freeradius 3.0.15 memory corruption

[Fajar A. Nugraha]

On Thu, Sep 7, 2017 at 5:37 PM,  <petr.linke at seznam.cz> wrote:
> Hi,
> I tryed eapol_test, and the eapol_test succeed for username with length more
> than 5 characters.
>
> Here is command:
> eapol_test -c ./eapol_test.conf -s SharedSecret -a 10.255.246.120


> (9) eap_mschapv2:   authenticate {
> (9) mschap: Creating challenge hash with username: abcdef
> ...

> (11) Finished request

Did you cut the post-auth section? Or did you use a different config?

>> (10) # Executing section post-auth from file /etc/freeradius/sites-
>> enabled/inner
>> (10) post-auth {
>> (10) if (1) {
>> (10) if (1) -> TRUE
>> (10) if (1) {
>> (10) update reply {
>> (10) User-Name !* ANY/lib/x86_64-linux-gnu/libc.so.6(+0x75bb6)[0x7
>> efef0171bb6]
>> *** glibc detected *** freeradius: free(): invalid next size (fast): 0x
>> 0000000000b61230 ***

On your original post, the problem happens on post-auth. And
changing/sending 'User-Name' in reply looks weird.
What is your actual post-auth section on /etc/freeradius/sites-enabled/inner ?

-- 
Fajar