Mojahedul Hoque Abul Hasanat <[EMAIL PROTECTED]> wrote:
> rlm_sql.c does the proper escaping. Then uses radius_xlat, which
> uses decode_attribute which calls valuepair2str and we finally
> arrive at librad_safeprint. This librad_safeprint does an extra
> escaping by doubling the backslash "\" and hell breaks lose.
Ah, thanks. That is a serious bug.
> If I haven't missed something, radius_xlat should be changed.
> I'll hack up a radius_xlat_sql now.
I don't think so... I think that lrad_safeprint should be fixed. If
the problem characters are ALREADY escaped, it shouldn't do anything.
And that will prevent the same bug from happening elsewhere in the
code, too.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
