diff options
| author | YASUOKA Masahiko <yasuoka@cvs.openbsd.org> | 2014-07-08 19:00:13 +0000 |
|---|---|---|
| committer | YASUOKA Masahiko <yasuoka@cvs.openbsd.org> | 2014-07-08 19:00:13 +0000 |
| commit | 7bb2c1e488ed987b1a070f60d06f8e3b917f7d17 (patch) | |
| tree | a40b2e6fb30624ac86229ea63b43d62aa33d607b /usr.sbin/npppd | |
| parent | a9898872a894d1b5868c354552bc1a194d258073 (diff) | |
Fix a double free bug in parsing the config. It had occurred when a
syntax error exists in radius {authentication,accounting}-server
configuration. No need to free curr_radconf because it is a part of
auth_conf.
Pointed out Vladimir Seleznev
Diffstat (limited to 'usr.sbin/npppd')
| -rw-r--r-- | usr.sbin/npppd/npppd/parse.y | 15 |
1 files changed, 3 insertions, 12 deletions
diff --git a/usr.sbin/npppd/npppd/parse.y b/usr.sbin/npppd/npppd/parse.y index 0238acffea3..5a9238c9af2 100644 --- a/usr.sbin/npppd/npppd/parse.y +++ b/usr.sbin/npppd/npppd/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.11 2014/05/07 08:07:53 yasuoka Exp $ */ +/* $OpenBSD: parse.y,v 1.12 2014/07/08 19:00:12 yasuoka Exp $ */ /* * Copyright (c) 2002, 2003, 2004 Henning Brauer <henning@openbsd.org> @@ -679,9 +679,7 @@ authopt : USERNAME_SUFFIX STRING { YYERROR; } curr_radconf = &curr_authconf->data.radius.auth; - } '{' optnl radopt_l '}' { - curr_radconf = NULL; - } + } '{' optnl radopt_l '}' | ACCOUNTING_SERVER { if (curr_authconf->auth_type != NPPPD_AUTH_TYPE_RADIUS){ yyerror("`accounting-server' can not be used " @@ -689,10 +687,7 @@ authopt : USERNAME_SUFFIX STRING { YYERROR; } curr_radconf = &curr_authconf->data.radius.acct; - TAILQ_INIT(&curr_radconf->servers); - } '{' optnl radopt_l '}' { - curr_radconf = NULL; - } + } '{' optnl radopt_l '}' ; optport : /* empty */ { $$ = 0; } @@ -1424,10 +1419,6 @@ npppd_conf_fini(struct npppd_conf *xconf) TAILQ_FOREACH_SAFE(tunn, &xconf->tunnconfs, entry, tunn0) { tunnconf_fini(tunn); } - if (curr_radconf != NULL) { - radconf_fini(curr_radconf); - curr_radconf = NULL; - } TAILQ_FOREACH_SAFE(auth, &xconf->authconfs, entry, auth0) { authconf_fini(auth); } |