rlm_perl DEBUG log with garbage output

Alan DeKok aland at deployingradius.com
Fri Jan 26 10:37:10 CET 2007


Bjørn Mork wrote:
> Try this patch:

  Looking at the code, it appears the strncpy is even more wrong than
just adding "+1".  I've committed a different fix which should avoid
other errors (like potential buffer overflows with data taken from
rlm_perl).

  It's only exploitable by people who can control the Perl scripts that
the server runs, so it's not a real problem.  But it should be fixed.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog



More information about the Freeradius-Users mailing list