Glitches in the expr engine?

Arran Cudbard-Bell a.cudbardb at
Tue Mar 7 17:28:20 CET 2017

> On Mar 7, 2017, at 11:15 AM, Stefan Paetow <Stefan.Paetow at> wrote:
>>> Everything so far, so good. Then I ask him to use a random string as the
>>> salt (which contained a closing curly bracket). The output was definitely
>>> *not* what was expected. This example below (salt = 'changeme}')
>>> illustrates the problem:
>> Yes, you need to escape curly close braces in xlat expansions.
> Would it be safe to say that if I add another check into the output to send a reject if the output contains a { or a } (which it never should), it should be acceptable?

I'm pretty sure it's only an issue if it's '}'.  But sure...


Arran Cudbard-Bell
FreeRADIUS Core Developer

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <>

More information about the Freeradius-Users mailing list