Today i have tried to define why rlm_passwd make segmentation fault.
there are bug in allocation hash-table for pointers .
There no memset after allocations. so all pointers are garbage.

There are another unknown bugs in rlm_passwd. I don't know where.
Tomorrow i'll find it.

But today i offer to change rad_malloc.
Adding line
       memset(ptr, 0, size);

before
       return ptr;
in function rad_malloc() is good, IMHO.
It's make code more secure.

If no, say why.


Mike


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to