The following lines of code can be found in handle_avps() in avp.c:

        if (avp->attr > AVP_MAX)
        {
            if (AMBIT (avp->length))
            {
                log (LOG_WARN,
                     "%s:  dont know how to handle mandatory attribute %d.  Closing 
%s.\n"
                     __FUNCTION__, avp->attr,
                     (c != t->self) ? "call" : "tunnel");
                [..]

IMO there should be a comma between %s.\n" and __FUNCTION__, otherwise
an attacker could bring down l2tpd with ease.

Thomas Walpuski

Reply via email to