Bug: Crash on Access-Reject due to double free in radmsg_free #171
Description
We've observed an intermittent crash in radsecproxy following Access-Reject responses triggered by OpenSSL certificate validation failures (e.g., expired certs). gdb backtrace:
#0 __pthread_kill_implementation
#1 __pthread_kill_internal
#2 __GI___pthread_kill
#3 __GI_raise
#4 __GI_abort ()
#5 __libc_message_impl
#6 malloc_printerr: "double free or corruption (fasttop)"
#7 _int_free
#8 __libc_free
#9 list_free_helper_ Or list_shift
#10 freetlvlist
#11 radmsg_free
#12 radmsg_free
#13 sendreply
#14 addclientrq
#15 radsrv
#16 udpserverrd
#17 start_thread
#18 in clone3 ()
Radsecproxy version:
1.11.2
OpenSSL version:
OpenSSL 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024)
System:
Ubuntu 24.04.2 LTS
Please let me know if you need more info.