Bug 257217 - net/freeradius3 update to (Fixes "Bad talloc magic value" issue)
Summary: net/freeradius3 update to (Fixes "Bad talloc magic value" issue)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Ryan Steinmetz
Depends on:
Reported: 2021-07-16 13:28 UTC by Marek Zarychta
Modified: 2021-07-16 14:18 UTC (History)
0 users

See Also:
bugzilla: maintainer-feedback? (zi)

freeradius update to (15.21 KB, patch)
2021-07-16 13:28 UTC, Marek Zarychta
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Marek Zarychta 2021-07-16 13:28:30 UTC
Created attachment 226497 [details]
freeradius update to

"Bad talloc magic value" issue has been fixed upstream[1] but we need to wait for the next release. This issue is really nasty and we should fix it. The upstream has rerelesed 3.0.23 packages to solve this. We probably have to deal with it on our own. I created a patch to fix this, reorder docs and connect totp examples.

The typical occurrence of the issue looks like this one:

talloc: access after free error - first free may be at src/main/state.c:364

Bad talloc magic value - access after free

talloc abort: Bad talloc magic value - access after free

Backtrace of last 7 frames:
0x80033b43f <fr_talloc_fault_setup+0x8f> at
0x80071229d <_talloc_get_type_abort+0x11d> at /usr/local/lib/libtalloc.so.2
0x258b26 <fr_state_discard+0x266> at /usr/local/sbin/radiusd
0x258d15 <fr_state_get_vps+0xe5> at /usr/local/sbin/radiusd
0x22feef <rad_authenticate+0x23f> at /usr/local/sbin/radiusd
0x264815 <request_inject+0x365> at /usr/local/sbin/radiusd
0x262b80 <exec_trigger+0x530> at /usr/local/sbin/radiusd

Comment 1 Ryan Steinmetz freebsd_committer freebsd_triage 2021-07-16 14:18:47 UTC
Committed, thanks.