tmp/radiusd.1st-patch.log

and gdb after core dump:
http://cc.oulu.fi/~mraisane/tmp/gdb-radiusd.1st-patch.log




More information about the Freeradius-Users mailing list