ppp RADIUS accounting bug

Boris Kovalenko boris at tagnet.ru
Tue Nov 18 20:00:22 PST 2003


Hello!

    I found a serious bug in RADIUS accounting code. The problem is that
OctetsIn and OctetsOut are defined as unsingned long long, but the 
RADIUS supports only INT32 values, so, when
we're doing rad_put_int(r->cx.rad, RAD_ACCT_OUTPUT_OCTETS, 
stats->OctetsOut) in radius.c for OctetsOut (and OctetsIn also) we 
loosing information if OctetsOut is greater then INT32_MAX. This should 
be fixed.

Regards,
    Boris




More information about the freebsd-stable mailing list