accel-ppp.git/accel-pppd/radius/packet.c, branch 1.15.0

radius: authenticate replies against the request on the wire

2026-09-07T19:08:04+00:00

Verify replies before callbacks and server-health updates. Keep the secret with the request and centralize accounting signing after server selection, including retransmits and Accounting-On/Off. Reset the outbound Message-Authenticator field before recalculating it on retries. Adapted from Ritika Chopra's accel-ppp-ng PR #40, T8526/T8545, with upstream's OpenSSL API and secret-reload ownership. Existing accounting callback lifetime fixes are retained. Co-authored-by: Ritika Chopra

utils: centralize unaligned integer accessors

2026-09-01T06:08:47+00:00

radius: harden packet integer decoding

2026-09-01T05:55:54+00:00

Serialize integer fields via memcpy, restrict attribute parsing to the RADIUS header's declared packet length, reject undersized packet lengths, and reject truncated attribute headers.

crypto: drop the dangling crypto.h symlink and its last references

2026-08-12T07:42:35+00:00

c912d090 ("crypto: Removed internal tomcat crypto.") deleted the crypto/ tree but left accel-pppd/include/crypto.h behind, a tracked symlink to ../../crypto/crypto.h which has pointed at nothing since. backup_file.c still includes it, so it fails to compile with fatal error: crypto.h: No such file or directory That goes unnoticed because accel-pppd/CMakeLists.txt has ADD_SUBDIRECTORY(backup) commented out, i.e. backup_file.c is not part of any build; the breakage only shows up for whoever re-enables it. Include instead, which is what the file actually needs (MD5_CTX and friends) and what c912d090 did for every file it touched. sstp.c and radius/packet.c defer to crypto.h for the rationale behind their OPENSSL_API_COMPAT define. Spell it out locally instead, and point at the project wide ADD_DEFINITIONS() in the top level CMakeLists.txt added by c1689506 ("openssl: suppress deprecated API warnings"), noting why the local define is kept despite being redundant with it: it has to be visible before the first OpenSSL header. Then remove the symlink, which nothing references anymore.

radius: Invalid integer and date parsing

2026-02-06T16:09:44+00:00

Actually 3 fixes in same place: INTEGER: size mismatch now breaks instead of falling through - a malformed INTEGER attribute is rejected rather than silently parsed with a wrong size INTEGER/DATE split: each case has its own break, no more fallthrough DATE: strictly requires len == 4 (per RFC 2865), warns and skips otherwise instead of silently accepting 1 or 2-byte dates Signed-off-by: Denys Fedoryshchenko

radius: Fix invalid check after mempool allocation

2026-02-06T16:05:35+00:00

This check left old, relevant to mmap, migrate to proper check. Signed-off-by: Denys Fedoryshchenko

radius: Vendor attribute parsing over-reads

2026-02-06T16:02:00+00:00

When parsing vendor-specific attributes (type 26), the code reads internal structure without checking that the attribute data is long enough. Signed-off-by: Denys Fedoryshchenko

Merge pull request #267 from nuclearcat/fix-ssl-warnings

2025-11-28T06:39:54+00:00

Suppress OpenSSL 3.0 deprecation warnings for legacy crypto APIs

fixup! Add RADIUS blast attack protection with Message-Authenticator

2025-11-26T18:29:52+00:00

Not a bug, but to supress warnings. Signed-off-by: Denys Fedoryshchenko

Suppress OpenSSL 3.0 deprecation warnings for legacy crypto APIs

2025-11-26T18:23:38+00:00

We are using similar approach as in other projects, easiest one, but probably in future it will break as soon as this functions will be removed completely. Signed-off-by: Denys Fedoryshchenko